This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38382e302f32322d3234203d3e20333933363239.roa
File: 3230312e3232312e38382e302f32322d3234203d3e20333933363239.roa (raw, json)
Hash identifier: ZTFQSPXDWUaPGFenC3MZhJy+7/A/4PDCPFpNN6ZQRdM=
Subject key identifier: A2:30:97:E0:0C:4A:CF:6C:72:3B:72:9F:A1:01:8E:45:F7:D8:52:65
Certificate issuer: /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial: 5376818F5962A8C49ECD0A81186653B9BAF4D0D7
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38382e302f32322d3234203d3e20333933363239.roa
Signing time: Tue 06 Jan 2026 20:58:47 +0000
ROA not before: Tue 06 Jan 2026 20:53:47 +0000
ROA not after: Tue 05 Jan 2027 20:58:47 +0000
asID: 393629
IP address blocks: 201.221.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 15:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:76:81:8f:59:62:a8:c4:9e:cd:0a:81:18:66:53:b9:ba:f4:d0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Validity
Not Before: Jan 6 20:53:47 2026 GMT
Not After : Jan 5 20:58:47 2027 GMT
Subject: CN=A23097E00C4ACF6C723B729FA1018E45F7D85265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:84:a6:a0:8a:4b:64:83:18:d9:d0:07:fa:
f4:42:61:29:4d:52:f9:86:87:f6:49:52:cb:db:ed:
04:2b:32:1d:8f:53:78:66:cc:eb:c5:7c:3d:33:15:
ba:26:27:b6:cb:96:4d:7b:a4:ea:6c:c3:c3:db:b8:
68:ae:ad:13:2a:d5:a1:0e:c4:39:5b:17:a0:51:d1:
3e:6c:fc:55:dd:23:14:a2:32:56:c2:73:88:f6:53:
17:46:62:ba:e3:15:45:58:7a:45:04:db:a0:24:d8:
81:4b:c3:13:61:81:60:f1:64:5a:40:a7:61:17:e9:
6c:58:d1:d2:6d:73:e4:c6:0e:55:cb:e5:54:ff:cd:
34:45:ce:89:7a:cf:27:10:a2:4e:54:c6:7d:5d:84:
7a:31:d1:09:54:5c:91:d8:84:56:b7:2b:f4:4c:bd:
43:fe:88:4e:39:b3:5c:f4:df:92:82:7e:1c:59:2f:
fb:ec:68:4d:22:47:27:fa:6c:a8:82:6d:36:3e:e7:
13:26:ce:e0:80:3e:85:ec:d7:d5:1a:fc:ab:a9:0d:
b6:d0:ba:6e:83:ce:d9:11:42:ab:0b:13:ef:07:c1:
ca:fc:fc:38:a1:35:f7:2c:5d:81:a2:f1:8c:59:8a:
40:e0:47:74:ef:28:0e:03:2f:c7:7f:01:2f:5b:f7:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:97:E0:0C:4A:CF:6C:72:3B:72:9F:A1:01:8E:45:F7:D8:52:65
X509v3 Authority Key Identifier:
keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38382e302f32322d3234203d3e20333933363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:a4:95:67:56:00:34:15:f1:4e:40:7c:bd:2b:64:97:24:d7:
9c:f0:d3:0a:54:3f:da:be:e2:41:de:ee:73:fe:01:69:ca:99:
77:1a:82:f9:cb:c8:da:25:17:43:dc:13:c6:d9:14:c0:b1:8a:
6e:4f:6f:70:cb:a0:3e:32:2f:0e:02:ed:04:c7:76:ca:7b:d2:
6c:51:cf:83:55:0c:e6:07:7f:3a:78:00:43:78:03:88:6b:d3:
57:55:27:78:ee:2a:9b:15:d3:46:78:4a:c9:ac:78:3d:cf:51:
73:22:67:84:54:52:91:c8:e5:ca:30:cd:c1:e4:d4:35:be:af:
d2:46:4d:14:f7:1c:e4:e3:49:f1:96:23:27:f8:ec:0c:76:20:
7b:dc:00:96:32:54:a6:13:06:8c:0b:1a:8a:f1:0d:ec:ce:4f:
15:f7:16:7b:9f:9c:dd:6b:dd:1a:8b:d9:2f:39:68:51:d9:83:
07:85:c5:49:ce:4b:05:1e:74:8c:bb:26:10:f5:8b:69:76:ee:
74:71:7b:df:58:64:db:e7:e9:9c:85:06:72:eb:8b:97:d0:4a:
39:bf:5e:80:b9:5b:ab:be:9b:46:6f:30:39:fb:54:ca:00:29:
fb:1e:64:a5:f0:ad:b7:ba:26:ab:62:d3:14:01:61:34:51:d3:
44:4a:b6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:35:11 2026 by rpki-client