This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28498.roa File: AS28498.roa (raw, json) Hash identifier: Znut3Lu+GRujguRAfNysG6VMaB83OBzs/zuumWqM7oE= Subject key identifier: 63:99:6D:5E:AD:A4:CC:0A:43:1B:FF:0B:C6:D2:59:CB:9B:6E:2F:CD Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33 Certificate serial: 12BEC904642E95A69411C9682E0678D59D628998 Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28498.roa Signing time: Wed 31 Dec 2025 17:56:57 +0000 ROA not before: Wed 31 Dec 2025 17:51:57 +0000 ROA not after: Wed 30 Dec 2026 17:56:57 +0000 asID: 28498 IP address blocks: 200.23.1.0/24 maxlen: 24 200.94.176.0/24 maxlen: 24 2001:1201::/44 maxlen: 44 2001:1201::/48 maxlen: 48 2001:13c7:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 15:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:be:c9:04:64:2e:95:a6:94:11:c9:68:2e:06:78:d5:9d:62:89:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E5523033B41B7E990D9D490339137189366F33 Validity Not Before: Dec 31 17:51:57 2025 GMT Not After : Dec 30 17:56:57 2026 GMT Subject: CN=63996D5EADA4CC0A431BFF0BC6D259CB9B6E2FCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:0a:8d:f9:a2:65:65:6c:e8:8f:57:4f:2a: d9:aa:b6:d1:93:03:ee:34:9b:7f:e0:d5:26:88:96: a0:7b:23:30:f9:03:56:33:af:a6:dc:32:b0:f9:16: c3:9a:1c:e0:2b:34:3e:bd:72:12:03:05:f2:94:32: 54:8d:80:83:45:ea:36:2b:0d:fc:1e:68:88:e4:18: 86:9c:7e:7c:97:17:fb:87:8f:f7:cd:22:b7:f1:fe: 11:30:c1:47:2b:b9:75:2b:9b:31:9c:10:49:25:1e: ab:cd:d5:41:8a:40:c2:8b:09:61:31:25:c7:e8:67: f3:ae:14:c8:da:b2:79:48:b9:7a:fd:8e:e2:56:76: 71:38:50:3f:69:ad:72:ca:96:c6:96:d4:e4:56:0b: 25:7a:f9:d7:4a:a9:d5:3f:16:59:35:69:72:a0:02: 6a:8b:5f:bf:b2:0d:37:ef:fa:b7:52:3f:19:3a:fd: d9:aa:6f:83:b6:42:04:fd:3d:b6:08:2b:89:f6:4c: ca:26:45:a4:6c:bc:32:1a:5d:10:37:60:d7:55:ad: 76:45:34:77:87:77:0e:ea:7f:a9:3c:ae:ba:19:e9: 09:d9:63:9c:85:13:ab:09:61:8b:7b:a2:18:4f:b8: fe:7f:6a:1f:5c:ac:09:3e:d4:f0:75:d5:19:43:b2: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:99:6D:5E:AD:A4:CC:0A:43:1B:FF:0B:C6:D2:59:CB:9B:6E:2F:CD X509v3 Authority Key Identifier: keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28498.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.23.1.0/24 200.94.176.0/24 IPv6: 2001:1201::/44 2001:13c7:7000::/48 Signature Algorithm: sha256WithRSAEncryption 28:a8:7c:9e:49:ee:3f:8e:b5:a3:73:de:a7:6c:99:6d:24:3a: 91:46:29:f4:08:24:9b:64:b2:17:12:e4:e8:65:b0:48:d6:12: 33:37:0c:45:64:9e:6b:47:ad:b2:f3:d0:4b:00:5e:76:c2:23: cb:b0:3f:31:ea:13:f2:e4:b3:a1:29:41:33:8e:3e:d5:3d:2d: e4:15:5a:ae:4a:65:ea:4e:c0:c4:76:d7:c5:74:63:23:56:42: f8:a6:84:bb:72:80:e7:c2:8e:ec:e7:a0:6a:c8:ae:78:c1:63: 1b:9f:f9:a5:a9:e4:8c:14:e3:95:d8:a9:8d:50:d1:a1:70:60: 4f:30:d7:44:0c:61:04:7a:48:e9:e0:d5:65:da:14:e5:ae:60: 4f:da:8b:c8:79:24:14:e3:1f:b6:91:6e:ad:8a:f1:65:2a:06: 0e:97:6c:1e:3d:f3:54:61:16:e1:0a:3d:65:06:5d:2f:15:70: b7:71:5f:7d:2d:07:90:d7:3a:7f:6a:d0:da:87:00:d9:b1:8f: 7a:ba:8a:bf:77:29:af:ed:80:9a:84:24:b6:a2:a2:a5:d7:2f: eb:2b:69:0a:9e:79:4d:da:8c:e3:9e:b2:c3:1d:6b:1c:e8:ce: 37:f6:4b:95:45:59:08:4a:a0:81:52:1d:26:c2:b7:38:8c:fe: 11:25:98:f7 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgIUEr7JBGQulaaUEcloLgZ41Z1iiZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4 OTM2NkYzMzAeFw0yNTEyMzExNzUxNTdaFw0yNjEyMzAxNzU2NTdaMDMxMTAvBgNV BAMTKDYzOTk2RDVFQURBNENDMEE0MzFCRkYwQkM2RDI1OUNCOUI2RTJGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JAqN+aJlZWzoj1dPKtmqttGT A+40m3/g1SaIlqB7IzD5A1Yzr6bcMrD5FsOaHOArND69chIDBfKUMlSNgINF6jYr DfweaIjkGIacfnyXF/uHj/fNIrfx/hEwwUcruXUrmzGcEEklHqvN1UGKQMKLCWEx JcfoZ/OuFMjasnlIuXr9juJWdnE4UD9prXLKlsaW1ORWCyV6+ddKqdU/Flk1aXKg AmqLX7+yDTfv+rdSPxk6/dmqb4O2QgT9PbYIK4n2TMomRaRsvDIaXRA3YNdVrXZF NHeHdw7qf6k8rroZ6QnZY5yFE6sJYYt7ohhPuP5/ah9crAk+1PB11RlDso/RAgMB AAGjggK4MIICtDAdBgNVHQ4EFgQUY5ltXq2kzApDG/8LxtJZy5tuL80wHwYDVR0j BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3 RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZCQzA1MjEzOEZD OUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvQVMyODQ5OC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wEgQCAAEwDAMEAMgXAQME AMhesDAYBAIAAjASAwcEIAESAQAAAwcAIAETx3AAMA0GCSqGSIb3DQEBCwUAA4IB AQAoqHyeSe4/jrWjc96nbJltJDqRRin0CCSbZLIXEuToZbBI1hIzNwxFZJ5rR62y 89BLAF52wiPLsD8x6hPy5LOhKUEzjj7VPS3kFVquSmXqTsDEdtfFdGMjVkL4poS7 coDnwo7s56BqyK54wWMbn/mlqeSMFOOV2KmNUNGhcGBPMNdEDGEEekjp4NVl2hTl rmBP2ovIeSQU4x+2kW6tivFlKgYOl2wePfNUYRbhCj1lBl0vFXC3cV99LQeQ1zp/ atDahwDZsY96uoq/dymv7YCahCS2oqKl1y/rK2kKnnlN2ozjnrLDHWsc6M439kuV RVkISqCBUh0mwrc4jP4RJZj3 -----END CERTIFICATE-----Generated at Tue Jan 13 13:34:34 2026 by rpki-client