This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28497.roa
File: AS28497.roa (raw, json)
Hash identifier: FLtIncqVKUWjCFaPYMuPzWRk4p+j8Q7HjTI1QG3Kmno=
Subject key identifier: 6D:94:64:BD:54:29:E0:26:CA:7D:7C:00:6B:14:0E:2C:9D:4B:04:48
Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial: 1CE4C26EF7F58AE95FFB9AB724519F5C72284FFC
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28497.roa
Signing time: Wed 31 Dec 2025 17:56:58 +0000
ROA not before: Wed 31 Dec 2025 17:51:58 +0000
ROA not after: Wed 30 Dec 2026 17:56:58 +0000
asID: 28497
IP address blocks: 200.33.0.0/24 maxlen: 24
2001:13c7:7014::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 15:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e4:c2:6e:f7:f5:8a:e9:5f:fb:9a:b7:24:51:9f:5c:72:28:4f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
Validity
Not Before: Dec 31 17:51:58 2025 GMT
Not After : Dec 30 17:56:58 2026 GMT
Subject: CN=6D9464BD5429E026CA7D7C006B140E2C9D4B0448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:05:f3:0b:84:f8:e6:40:ee:89:33:12:d3:
ac:4e:39:23:1a:35:31:df:d0:53:49:90:d8:fb:c0:
32:a3:6c:b7:04:a7:ae:d1:16:85:fa:8c:b5:05:9c:
75:97:23:5f:d9:b5:4d:07:4d:13:b7:49:a2:5f:2e:
62:cc:80:3b:b5:04:f7:ab:90:a1:6f:ee:e7:6f:1d:
a6:a7:19:cb:9c:5a:ae:94:35:73:d1:38:eb:cf:17:
eb:6b:05:2a:89:d8:92:d3:b6:22:1c:9d:dc:fa:c5:
87:02:cc:f0:d9:94:87:b6:af:95:07:bd:f2:a3:18:
33:10:b5:34:4b:51:0c:30:22:ad:6d:e1:31:31:21:
73:ea:9f:41:f7:9c:bf:54:5c:29:87:f8:2f:9a:6e:
cb:43:5b:e6:f9:5d:ea:3a:df:1d:de:01:85:fd:23:
10:12:53:76:47:b9:67:ce:8b:1c:d7:b0:46:77:ff:
55:50:88:81:e8:52:84:88:16:98:9e:80:0d:2c:28:
35:70:37:c1:70:cd:88:d4:b6:05:bd:7f:41:0c:34:
be:b2:81:fd:2d:fa:21:73:11:f9:86:60:8d:cb:cc:
64:25:f9:b8:3e:fb:ff:7d:ae:f7:ef:6c:a5:d4:3c:
89:fe:50:ff:52:32:06:48:43:d8:75:fa:30:23:0a:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:94:64:BD:54:29:E0:26:CA:7D:7C:00:6B:14:0E:2C:9D:4B:04:48
X509v3 Authority Key Identifier:
keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.0.0/24
IPv6:
2001:13c7:7014::/48
Signature Algorithm: sha256WithRSAEncryption
4a:9a:12:26:42:a6:fa:3a:f7:38:4a:41:39:f2:be:de:11:ed:
f6:48:e3:83:c3:c1:d6:ea:18:db:d2:94:65:a5:21:17:aa:06:
8a:4c:8f:ad:93:46:b4:41:b6:2f:76:3d:bb:79:20:f1:57:1b:
c9:de:d4:48:ec:dc:83:38:be:ea:12:26:1d:ac:02:19:dc:4f:
c5:b6:53:cd:0e:43:08:b4:ed:af:06:cd:b4:ca:d9:c7:81:aa:
d0:34:0d:fd:03:6b:c1:34:29:6c:0a:61:f8:fa:5e:f9:9f:ca:
cb:cf:2c:16:e1:5f:f9:60:de:29:63:c8:a0:ad:1a:46:40:f8:
f8:ee:14:a8:8e:36:81:81:57:54:61:72:11:25:10:95:d2:e3:
ec:23:7e:5b:e4:0c:d7:54:58:b4:e8:88:24:2b:9c:53:51:9b:
8e:7b:43:1d:f3:2b:28:f5:0f:52:a6:52:fe:e8:4f:70:1b:49:
3d:f0:3f:9b:36:2b:80:2d:ea:84:08:d6:47:b2:1c:e8:21:16:
b4:7a:88:dd:cd:d6:10:89:25:f8:ef:52:f4:f5:87:4d:e3:95:
92:5f:8c:e0:07:65:18:b0:05:2b:fc:e9:15:71:0b:61:d9:c4:
2c:8b:d4:a8:62:5c:d6:fe:1b:3a:4b:8d:4d:7f:1a:9d:fe:98:
ed:2b:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:36:53 2026 by rpki-client