This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e2033333536.roa
File: 3230312e3139322e302e302f31322d3234203d3e2033333536.roa (raw, json)
Hash identifier: P21E4+wpMQ/ksGpQCDsdN8+ps2AkEESn4FQqXjewLsU=
Subject key identifier: 42:F2:11:B7:F8:FF:7F:34:BE:11:27:9E:96:75:4D:34:09:29:D3:28
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 75DDD8894C19EE74414D48682607168CE0BBC770
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e2033333536.roa
Signing time: Tue 06 Jan 2026 19:30:35 +0000
ROA not before: Tue 06 Jan 2026 19:25:35 +0000
ROA not after: Tue 05 Jan 2027 19:30:35 +0000
asID: 3356
IP address blocks: 201.192.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 01:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:dd:d8:89:4c:19:ee:74:41:4d:48:68:26:07:16:8c:e0:bb:c7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Jan 6 19:25:35 2026 GMT
Not After : Jan 5 19:30:35 2027 GMT
Subject: CN=42F211B7F8FF7F34BE11279E96754D340929D328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:8a:da:c5:24:21:d1:20:d8:3e:d3:d2:aa:
b1:f7:a5:83:4a:e8:93:1e:d3:8a:77:af:d9:1b:c0:
7a:46:9d:00:b9:36:95:53:fa:b9:38:63:70:c9:54:
87:88:01:3a:b7:44:b3:23:05:d9:34:c6:c0:78:ab:
7b:92:67:ed:67:92:02:5e:98:46:d1:46:42:4e:db:
0b:f9:d8:6b:7b:f5:f5:a9:43:46:3a:98:39:65:18:
91:8b:0e:e8:6b:01:cc:aa:2f:39:0b:c1:36:26:ed:
70:39:a4:16:85:cd:1c:56:b0:7c:e7:b8:b7:8a:b0:
e0:d9:87:6a:8d:a0:a6:0d:94:30:2a:15:1d:bb:ae:
78:6f:c5:76:34:64:ca:3b:0e:56:60:2c:7d:9a:2c:
cf:b6:f0:c7:46:96:9c:dd:6b:21:e3:ef:ce:14:31:
ff:64:8d:1a:32:f0:ef:0b:5e:48:9d:b8:67:a0:99:
96:4a:19:3b:00:cd:8f:83:6c:9f:23:b1:15:89:d6:
50:61:de:e2:83:25:f0:29:15:2e:f2:f1:59:c4:d4:
8e:1f:27:68:b4:ec:db:11:e8:00:71:22:46:19:90:
dc:9e:8b:d7:40:aa:98:aa:38:c5:93:62:35:03:d2:
ee:8a:bf:58:cb:25:d3:75:6e:fc:99:97:29:d9:6f:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F2:11:B7:F8:FF:7F:34:BE:11:27:9E:96:75:4D:34:09:29:D3:28
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.192.0.0/12
Signature Algorithm: sha256WithRSAEncryption
93:7e:6d:5c:73:f7:75:35:45:03:74:16:da:54:ae:2c:0b:e5:
3d:73:d8:39:c2:cd:cf:51:04:87:f9:0f:4b:43:17:fd:2d:3c:
af:57:1e:99:de:59:75:d0:f7:d4:3c:c9:56:b2:4a:09:5e:4c:
91:9e:a0:6c:ac:6b:a0:54:01:9e:bb:2d:99:18:1c:48:80:ed:
dd:be:aa:0b:71:80:9b:a3:cb:4a:eb:eb:b6:bb:75:fe:53:e9:
ac:4b:41:82:38:32:5f:c4:8e:aa:63:19:d1:c0:53:b1:7b:60:
b5:9a:63:1a:eb:7d:a6:ba:46:fd:e1:40:a0:a9:21:23:d8:d3:
bd:d1:b0:48:26:08:e1:ba:59:3a:e0:f3:66:f9:56:9d:4c:c8:
25:c6:39:2a:32:1a:2f:9d:e7:ae:18:25:62:cc:b1:ec:7e:b1:
56:56:63:98:55:64:b6:2d:bc:80:a7:93:f3:5e:70:79:88:19:
9d:12:38:4e:c9:f0:b2:63:38:ec:e7:07:0a:9c:52:ba:21:74:
3c:19:9a:d4:27:b0:37:e5:f7:7f:aa:2b:6d:2b:af:3c:36:56:
e5:e0:91:2b:13:78:3e:01:f5:3d:78:45:10:31:c7:4b:b5:19:
37:0e:28:a0:8f:a2:eb:b4:79:63:44:f2:e6:78:01:46:f1:00:
ec:d6:27:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:34:23 2026 by rpki-client