This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/3230312e3135382e3132302e302f32312d3234203d3e20323634363537.roa
File: 3230312e3135382e3132302e302f32312d3234203d3e20323634363537.roa (raw, json)
Hash identifier: 0VNkxoZ6XOCOr+TtIca5VFc1qXgC12gZkcdECqOjP2g=
Subject key identifier: F2:9B:44:0C:56:5F:3C:82:C4:07:37:12:06:38:7B:04:55:DF:FE:D6
Certificate issuer: /CN=5E735DA8637DD92FEE6FE848D05B7DC667F6E556
Certificate serial: 430B173BBED5511D176783025DBF44126ED130EB
Authority key identifier: 5E:73:5D:A8:63:7D:D9:2F:EE:6F:E8:48:D0:5B:7D:C6:67:F6:E5:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/3230312e3135382e3132302e302f32312d3234203d3e20323634363537.roa
Signing time: Tue 06 Jan 2026 19:12:47 +0000
ROA not before: Tue 06 Jan 2026 19:07:47 +0000
ROA not after: Tue 05 Jan 2027 19:12:47 +0000
asID: 264657
IP address blocks: 201.158.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.crl
rsync://repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 09:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0b:17:3b:be:d5:51:1d:17:67:83:02:5d:bf:44:12:6e:d1:30:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E735DA8637DD92FEE6FE848D05B7DC667F6E556
Validity
Not Before: Jan 6 19:07:47 2026 GMT
Not After : Jan 5 19:12:47 2027 GMT
Subject: CN=F29B440C565F3C82C407371206387B0455DFFED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:f6:78:89:2a:86:ee:6e:ee:2d:0a:0e:cb:
33:84:cb:54:6b:a1:f7:da:4c:a8:d7:b2:92:36:78:
17:20:55:84:c3:eb:1e:bb:f1:a3:a8:cf:64:69:22:
e6:b7:1f:65:dc:84:02:c5:8e:94:02:04:31:71:fa:
01:60:ec:05:75:bc:fe:d1:4b:a0:41:4e:52:63:65:
b4:b2:dd:2e:78:1b:b6:67:0d:21:58:3a:fa:f0:44:
55:20:96:b8:a6:76:cd:47:15:30:2a:20:f4:9c:6e:
c0:8b:a9:5a:7d:69:bd:87:1e:29:47:00:63:91:86:
a5:0a:51:f7:5c:d7:bc:e1:36:31:63:98:99:8a:5b:
9c:ae:7d:1e:b2:0e:30:83:5a:9e:f6:9b:24:1e:6c:
35:c1:b9:c9:29:0f:a6:ef:1e:48:d1:c4:0b:cf:f8:
fe:45:26:9b:65:d4:b9:db:1a:b0:67:98:a8:ab:70:
24:de:66:45:c6:64:26:c4:70:82:53:a8:83:43:ec:
d3:c1:b3:9a:81:eb:fd:6c:9e:b0:b9:59:cb:b2:40:
ec:00:0d:d5:e2:4f:95:2d:a9:92:16:f8:1d:6d:90:
79:06:68:55:e6:3b:90:84:47:22:39:3e:00:81:c5:
0d:83:fd:4d:15:f3:8f:0c:c5:0f:4d:39:20:4d:cf:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:44:0C:56:5F:3C:82:C4:07:37:12:06:38:7B:04:55:DF:FE:D6
X509v3 Authority Key Identifier:
keyid:5E:73:5D:A8:63:7D:D9:2F:EE:6F:E8:48:D0:5B:7D:C6:67:F6:E5:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/3230312e3135382e3132302e302f32312d3234203d3e20323634363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.120.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:84:f1:70:d6:2d:4a:44:1e:77:70:1a:92:1a:47:4c:8d:3b:
4b:22:92:39:fd:a2:4c:f1:f6:89:22:bd:5e:e0:4d:56:70:ae:
7f:88:19:41:99:40:0f:96:31:08:cd:50:8e:b8:ae:8b:cd:12:
87:56:5c:90:cc:e7:ee:46:51:0f:4a:6f:94:bc:9b:9b:29:9d:
ce:32:d8:43:e8:74:84:d6:f4:8f:a7:c4:81:4b:a3:cf:79:95:
a2:3e:60:b3:11:26:db:7c:ec:0a:a0:22:65:50:48:e2:e9:dd:
50:63:ec:4c:07:57:fc:a1:27:45:8d:e4:74:95:be:9c:31:e0:
27:e6:38:08:2a:cd:7d:de:dc:a1:3c:65:53:a3:b5:ba:eb:71:
b6:f8:56:97:47:ee:3d:4a:d4:fc:45:de:f3:52:c7:6b:2c:d7:
46:66:87:80:7e:1b:86:62:74:84:c3:0e:d3:6a:54:8d:d1:0b:
4f:de:94:21:dc:96:d4:70:4c:66:fb:17:c3:07:06:a4:1a:95:
e2:dd:79:fd:6c:15:9c:97:4f:8f:33:ff:da:31:a4:15:4a:88:
5c:0d:ec:9d:b5:f8:de:ce:87:10:a0:8c:f9:eb:73:53:79:8b:
c6:a2:41:b5:d8:2d:aa:8d:eb:bf:ba:bd:30:ff:85:b9:4b:4d:
c2:2f:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:58:06 2026 by rpki-client