This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/3136382e3139372e3130302e302f32322d3234203d3e203237373539.roa
File: 3136382e3139372e3130302e302f32322d3234203d3e203237373539.roa (raw, json)
Hash identifier: xgVBuXxqP6Eer26H9mnfv739GzOh8UVPifrLb2ScsaQ=
Subject key identifier: 22:FF:3D:83:BC:E2:DB:C5:C4:B5:C5:82:DC:52:B6:EB:D4:8E:BB:19
Certificate issuer: /CN=32AE7493892249577E99292721D77996C23DC982
Certificate serial: 32CB1002643B1C11B4C0EB8FBBE7E5142A3267D7
Authority key identifier: 32:AE:74:93:89:22:49:57:7E:99:29:27:21:D7:79:96:C2:3D:C9:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/3136382e3139372e3130302e302f32322d3234203d3e203237373539.roa
Signing time: Thu 18 Dec 2025 20:20:00 +0000
ROA not before: Thu 18 Dec 2025 20:15:00 +0000
ROA not after: Thu 17 Dec 2026 20:20:00 +0000
asID: 27759
IP address blocks: 168.197.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.crl
rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 18:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cb:10:02:64:3b:1c:11:b4:c0:eb:8f:bb:e7:e5:14:2a:32:67:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32AE7493892249577E99292721D77996C23DC982
Validity
Not Before: Dec 18 20:15:00 2025 GMT
Not After : Dec 17 20:20:00 2026 GMT
Subject: CN=22FF3D83BCE2DBC5C4B5C582DC52B6EBD48EBB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:e4:7a:43:bc:96:c4:b3:1f:ea:16:31:68:
d4:bb:86:24:b5:b3:f0:d8:d3:87:b4:1e:c3:20:c9:
24:63:70:65:cf:a8:5c:e4:d5:0f:63:d7:bd:1d:fb:
b4:c0:4f:e6:97:39:8f:29:f1:80:fe:bb:ca:c2:ab:
99:40:15:29:71:38:94:18:da:5f:67:44:97:d1:c7:
86:27:f4:d8:53:32:f9:73:d6:4a:00:9a:05:d5:3b:
56:18:6e:ad:49:b5:dd:24:d0:0d:4d:b2:c9:33:dd:
4f:53:07:e2:3f:b1:f1:67:f9:4b:f8:88:39:9b:e9:
8d:15:d8:f6:f4:11:50:db:c3:32:84:ca:37:39:32:
64:33:d5:78:f6:12:4e:f2:eb:19:d6:16:74:c4:56:
e4:cf:e9:30:ca:48:ba:5d:0c:74:a2:06:68:b5:82:
40:cc:12:c5:32:8d:11:e9:c7:9b:66:73:89:f6:13:
08:49:22:af:65:33:f8:3f:21:b2:cd:7e:16:dc:8d:
fb:6e:2e:ad:2d:a6:bb:9c:1d:33:85:25:72:19:07:
e0:3c:77:9d:ab:a7:0f:60:ab:f0:db:ef:ba:4f:12:
04:b9:57:f9:2a:87:f5:4d:20:82:33:c7:48:fc:12:
f0:2d:02:03:6f:eb:a8:ca:e0:79:57:fe:e8:75:04:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FF:3D:83:BC:E2:DB:C5:C4:B5:C5:82:DC:52:B6:EB:D4:8E:BB:19
X509v3 Authority Key Identifier:
keyid:32:AE:74:93:89:22:49:57:7E:99:29:27:21:D7:79:96:C2:3D:C9:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/3136382e3139372e3130302e302f32322d3234203d3e203237373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.100.0/22
Signature Algorithm: sha256WithRSAEncryption
85:34:0b:49:35:dd:77:24:5e:fc:cc:15:02:2a:f5:fe:af:02:
6c:3c:9a:50:1f:6d:0f:3f:13:79:35:0c:23:a5:7f:bf:39:91:
b0:93:c4:12:51:6c:2c:fa:9a:e1:d1:99:e8:f2:60:e8:d9:80:
30:ab:4b:bb:b6:a3:b2:19:0d:70:c6:c8:27:e5:3e:86:1a:5b:
7c:81:52:39:d8:c4:5b:96:6c:7b:92:ab:fa:c1:96:e9:45:80:
0a:97:c0:1c:94:02:74:df:cd:df:1f:4f:83:de:ea:a1:98:21:
f7:34:7f:37:61:11:fd:bc:09:ae:6e:2e:f7:7f:28:5d:74:b3:
69:52:5f:e0:e1:30:2a:4c:c2:e0:c2:d8:d5:01:7a:88:48:e3:
59:80:9d:ee:17:81:89:90:c6:45:30:87:3d:ba:a5:23:51:c5:
c0:7f:01:aa:97:67:08:11:c9:e9:c2:f3:6a:07:0d:f8:cd:46:
8b:7b:df:73:09:ea:75:19:74:55:78:48:00:aa:d0:f8:c4:62:
33:9c:6b:cf:0a:3f:1a:7d:1f:7a:81:63:d1:7c:6d:de:99:37:
5f:8c:05:d6:b0:9d:5b:82:44:bf:53:05:b2:2d:b4:c8:a9:72:
b0:2a:e3:ed:cb:74:03:f1:2d:2e:4a:0c:ca:7c:97:ba:96:68:
73:49:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:52:22 2025 by rpki-client