
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28548.roa
File: AS28548.roa (raw, json)
Hash identifier: lIHi/wh8QvXJG3gIJH4WzIwT7AGt6ZTIrPDR7o7yyJU=
Subject key identifier: 0B:9A:EB:4F:D3:CC:80:3F:BE:31:8D:5C:4E:C8:D5:0C:5A:AA:D8:B4
Certificate issuer: /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial: 639D46BA75D83E5E15B05B796DA119C4749906E6
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28548.roa
Signing time: Wed 20 May 2026 05:10:00 +0000
ROA not before: Wed 20 May 2026 05:05:00 +0000
ROA not after: Wed 19 May 2027 05:10:00 +0000
asID: 28548
IP address blocks: 187.185.96.0/20 maxlen: 20
187.185.240.0/20 maxlen: 21
189.215.32.0/21 maxlen: 21
189.215.201.0/24 maxlen: 24
189.221.156.0/24 maxlen: 24
2806:219:100::/44 maxlen: 48
2806:219:300::/45 maxlen: 45
2806:250:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 27 May 2026 07:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:9d:46:ba:75:d8:3e:5e:15:b0:5b:79:6d:a1:19:c4:74:99:06:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Validity
Not Before: May 20 05:05:00 2026 GMT
Not After : May 19 05:10:00 2027 GMT
Subject: CN=0B9AEB4FD3CC803FBE318D5C4EC8D50C5AAAD8B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:e2:96:e6:44:ba:7c:1e:2a:bd:47:09:02:
07:a1:a5:6b:35:e6:82:1b:af:97:ab:dc:2f:b7:30:
44:f1:9a:9f:5d:b2:e1:18:cd:72:54:1b:f0:4e:4a:
d9:73:f2:a8:33:93:e2:4c:d2:d3:41:1e:8b:50:06:
5b:18:a1:54:af:bb:fb:e8:9f:6c:d5:31:2a:b2:0d:
2a:44:57:0d:58:d4:40:46:d9:71:07:99:32:94:ff:
ca:de:fb:71:c1:53:86:e8:c9:2b:6e:8e:68:51:f7:
d6:5e:ac:36:a7:dd:51:0a:a6:c0:b2:68:44:84:ca:
e6:d3:dd:60:84:cf:b7:6b:1e:51:eb:ed:d0:f8:9e:
3d:94:83:5a:fb:69:29:1c:4b:01:73:ba:84:1e:99:
57:3e:d5:0f:eb:c3:ba:51:56:99:ca:e6:0d:bb:f8:
64:4f:30:e9:90:91:d9:bb:88:ec:51:18:33:72:69:
cd:82:5c:7e:73:c7:7c:6b:bc:67:b8:bb:97:c9:bd:
55:ed:51:03:e7:e8:56:c0:c5:9f:04:a5:c1:b1:b0:
a9:45:76:fc:c2:71:d6:e7:d4:01:08:ef:08:20:be:
10:56:7a:4c:61:d9:e4:87:37:ea:ed:be:89:f5:3e:
23:a1:f3:e2:2f:d7:7f:a6:06:f2:84:fd:ea:92:b1:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9A:EB:4F:D3:CC:80:3F:BE:31:8D:5C:4E:C8:D5:0C:5A:AA:D8:B4
X509v3 Authority Key Identifier:
keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.185.96.0/20
187.185.240.0/20
189.215.32.0/21
189.215.201.0/24
189.221.156.0/24
IPv6:
2806:219:100::/44
2806:219:300::/45
2806:250:a::/48
Signature Algorithm: sha256WithRSAEncryption
8e:62:aa:8f:8a:4b:b8:b4:f3:2a:50:e5:53:4f:1b:40:c0:2e:
06:62:42:48:82:7b:4f:4b:8a:35:35:3a:24:20:98:9b:b2:29:
9c:2a:c2:c1:b0:3f:57:87:dd:56:ea:88:d4:a2:ca:8c:f8:22:
21:39:3f:0d:2f:5a:b2:a6:b5:4c:46:0c:00:c5:6b:47:04:6f:
7a:30:9f:ea:a4:34:9f:ae:2e:4c:80:fa:0b:91:9c:f2:40:e1:
b9:9e:ca:71:a6:d4:04:bd:8d:d0:b9:ae:9c:eb:42:c9:29:99:
29:83:ec:df:97:b9:ea:59:c4:88:56:89:49:4c:aa:3a:d3:31:
8e:a8:17:40:ca:b8:6b:07:5d:84:a6:e5:b2:2e:e8:93:2c:e0:
15:65:f7:4e:2c:c7:9a:e4:58:f8:3a:3c:76:d2:31:72:9e:df:
31:d3:d8:d7:ae:df:3a:15:66:0a:9e:e4:a7:57:7c:db:8b:98:
c7:c3:9c:69:37:30:b8:fa:52:6f:de:0b:bc:33:2e:9c:8a:06:
49:4c:7d:b3:c9:f7:1e:4c:a0:4c:c1:b9:6c:74:bb:5c:10:3e:
33:3e:12:cd:4a:53:fe:2b:87:3f:3c:20:e3:bd:5a:f4:9b:57:
42:6b:53:af:d2:5b:3c:48:79:a6:14:71:44:59:32:b4:f0:02:
17:e4:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:50:11 2026 by rpki-client