This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32382e302f32342d3234203d3e203237383636.roa
File: 3230312e3231372e32382e302f32342d3234203d3e203237383636.roa (raw, json)
Hash identifier: yGfi8DndHJkb6lekwIfvbI6WjhH27W9uIi4ta5Y1/e8=
Subject key identifier: 40:55:B3:AA:70:DB:57:E2:CB:17:54:CF:31:E8:37:64:68:D5:77:5B
Certificate issuer: /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial: 5B92191D504C0B99C02FF9BDA2C125257992659C
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32382e302f32342d3234203d3e203237383636.roa
Signing time: Tue 06 Jan 2026 19:26:03 +0000
ROA not before: Tue 06 Jan 2026 19:21:03 +0000
ROA not after: Tue 05 Jan 2027 19:26:03 +0000
asID: 27866
IP address blocks: 201.217.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 21:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:92:19:1d:50:4c:0b:99:c0:2f:f9:bd:a2:c1:25:25:79:92:65:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Validity
Not Before: Jan 6 19:21:03 2026 GMT
Not After : Jan 5 19:26:03 2027 GMT
Subject: CN=4055B3AA70DB57E2CB1754CF31E8376468D5775B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:29:75:8b:df:ea:57:22:14:d1:de:4e:3c:
9f:9a:a8:8d:e6:6a:d7:f9:fc:66:23:e6:29:9e:c3:
d2:aa:cf:fd:bb:fa:ee:55:ee:62:92:5d:02:e1:25:
74:45:e5:fb:c2:d6:0a:05:e6:40:27:93:74:3d:d3:
df:0f:e2:3e:58:f7:d5:14:cf:e4:74:c7:68:35:e8:
df:a2:5b:be:a8:06:67:2f:b9:fb:29:2e:ec:0c:15:
e4:31:cc:03:d4:33:81:31:19:2a:fe:03:3d:dd:a5:
85:bc:0b:23:10:3c:c4:9b:54:1c:1b:fb:12:76:52:
42:8f:74:ff:4e:2d:d6:d7:a7:80:ff:d0:2f:52:9a:
5c:86:2f:01:a8:b6:ac:99:46:6a:62:5e:3b:9f:ac:
86:79:d3:41:01:35:3b:68:10:90:16:89:0c:23:65:
da:1e:58:4e:57:36:7c:87:d3:e0:51:c2:d5:15:c8:
6e:c9:10:41:bb:4e:30:48:05:29:d8:48:42:2f:83:
89:b0:c7:23:99:50:49:a8:1e:55:ca:c6:6f:28:37:
38:d1:09:f9:b3:5e:22:45:96:66:39:00:57:ac:fd:
6e:ef:21:5a:ba:33:f8:97:0a:ff:eb:ba:5e:54:44:
fd:fc:02:4b:f3:0f:72:49:d1:d6:f2:96:d5:97:bc:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:B3:AA:70:DB:57:E2:CB:17:54:CF:31:E8:37:64:68:D5:77:5B
X509v3 Authority Key Identifier:
keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32382e302f32342d3234203d3e203237383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:07:a6:2b:62:3e:24:1b:b7:ae:66:d5:37:97:80:b3:90:1c:
41:3d:e0:78:78:5a:aa:38:38:44:ce:b3:e4:7e:8d:0c:44:b8:
8d:f1:17:54:f1:f0:6c:dc:77:af:fe:8d:14:1f:45:98:16:b2:
f3:36:f3:db:cd:76:12:c8:a6:4d:63:58:e7:09:e0:45:3d:ac:
57:96:6b:59:3f:d3:56:85:01:dd:00:02:c4:19:3d:5a:ee:c8:
9e:36:5e:f9:d8:3c:d4:ae:40:10:f7:40:9f:aa:bf:c9:05:07:
5c:a8:49:65:24:b3:c4:a7:09:43:e3:dd:24:96:2f:a3:0d:9e:
7e:55:f8:dd:1e:72:9b:9c:39:3f:df:09:cf:a6:14:5e:34:ec:
8e:96:db:28:50:ac:55:ca:01:5d:af:9e:a6:ef:a9:62:df:4e:
62:8d:8b:df:24:d4:c4:bd:4a:de:29:2d:d9:c0:45:f7:d4:75:
18:13:06:48:b6:20:e2:e0:f9:fc:92:0e:5d:3a:54:40:02:c5:
db:82:50:a0:79:c6:b3:b2:c5:d3:9c:4a:2e:2b:d2:5a:32:ea:
76:66:5f:31:b3:e7:1f:b0:28:de:58:8a:8c:be:7c:49:34:45:
0b:4b:b3:ea:d9:6f:69:00:c0:ff:a0:cf:e3:99:58:69:7d:0e:
60:00:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:14:33 2026 by rpki-client