This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28511.roa
File: AS28511.roa (raw, json)
Hash identifier: M5sjezQKAjDjqns8wgnM2FnCSAYEWbPPzv0vxUbD1sU=
Subject key identifier: C4:5C:64:42:2A:A1:31:2A:AD:11:72:5B:FC:7C:B1:81:3D:E5:89:BD
Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial: 52B6048D1F9CC727DC418D546FC908F0D19C5F9C
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28511.roa
Signing time: Wed 31 Dec 2025 17:56:56 +0000
ROA not before: Wed 31 Dec 2025 17:51:56 +0000
ROA not after: Wed 30 Dec 2026 17:56:56 +0000
asID: 28511
IP address blocks: 200.33.80.0/24 maxlen: 24
201.131.248.0/24 maxlen: 24
201.131.249.0/24 maxlen: 24
201.131.250.0/24 maxlen: 24
201.131.251.0/24 maxlen: 24
207.248.64.0/24 maxlen: 24
207.248.65.0/24 maxlen: 24
2001:1250:1000::/44 maxlen: 44
2001:1250:2000::/44 maxlen: 44
2001:1250:3000::/44 maxlen: 44
2001:1250:a000::/44 maxlen: 44
2001:1250:b000::/44 maxlen: 44
2001:1250:c000::/44 maxlen: 44
2001:1250:fe00::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 15:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b6:04:8d:1f:9c:c7:27:dc:41:8d:54:6f:c9:08:f0:d1:9c:5f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
Validity
Not Before: Dec 31 17:51:56 2025 GMT
Not After : Dec 30 17:56:56 2026 GMT
Subject: CN=C45C64422AA1312AAD11725BFC7CB1813DE589BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:b0:73:73:9d:f4:e4:49:ee:24:d4:c4:0a:
3f:56:a7:48:39:65:a9:51:08:a7:17:95:2d:ed:92:
77:78:ee:29:de:59:fe:4b:16:96:57:e8:ae:3f:72:
4d:91:d9:a7:d5:4c:64:5f:9a:64:10:68:db:06:7b:
c6:e0:21:97:7e:1c:fb:06:1c:5a:54:ad:d1:f5:30:
23:da:9e:9c:e9:07:52:e4:f7:24:5c:bb:be:b1:82:
41:9e:71:0b:1c:ac:1b:bd:fa:62:2d:b6:3a:5c:fb:
3e:c4:78:ae:63:78:75:f3:36:b5:2e:f9:90:bd:bc:
14:ab:b9:5d:ee:67:5b:72:e2:03:f0:96:1a:8d:4a:
18:1c:f1:c4:f1:cf:99:b2:33:67:24:01:56:aa:2d:
15:27:2e:39:25:fb:0b:d5:a2:e4:a5:01:50:ec:50:
fe:cd:65:c3:37:47:71:55:29:64:40:7b:c4:54:a9:
0a:f0:b9:c8:0a:59:0e:5a:af:da:62:6a:1e:a4:44:
99:54:01:2f:1b:ea:77:5d:d5:27:9a:ad:58:7d:84:
f9:a8:8e:1d:23:f7:b9:d6:e8:b1:5d:17:90:ba:3c:
67:4c:39:78:b3:e0:dc:e2:ef:46:de:92:6f:4d:e3:
70:12:ff:1f:ec:72:a9:3c:51:80:4e:a1:55:b1:b7:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:64:42:2A:A1:31:2A:AD:11:72:5B:FC:7C:B1:81:3D:E5:89:BD
X509v3 Authority Key Identifier:
keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.80.0/24
201.131.248.0/22
207.248.64.0/23
IPv6:
2001:1250:1000::/44
2001:1250:2000::/44
2001:1250:3000::/44
2001:1250:a000::/44
2001:1250:b000::/44
2001:1250:c000::/44
2001:1250:fe00::/48
Signature Algorithm: sha256WithRSAEncryption
08:8f:0f:1d:3a:f2:62:7e:e6:1b:c3:ff:62:33:5f:19:cd:a6:
3d:e8:62:be:f8:cb:8d:0d:95:29:76:ed:76:3e:e3:0f:d0:83:
01:42:23:28:61:df:1b:25:2f:35:49:e0:f3:7b:bb:e3:8e:34:
f6:1d:87:64:20:34:b0:dc:8d:c3:87:d7:53:a7:22:d6:4e:71:
f5:ee:47:e5:8b:f4:82:a7:e0:07:c6:25:32:d1:2b:f4:0e:cf:
b4:45:2f:1b:97:f6:d3:ce:05:ad:08:f7:ef:75:cf:4e:2f:b0:
73:27:1b:95:00:77:c4:82:44:e7:b2:d9:67:9b:b3:4c:81:2c:
90:b5:20:d3:0b:43:cf:92:91:2d:12:68:7f:bb:d6:8d:19:2e:
b8:2f:f8:4a:91:55:08:cf:1c:55:93:8d:ca:dd:d8:44:09:df:
86:df:27:f1:ff:a3:03:c0:b2:00:87:6b:eb:bb:60:c0:7d:37:
07:15:95:e0:53:1e:6a:43:16:9f:3c:40:75:e9:74:2d:72:cf:
eb:77:f2:24:5d:c6:22:e0:19:b3:73:5a:5e:91:cf:db:c0:47:
aa:b4:75:1c:b1:78:db:a1:2d:ad:e7:e2:fb:78:80:0e:39:c5:
67:62:b0:95:a8:fd:0c:05:ff:c7:1a:c3:b4:e3:e9:da:4b:8e:
d3:85:97:1f
-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgIUUrYEjR+cxyfcQY1Ub8kI8NGcX5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4
OTM2NkYzMzAeFw0yNTEyMzExNzUxNTZaFw0yNjEyMzAxNzU2NTZaMDMxMTAvBgNV
BAMTKEM0NUM2NDQyMkFBMTMxMkFBRDExNzI1QkZDN0NCMTgxM0RFNTg5QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbSLBzc5305EnuJNTECj9Wp0g5
ZalRCKcXlS3tknd47ineWf5LFpZX6K4/ck2R2afVTGRfmmQQaNsGe8bgIZd+HPsG
HFpUrdH1MCPanpzpB1Lk9yRcu76xgkGecQscrBu9+mIttjpc+z7EeK5jeHXzNrUu
+ZC9vBSruV3uZ1ty4gPwlhqNShgc8cTxz5myM2ckAVaqLRUnLjkl+wvVouSlAVDs
UP7NZcM3R3FVKWRAe8RUqQrwucgKWQ5ar9piah6kRJlUAS8b6ndd1SearVh9hPmo
jh0j97nW6LFdF5C6PGdMOXiz4Nzi70bekm9N43AS/x/scqk8UYBOoVWxt6P9AgMB
AAGjggLrMIIC5zAdBgNVHQ4EFgQUxFxkQiqhMSqtEXJb/HyxgT3lib0wHwYDVR0j
BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC
QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3
RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw
RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZCQzA1MjEzOEZD
OUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvQVMyODUxMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjByBggrBgEFBQcBBwEB/wRjMGEwGAQCAAEwEgMEAMghUAME
AsmD+AMEAc/4QDBFBAIAAjA/AwcEIAESUBAAAwcEIAESUCAAAwcEIAESUDAAAwcE
IAESUKAAAwcEIAESULAAAwcEIAESUMAAAwcAIAESUP4AMA0GCSqGSIb3DQEBCwUA
A4IBAQAIjw8dOvJifuYbw/9iM18ZzaY96GK++MuNDZUpdu12PuMP0IMBQiMoYd8b
JS81SeDze7vjjjT2HYdkIDSw3I3Dh9dTpyLWTnH17kfli/SCp+AHxiUy0Sv0Ds+0
RS8bl/bTzgWtCPfvdc9OL7BzJxuVAHfEgkTnstlnm7NMgSyQtSDTC0PPkpEtEmh/
u9aNGS64L/hKkVUIzxxVk43K3dhECd+G3yfx/6MDwLIAh2vru2DAfTcHFZXgUx5q
QxafPEB16XQtcs/rd/IkXcYi4Bmzc1pekc/bwEeqtHUcsXjboS2t5+L7eIAOOcVn
YrCVqP0MBf/HGsO04+naS47ThZcf
-----END CERTIFICATE-----
Generated at Tue Jan 13 06:22:39 2026 by rpki-client