This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32332d3233203d3e20323635373436.roa
File: 3132382e3230312e3136382e302f32332d3233203d3e20323635373436.roa (raw, json)
Hash identifier: cv+py8cuM+qPiMhUnk3GeVzv/D88zZCpd4t2uOcs02w=
Subject key identifier: 02:92:5E:5E:C1:E4:84:C2:81:4B:2F:CA:FB:35:8F:28:A4:74:65:28
Certificate issuer: /CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Certificate serial: 63420A93209B8D04CDD48A3485A9AB5608C9523B
Authority key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32332d3233203d3e20323635373436.roa
Signing time: Tue 06 Jan 2026 19:28:49 +0000
ROA not before: Tue 06 Jan 2026 19:23:49 +0000
ROA not after: Tue 05 Jan 2027 19:28:49 +0000
asID: 265746
IP address blocks: 128.201.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl
rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:42:0a:93:20:9b:8d:04:cd:d4:8a:34:85:a9:ab:56:08:c9:52:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Validity
Not Before: Jan 6 19:23:49 2026 GMT
Not After : Jan 5 19:28:49 2027 GMT
Subject: CN=02925E5EC1E484C2814B2FCAFB358F28A4746528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:20:20:e6:24:19:d1:12:8e:f1:e6:16:1d:
fd:48:1a:ae:6a:64:59:ce:aa:f2:75:56:fa:31:30:
d8:f2:e5:9a:85:e4:45:86:95:3d:1e:7d:d0:e5:b1:
de:2c:ce:c2:bb:f3:ed:95:e7:91:61:77:bf:7e:e7:
c4:d6:c4:b9:22:80:70:3d:f2:54:48:b6:e1:26:17:
33:63:de:19:f1:b9:d6:f7:4f:30:ca:62:8d:99:38:
f2:d8:9d:04:6c:eb:93:01:8c:61:2a:c7:eb:f1:e5:
3d:70:75:c2:2a:53:8f:97:d0:e5:7b:6e:b5:fb:79:
5f:53:c6:14:54:b9:bc:28:22:f4:a2:14:ee:38:b0:
9d:6c:16:59:9e:24:74:b4:a1:6d:23:a7:c6:86:0a:
96:7c:c6:ec:99:cc:fe:43:cf:5f:23:c9:77:32:8a:
b1:80:f7:00:9b:d5:5c:78:3a:61:ff:57:0d:40:ef:
98:9d:8d:df:c7:64:65:6b:8b:cd:1e:57:ae:a5:85:
5d:7c:40:8b:22:0e:cb:3d:c5:0f:06:09:fd:7f:83:
07:7c:39:49:20:2c:93:1d:37:9c:e5:b3:a8:1d:58:
82:76:6c:f6:b2:30:7c:f5:d0:30:93:b0:de:1e:ae:
d4:d7:21:41:d0:ec:14:8b:c2:bb:12:53:8f:62:0e:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:92:5E:5E:C1:E4:84:C2:81:4B:2F:CA:FB:35:8F:28:A4:74:65:28
X509v3 Authority Key Identifier:
keyid:D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32332d3233203d3e20323635373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.168.0/23
Signature Algorithm: sha256WithRSAEncryption
80:3e:31:df:d7:e4:26:c6:70:b9:0d:34:ff:a1:51:9c:7e:c3:
f8:48:53:27:b2:f1:e2:7f:c5:20:f0:0e:1d:93:de:0c:1a:be:
ff:e4:7e:8a:da:a4:82:4b:3d:6e:18:d3:ca:9f:3a:5f:a8:f3:
99:1d:23:84:cf:4b:05:34:fa:9d:f6:04:fe:bc:77:49:e0:ee:
a5:9f:14:79:0e:84:17:ae:17:f6:ab:1f:74:12:07:ef:5c:59:
d7:04:f1:46:58:c6:99:57:91:f4:43:44:b9:e7:ff:46:4c:4e:
78:a1:99:86:2b:96:1f:86:fa:9d:3d:10:5e:15:40:94:fe:ba:
ac:fc:7a:ef:71:87:bc:5b:fd:a4:b7:06:9d:68:8b:76:55:f9:
b5:9f:d1:c7:9e:7f:24:cf:97:ec:47:36:07:bc:a1:a2:64:73:
ca:68:d1:9b:19:71:a4:c9:40:f0:ed:d0:06:ce:33:cf:cf:11:
98:dc:be:61:d5:8e:87:9f:c5:a7:3d:38:28:cc:f6:03:f9:1d:
a5:98:f8:eb:b3:0d:fd:40:20:10:3b:96:97:11:85:f4:9a:2e:
e2:62:96:e2:c9:85:08:c2:70:8f:71:20:39:95:1f:bf:07:7a:
6a:5e:32:da:4a:46:59:24:28:78:3d:dc:58:0a:77:12:e2:66:
b3:25:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:34:20 2026 by rpki-client