This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa
File: 3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa (raw, json)
Hash identifier: OV4Ow67gmuRlTEBwhwCCtDBRTakWUuln/WB8lf+U02k=
Subject key identifier: D4:87:24:78:43:DD:0A:B8:E7:57:9A:C5:58:C5:C9:E5:8D:F3:E9:7D
Certificate issuer: /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial: 7084A0E98EFBC81DEBBFB1315B9F8174333A2D2A
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa
Signing time: Tue 06 Jan 2026 19:40:42 +0000
ROA not before: Tue 06 Jan 2026 19:35:42 +0000
ROA not after: Tue 05 Jan 2027 19:40:42 +0000
asID: 32098
IP address blocks: 201.174.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 01:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:84:a0:e9:8e:fb:c8:1d:eb:bf:b1:31:5b:9f:81:74:33:3a:2d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Validity
Not Before: Jan 6 19:35:42 2026 GMT
Not After : Jan 5 19:40:42 2027 GMT
Subject: CN=D487247843DD0AB8E7579AC558C5C9E58DF3E97D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7c:f7:1c:d9:16:b9:30:14:46:db:c2:53:92:
ca:2b:a4:fc:17:45:ee:37:63:51:22:39:93:d6:af:
cb:47:fd:f8:91:6f:0f:c7:67:22:7d:1c:64:e4:df:
9a:f2:52:6c:5f:21:37:0e:70:20:53:a7:72:17:99:
87:d4:ee:28:60:8a:6e:43:be:41:cb:3a:4b:34:c2:
e2:b4:3e:be:78:db:1f:1a:bf:20:87:b0:cd:32:77:
af:63:d5:c9:14:e1:28:c0:5b:49:79:5a:b6:00:d7:
ce:69:74:44:83:a0:62:6b:3e:28:2d:43:c3:02:38:
b5:54:1e:fc:21:86:8a:d8:db:0f:e0:28:ee:d9:dc:
ff:38:89:c6:37:67:56:1a:60:ab:62:9b:09:e8:02:
29:5b:63:f0:db:f2:f6:5c:0f:b6:90:cb:c9:b9:10:
0f:15:61:a8:b4:1e:6e:f8:34:2e:05:00:9a:86:6e:
d0:a0:e4:f2:1c:be:eb:ce:1a:44:8a:12:d8:39:59:
ca:81:24:ef:ae:2b:4a:d7:0a:26:f5:5d:8a:37:f1:
24:2b:14:77:7c:c7:39:d0:95:75:b6:e9:ac:9a:48:
c0:4f:7e:58:b0:b2:93:0f:b8:c1:94:66:52:8f:b6:
b0:38:c8:b4:58:f4:ff:82:32:70:d1:86:ed:4f:b4:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:87:24:78:43:DD:0A:B8:E7:57:9A:C5:58:C5:C9:E5:8D:F3:E9:7D
X509v3 Authority Key Identifier:
keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.112.0/20
Signature Algorithm: sha256WithRSAEncryption
25:d9:e3:e9:12:10:52:c4:ce:2f:2c:79:2d:29:55:02:57:4b:
1e:bf:d7:ce:ca:36:a4:01:e9:a1:49:fd:e2:ef:9d:42:a6:bb:
da:8a:c9:c4:4a:20:4b:30:ee:ea:02:82:02:0e:56:45:ab:a6:
81:cb:a2:5a:32:65:45:1b:8e:f6:bc:9a:8a:f2:92:ec:e5:ef:
71:2b:07:9e:b6:34:f7:33:eb:a3:f3:6b:24:98:6e:55:47:b9:
ac:6d:da:28:a0:ef:24:bc:38:fb:08:02:f0:d1:a0:06:67:55:
75:99:cb:8f:50:9d:81:43:21:b0:b9:8a:69:78:dc:84:07:94:
2b:5f:83:93:d7:8f:02:cb:8c:69:9c:f7:e1:06:44:e9:a2:a2:
4c:6d:2a:ee:e5:b4:75:69:fa:e6:67:a3:6b:a0:12:45:5e:9a:
03:fb:fc:45:10:78:bb:91:c2:50:cb:c4:69:3f:94:09:b9:0c:
10:18:e5:a5:45:80:ff:25:25:50:7d:f0:36:f6:cc:1e:0d:b3:
09:32:a2:9e:9b:20:59:cd:34:4a:39:fa:8c:9f:6c:64:86:ea:
f1:a7:6a:55:97:f7:5a:7e:6c:c0:f4:a7:ba:c6:7f:49:b0:36:
2b:f0:75:0b:93:1b:73:ff:54:2c:ac:d8:2c:cd:4c:3d:34:2f:
1e:50:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:11:31 2026 by rpki-client