This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28540.roa
File: AS28540.roa (raw, json)
Hash identifier: HhzhPYkTte6oYi8jB2dWpyXmcTe5PTfZTVnTEv/MVf0=
Subject key identifier: 8E:30:7F:28:CC:95:5A:BF:C3:80:28:FD:7F:38:AD:C5:63:14:E4:0F
Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial: 5D9F2C22268F724BC818C09BD197799599E906EA
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28540.roa
Signing time: Wed 31 Dec 2025 17:56:58 +0000
ROA not before: Wed 31 Dec 2025 17:51:58 +0000
ROA not after: Wed 30 Dec 2026 17:56:58 +0000
asID: 28540
IP address blocks: 189.201.244.0/24 maxlen: 24
2801:c4:c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 15:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9f:2c:22:26:8f:72:4b:c8:18:c0:9b:d1:97:79:95:99:e9:06:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
Validity
Not Before: Dec 31 17:51:58 2025 GMT
Not After : Dec 30 17:56:58 2026 GMT
Subject: CN=8E307F28CC955ABFC38028FD7F38ADC56314E40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:67:12:07:ab:f5:ed:40:22:00:22:be:f9:
36:ac:e1:4e:e9:4e:88:1e:90:1f:1e:cb:30:31:5a:
7d:15:59:95:8e:dc:01:db:8e:36:a6:4d:e5:16:d5:
ed:95:0d:cb:db:b2:dd:81:0c:aa:4a:17:da:10:9c:
c5:87:94:54:42:c8:b4:a0:e0:9b:ed:c8:22:c0:46:
de:2b:39:d4:dc:0f:0f:b3:a2:45:c1:6c:7c:63:de:
ba:e3:31:ff:33:66:58:0b:0c:97:d2:8b:0a:a1:58:
98:c4:87:6e:8f:68:92:8b:5b:fb:6e:fa:60:67:db:
e9:d7:27:3f:14:13:86:a3:93:d9:80:79:5e:69:2f:
75:69:dc:a0:94:64:ef:52:98:58:8e:be:9f:19:aa:
03:a3:c0:f4:42:fa:fc:30:8a:6c:d3:80:9d:05:13:
d1:04:b9:2a:15:69:0c:1f:c3:39:da:22:8e:c5:44:
42:52:9c:1e:8d:aa:a4:c5:3b:07:66:e3:25:0d:0b:
4d:f2:4a:2f:cf:9f:cf:ff:79:e8:d6:c7:b0:52:2c:
13:4d:aa:3e:9b:97:52:f8:97:b6:be:21:49:99:de:
21:7b:52:f1:b2:52:1a:8a:fd:a0:e9:13:44:be:5d:
f0:bb:03:90:6f:a5:d4:01:06:70:33:32:09:ac:aa:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:30:7F:28:CC:95:5A:BF:C3:80:28:FD:7F:38:AD:C5:63:14:E4:0F
X509v3 Authority Key Identifier:
keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28540.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.244.0/24
IPv6:
2801:c4:c0::/48
Signature Algorithm: sha256WithRSAEncryption
5a:25:fe:d7:ab:ee:cb:5b:5e:a2:26:9b:72:ca:ac:39:93:45:
f7:30:d3:3b:7e:46:49:2c:13:79:b8:fe:78:88:46:e8:b1:d2:
61:ab:ab:26:5b:5c:57:81:66:66:08:eb:56:d1:fd:6b:de:d0:
82:40:28:da:69:4b:f1:6e:e0:6c:07:87:d9:d7:af:a5:b1:e1:
aa:9f:e2:f4:2a:65:c1:75:48:4d:e4:53:fc:9a:ac:5f:81:c8:
b6:51:55:db:54:fc:e3:32:d6:f4:c5:7c:ff:82:f5:a7:e6:7e:
8a:22:18:95:b3:25:57:30:38:68:69:ec:34:88:a5:87:29:e5:
4b:1c:10:6f:79:32:f5:02:86:7c:3c:d0:55:dd:81:d8:e4:ed:
9e:ee:4b:cb:0d:1e:6d:cf:98:ef:69:c1:07:22:0a:d8:ce:cb:
f5:5a:cf:f6:7c:91:c4:cb:26:3d:cf:68:97:71:dc:e0:46:fa:
2a:ad:b7:7f:4c:4f:84:ef:a3:e8:81:42:d4:4a:29:1f:ed:53:
3a:09:c3:61:26:b8:b9:f3:4b:c3:fe:1d:e1:64:c5:94:33:02:
a5:09:4a:35:fe:6a:62:ff:6f:81:06:2b:32:b4:1d:15:67:82:
a6:2e:99:34:cb:19:57:42:59:e9:2e:b8:52:61:22:63:74:1a:
f2:2c:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:36:54 2026 by rpki-client