This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa
File: 3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa (raw, json)
Hash identifier: bkPemSdUfBrrrhrmMu1MOAX8YugJWdvskwxv6NPUviQ=
Subject key identifier: AF:3F:86:45:11:AC:20:E8:50:F1:9F:84:91:F3:D1:25:F7:21:8E:E3
Certificate issuer: /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial: 1CEF90CC397A78B36029A2E707AA4B66B8EF680A
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa
Signing time: Tue 06 Jan 2026 19:40:47 +0000
ROA not before: Tue 06 Jan 2026 19:35:47 +0000
ROA not after: Tue 05 Jan 2027 19:40:47 +0000
asID: 32098
IP address blocks: 201.174.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 01:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ef:90:cc:39:7a:78:b3:60:29:a2:e7:07:aa:4b:66:b8:ef:68:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Validity
Not Before: Jan 6 19:35:47 2026 GMT
Not After : Jan 5 19:40:47 2027 GMT
Subject: CN=AF3F864511AC20E850F19F8491F3D125F7218EE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:b4:30:d7:0e:b7:9b:5e:e2:92:0a:ae:6a:
65:6b:1d:cf:99:a5:2f:d1:7f:07:2b:90:2e:e3:12:
b8:dd:f9:f9:14:b1:d5:77:fb:b9:a7:11:3d:b7:40:
4d:6e:bc:9a:33:3d:8c:ae:3b:b8:38:ae:17:36:23:
20:dd:5b:85:ac:ec:e7:98:ad:32:00:2e:ca:d2:66:
96:62:00:14:7c:c5:fe:b4:97:0c:81:7a:9c:f9:2b:
a7:7d:d8:8d:af:8f:50:8e:b5:85:50:5e:1a:13:7d:
19:90:aa:c6:56:4c:90:e6:8b:cd:02:1f:b8:bc:0d:
63:32:77:17:d0:37:a9:34:5b:48:4f:c5:8e:7c:89:
3b:6d:b3:7a:4b:e1:7d:e0:16:74:12:77:d1:8c:f2:
e1:d5:c2:d6:c7:d6:7d:98:fd:2e:1a:af:4c:b0:93:
ac:90:9b:e5:81:eb:29:e4:8f:e9:5b:dc:ad:a6:60:
c9:32:b8:f2:3a:89:b9:6c:c5:ec:d3:49:4e:b2:8b:
09:0f:c0:da:44:61:5b:84:de:b2:c8:1b:49:d5:68:
87:f8:59:33:fa:2e:af:14:31:cc:df:6e:98:d0:7c:
b0:24:33:a8:56:57:34:f3:96:ee:a0:94:ea:07:52:
00:fb:10:1e:f2:36:ec:35:53:13:cd:25:75:96:a5:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:86:45:11:AC:20:E8:50:F1:9F:84:91:F3:D1:25:F7:21:8E:E3
X509v3 Authority Key Identifier:
keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.192.0/21
Signature Algorithm: sha256WithRSAEncryption
17:33:38:92:c1:6b:9f:e8:24:13:2b:ed:95:ba:93:fc:6f:5d:
33:38:74:56:b9:84:a7:90:61:e9:7a:aa:5e:99:5c:7d:06:80:
28:06:13:dc:f8:2e:02:3f:97:c5:61:e4:8e:5f:24:03:ff:20:
85:8e:3f:0c:a0:02:15:35:31:33:cb:d5:cd:28:94:1d:e8:2b:
7e:ff:54:2c:fb:40:4b:b0:5f:c5:91:d1:47:de:73:d1:ba:68:
f8:a8:a4:9d:10:1c:6e:f9:73:ab:5b:61:b2:75:37:4c:0e:59:
c3:f6:af:14:67:27:44:42:c7:10:6b:b6:a2:6a:35:d7:a2:b2:
95:a1:59:e3:d0:d1:7b:36:02:40:49:88:14:c4:64:33:b5:8b:
be:ee:e3:49:2c:a4:f4:70:e7:14:f8:42:56:c0:e6:a3:af:d3:
15:c5:4a:24:f1:f8:76:bf:77:ab:c2:09:ff:f5:2b:14:22:a2:
38:4d:3e:07:30:3d:7c:59:50:d8:b7:e9:9f:86:d8:bd:4e:b5:
db:f5:d1:eb:28:bc:4d:3b:ed:d9:28:a0:1f:f7:ee:a1:f0:0c:
5c:f6:ce:74:a1:7b:52:8f:b6:41:d3:ca:0a:4b:0f:f0:20:b2:
9c:ae:61:e1:26:11:d4:86:b7:2f:f2:6f:00:01:7f:66:a2:d3:
00:a3:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:17:23 2026 by rpki-client