This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e39392e302f32342d3234203d3e203237373432.roa
File: 3136352e39382e39392e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier: kJUKR8bHmGE5xxqNYHNkg2u1lE2qapjJyZPpTKRvyA0=
Subject key identifier: F8:9B:9B:E7:AA:ED:D1:28:3D:D5:D3:CA:B4:E0:62:7D:DC:50:3E:E2
Certificate issuer: /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial: 27ADEC98924ACC5C6ECB0877B21C224EBCFEB306
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e39392e302f32342d3234203d3e203237373432.roa
Signing time: Fri 28 Nov 2025 17:35:00 +0000
ROA not before: Fri 28 Nov 2025 17:30:00 +0000
ROA not after: Fri 27 Nov 2026 17:35:00 +0000
asID: 27742
IP address blocks: 165.98.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 12 Dec 2025 17:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ad:ec:98:92:4a:cc:5c:6e:cb:08:77:b2:1c:22:4e:bc:fe:b3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Validity
Not Before: Nov 28 17:30:00 2025 GMT
Not After : Nov 27 17:35:00 2026 GMT
Subject: CN=F89B9BE7AAEDD1283DD5D3CAB4E0627DDC503EE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:e5:43:a5:63:09:98:eb:2f:0d:27:1e:00:
1d:1a:60:ca:d4:83:36:a0:27:53:75:60:40:ba:67:
15:31:2a:68:0b:15:ed:85:1b:b4:54:69:f4:2a:3c:
5f:da:34:1f:ed:22:79:e4:07:1c:97:6b:08:08:2f:
db:40:df:01:5e:eb:7a:42:06:82:6c:23:cf:73:6d:
9c:e5:21:b7:c9:1d:59:c9:61:d1:07:00:c2:b9:9e:
48:26:f5:4f:1b:54:ab:cb:16:d3:cd:96:aa:9a:7f:
ac:57:6d:92:aa:0c:93:b4:88:f4:e3:17:be:d1:c6:
f2:49:9c:16:49:c0:48:0b:45:28:3e:a4:75:a0:75:
df:54:35:31:1e:b4:62:f6:86:de:9e:f2:fa:8c:e0:
33:cd:85:3c:e4:97:6a:d8:07:7a:c8:84:75:17:cc:
fa:71:7b:51:33:0c:20:d7:ca:50:37:ad:07:e7:12:
9c:f3:bb:22:4a:15:39:e1:f9:b3:2e:85:54:2b:98:
3d:5b:74:77:24:fd:47:f1:38:07:96:93:ff:64:a2:
68:a5:72:ae:b5:9b:8f:80:ad:09:fc:40:48:7d:4e:
80:e1:b6:5f:3c:9d:c9:6e:93:2d:fd:88:0f:1a:38:
b7:c4:d3:d7:42:90:b3:b8:5a:a0:fc:54:89:f9:70:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9B:9B:E7:AA:ED:D1:28:3D:D5:D3:CA:B4:E0:62:7D:DC:50:3E:E2
X509v3 Authority Key Identifier:
keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e39392e302f32342d3234203d3e203237373432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.98.99.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:4d:3d:b2:b3:1d:a7:e3:57:cf:97:9d:65:15:56:32:01:15:
12:0d:15:62:dc:5e:b9:62:bb:49:72:24:3b:fa:b5:a6:d1:cf:
35:e2:fa:9b:67:d3:07:25:6f:ee:ac:85:51:97:c3:99:c8:62:
2a:9d:8c:0d:88:67:d1:39:f4:41:93:69:a4:55:cc:d0:0b:67:
58:fd:f1:34:fd:3f:a9:02:b1:75:0b:12:aa:05:70:e0:26:05:
dc:04:30:88:f7:d1:84:74:3a:6d:aa:28:0f:e6:a4:d3:e5:ec:
5d:b6:2e:19:91:e6:ff:0e:4e:a1:16:26:65:a9:37:bb:df:47:
73:7e:4d:59:8d:ce:ef:ca:9c:10:a6:fc:fa:c3:29:af:ac:dd:
81:db:f9:3c:b9:a6:b0:71:73:4b:1c:34:83:5f:79:f8:e2:40:
28:32:0c:12:92:07:f1:cb:90:bf:9c:66:e5:ad:83:97:73:78:
9f:37:b4:9d:14:47:23:9d:93:f4:1f:ed:fa:ce:a9:85:88:c9:
4a:20:9e:a4:2f:3c:b8:31:19:a4:4a:18:1a:87:3f:f8:9b:e4:
25:02:a6:80:25:f3:fa:0f:be:60:98:40:75:81:42:e4:1d:9b:
e0:a5:6a:37:37:a2:82:86:31:dc:83:97:c9:32:81:2d:6f:15:
ae:83:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 10:29:44 2025 by rpki-client