This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3133312e37322e302e302f32322d3234203d3e203238303735.roa
File: 3133312e37322e302e302f32322d3234203d3e203238303735.roa (raw, json)
Hash identifier: +5bh+KxntFZ12U99YkEHRMTJ58m9tj2ikDsgf+rZcmM=
Subject key identifier: B6:D1:ED:AA:17:07:C3:EB:92:18:51:4D:7B:2A:B4:78:DD:F0:25:9B
Certificate issuer: /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial: 32952C575009DCBD9A904D4DA3D6F07C5FCAE23B
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3133312e37322e302e302f32322d3234203d3e203238303735.roa
Signing time: Tue 06 Jan 2026 20:50:27 +0000
ROA not before: Tue 06 Jan 2026 20:45:27 +0000
ROA not after: Tue 05 Jan 2027 20:50:27 +0000
asID: 28075
IP address blocks: 131.72.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 16:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:95:2c:57:50:09:dc:bd:9a:90:4d:4d:a3:d6:f0:7c:5f:ca:e2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Validity
Not Before: Jan 6 20:45:27 2026 GMT
Not After : Jan 5 20:50:27 2027 GMT
Subject: CN=B6D1EDAA1707C3EB9218514D7B2AB478DDF0259B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:5e:8a:71:21:8f:85:fd:4f:2f:43:86:29:84:
be:31:81:17:67:06:59:9c:7c:47:f7:c8:11:57:23:
60:df:c5:f1:ea:df:83:f2:18:20:54:31:56:e4:a6:
9c:a1:8e:6e:a1:d4:58:82:4f:24:93:2d:c7:b4:18:
c0:91:f4:13:7d:c9:64:0e:b1:5d:da:f1:5b:a9:56:
76:a3:4e:42:6f:c5:4e:bc:ce:a9:3a:70:c4:f0:b3:
e6:97:19:84:b2:b1:db:d4:33:33:32:f3:8b:04:14:
fe:55:db:10:8b:0b:2e:bc:73:1a:29:66:a6:c6:97:
9d:1c:54:bc:8a:21:b5:2a:15:bc:0b:64:b2:2c:e3:
ea:f4:3c:cf:ed:8b:ab:6a:71:1b:ce:68:cd:7e:ed:
ec:98:36:55:7e:80:83:b3:be:98:58:15:92:ef:ac:
0d:a0:97:df:01:a6:27:d2:ab:f7:5a:77:0d:21:51:
c6:f8:16:04:32:a7:28:8a:0f:e1:43:8e:6b:25:22:
c7:fc:71:14:a4:47:a8:41:d7:20:0e:fd:cc:44:2d:
64:76:93:79:5a:e3:0d:f0:b3:bf:62:03:56:d4:3a:
12:3f:6e:0c:04:ad:cc:1d:b8:98:4d:b3:7d:b9:0a:
70:49:60:5a:0e:0a:4d:98:77:d2:7a:0f:d1:a3:19:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D1:ED:AA:17:07:C3:EB:92:18:51:4D:7B:2A:B4:78:DD:F0:25:9B
X509v3 Authority Key Identifier:
keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3133312e37322e302e302f32322d3234203d3e203238303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:9b:fe:1b:8e:b5:65:85:57:0a:fc:56:2b:5b:ea:64:7f:ce:
be:a5:6f:0f:3e:15:73:85:1b:4d:b9:a1:ff:c3:d6:21:1f:ca:
47:ae:bb:b8:d1:e2:bb:ce:0e:49:c4:e1:65:b8:21:6b:14:0b:
d4:96:ae:32:ae:d1:4e:fd:c7:97:52:e9:ac:43:80:19:a1:8b:
6c:25:39:7b:79:4b:4b:32:11:d4:f1:ed:85:3c:95:2e:88:ab:
ce:78:08:68:0d:0b:74:67:91:67:e5:65:21:84:25:db:67:1b:
db:39:cd:fc:2e:00:da:af:38:a6:6a:6d:66:28:e7:88:2e:80:
36:a0:54:23:0d:7b:43:42:df:b8:68:1f:62:af:29:0c:30:d9:
5c:1c:24:9d:c6:15:b9:90:f1:fc:5c:16:9f:96:1c:27:72:79:
d8:11:0b:1d:dd:59:95:20:db:ce:7a:45:c0:01:4d:dc:da:3f:
36:b5:fb:40:8a:6a:b7:c8:a5:ca:6c:80:07:81:dd:01:6a:85:
42:13:88:83:2c:32:b8:2b:c2:8d:3c:67:d5:c4:8b:49:8a:72:
43:b6:85:0c:29:d1:44:d5:14:5e:7d:e8:cf:10:98:29:4c:40:
c5:a2:20:8c:3c:ec:d5:0e:f9:76:95:73:dd:6e:5b:bf:7f:28:
39:7d:09:17
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUMpUsV1AJ3L2akE1No9bwfF/K4jswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NDN0RGQjJDN0M5RkNGMkYxMTQwNjE0NzZFQ0I4N0I1
NzNBNEUxODAeFw0yNjAxMDYyMDQ1MjdaFw0yNzAxMDUyMDUwMjdaMDMxMTAvBgNV
BAMTKEI2RDFFREFBMTcwN0MzRUI5MjE4NTE0RDdCMkFCNDc4RERGMDI1OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9XopxIY+F/U8vQ4YphL4xgRdn
BlmcfEf3yBFXI2DfxfHq34PyGCBUMVbkppyhjm6h1FiCTySTLce0GMCR9BN9yWQO
sV3a8VupVnajTkJvxU68zqk6cMTws+aXGYSysdvUMzMy84sEFP5V2xCLCy68cxop
ZqbGl50cVLyKIbUqFbwLZLIs4+r0PM/ti6tqcRvOaM1+7eyYNlV+gIOzvphYFZLv
rA2gl98BpifSq/dadw0hUcb4FgQypyiKD+FDjmslIsf8cRSkR6hB1yAO/cxELWR2
k3la4w3ws79iA1bUOhI/bgwErcwduJhNs325CnBJYFoOCk2Yd9J6D9GjGcx3AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUttHtqhcHw+uSGFFNeyq0eN3wJZswHwYDVR0j
BBgwFoAUzMffssfJ/PLxFAYUduy4e1c6ThgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjQ0OEIyRjk5Rjc1MERFRTRGQjM4MjBCRkRFRUE1QzA3
MEFDNzhBQzFEREVBRTRCQTVCNDcyQjU4MERBMjY0LzAvQ0NDN0RGQjJDN0M5RkNG
MkYxMTQwNjE0NzZFQ0I4N0I1NzNBNEUxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQ0M3REZCMkM3QzlGQ0YyRjEx
NDA2MTQ3NkVDQjg3QjU3M0E0RTE4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI0NDhCMkY5OUY3NTBERUU0RkIzODIwQkZERUVBNUMwNzBBQzc4QUMx
RERFQUU0QkE1QjQ3MkI1ODBEQTI2NC8wLzMxMzMzMTJlMzczMjJlMzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM4MzAzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg0gAMA0GCSqG
SIb3DQEBCwUAA4IBAQCam/4bjrVlhVcK/FYrW+pkf86+pW8PPhVzhRtNuaH/w9Yh
H8pHrru40eK7zg5JxOFluCFrFAvUlq4yrtFO/ceXUumsQ4AZoYtsJTl7eUtLMhHU
8e2FPJUuiKvOeAhoDQt0Z5Fn5WUhhCXbZxvbOc38LgDarzimam1mKOeILoA2oFQj
DXtDQt+4aB9irykMMNlcHCSdxhW5kPH8XBaflhwncnnYEQsd3VmVINvOekXAAU3c
2j82tftAimq3yKXKbIAHgd0BaoVCE4iDLDK4K8KNPGfVxItJinJDtoUMKdFE1RRe
fejPEJgpTEDFoiCMPOzVDvl2lXPdblu/fyg5fQkX
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:54:15 2026 by rpki-client