This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/3230312e3135382e302e302f32312d3234203d3e203238353134.roa
File: 3230312e3135382e302e302f32312d3234203d3e203238353134.roa (raw, json)
Hash identifier: 2antrxF+gAlA7/8d77vgevgQx+le1b+6FkbKIJn3uIs=
Subject key identifier: 0C:23:08:75:E8:F2:F3:84:29:49:6B:8F:28:EA:2C:D8:85:DC:30:CA
Certificate issuer: /CN=89D9CC0470C7ACB3614E8823D17A127CC1796D04
Certificate serial: 14863DDFA23865090BDB4B4950D6497D88BE5DEF
Authority key identifier: 89:D9:CC:04:70:C7:AC:B3:61:4E:88:23:D1:7A:12:7C:C1:79:6D:04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/3230312e3135382e302e302f32312d3234203d3e203238353134.roa
Signing time: Tue 06 Jan 2026 19:36:54 +0000
ROA not before: Tue 06 Jan 2026 19:31:54 +0000
ROA not after: Tue 05 Jan 2027 19:36:54 +0000
asID: 28514
IP address blocks: 201.158.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl
rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 15:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:86:3d:df:a2:38:65:09:0b:db:4b:49:50:d6:49:7d:88:be:5d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89D9CC0470C7ACB3614E8823D17A127CC1796D04
Validity
Not Before: Jan 6 19:31:54 2026 GMT
Not After : Jan 5 19:36:54 2027 GMT
Subject: CN=0C230875E8F2F38429496B8F28EA2CD885DC30CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:64:85:8d:f7:49:d0:4a:51:e7:68:a0:08:
ab:dd:65:ff:dd:02:19:94:c9:b1:32:3b:5c:76:8d:
35:25:2c:85:7a:6d:4d:76:6b:9d:00:d3:ee:f8:a5:
02:8b:5c:12:31:0b:1e:6b:d4:47:d0:cd:b5:84:33:
92:e6:7f:0b:7b:54:d7:e3:a1:c9:9b:0b:86:a0:98:
cb:0f:f6:c5:ca:22:ed:82:6b:66:50:51:74:e4:72:
09:43:31:b6:1e:8d:b1:da:45:9e:29:5f:5d:09:6d:
1e:ea:8c:78:e5:d8:28:2b:13:2a:9e:a9:47:ca:9d:
e7:42:40:f2:3d:ba:00:1f:0b:a6:9d:42:7c:aa:b4:
2d:30:9b:7f:e3:8b:40:a8:b7:54:fc:4a:a4:2b:f8:
da:f2:4c:eb:73:4b:60:9b:2f:1d:a2:51:27:2c:c6:
23:0e:69:74:99:df:7b:3d:d1:11:5d:71:35:b5:0a:
15:33:1f:bc:39:a9:67:45:ea:bb:7a:f4:72:19:58:
55:51:4e:11:82:fd:60:7b:3d:e6:ab:c8:8d:c3:8f:
aa:75:b0:09:92:9d:1f:45:e9:f7:be:7e:73:a0:bc:
48:1b:24:06:83:4f:12:d8:4c:b2:63:35:58:cc:e3:
fc:f0:81:65:12:40:6d:fd:fd:68:80:74:97:4f:68:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:23:08:75:E8:F2:F3:84:29:49:6B:8F:28:EA:2C:D8:85:DC:30:CA
X509v3 Authority Key Identifier:
keyid:89:D9:CC:04:70:C7:AC:B3:61:4E:88:23:D1:7A:12:7C:C1:79:6D:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89D9CC0470C7ACB3614E8823D17A127CC1796D04.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3AC68835EBE1625D6705AEADC471DF09BB310D346C6A18C8920CCF13A3D75B/0/3230312e3135382e302e302f32312d3234203d3e203238353134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.0.0/21
Signature Algorithm: sha256WithRSAEncryption
de:51:50:e4:ec:39:1f:20:07:7f:d8:cb:42:7d:79:5b:4f:64:
1b:36:0d:a1:63:fc:16:68:ce:4e:78:6f:69:ce:3e:57:42:c9:
1b:e0:31:a8:c4:70:c7:16:00:b4:0d:f7:22:c3:82:10:b9:3a:
65:8b:ef:54:03:f1:9b:93:33:c3:31:b1:d8:42:53:e2:a7:36:
25:1e:05:42:ab:89:58:c0:ac:dc:5d:7a:d8:97:43:b2:c3:c6:
73:cb:bb:7b:78:a8:8a:71:06:f8:50:ec:80:b5:41:c8:b1:e0:
e7:53:75:9a:f8:63:fc:b0:df:0d:1e:79:48:01:21:e9:96:08:
fc:e1:34:26:82:77:fb:94:c2:bd:ca:83:e8:f5:9e:2c:5d:e5:
8f:68:95:ce:cd:8e:ac:8f:81:f1:e3:8d:54:06:4b:db:1f:6f:
1a:d0:05:87:49:3a:0c:33:5d:74:d7:27:b2:bc:bc:05:15:9e:
9d:0e:c1:c3:86:2b:45:01:b3:79:ca:28:b6:d6:1f:e1:27:9b:
4d:17:08:0c:80:69:26:55:aa:48:de:68:bb:1d:46:e7:ab:66:
f4:e0:6d:1e:78:1c:b2:c2:fa:22:7c:32:a7:3e:04:16:41:1c:
c9:38:79:33:f2:21:94:51:97:3b:0c:62:41:0e:ec:31:6f:34:
c3:ee:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:34:26 2026 by rpki-client