This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33382e302f32342d3234203d3e203132363834.roa
File: 3230312e3232302e33382e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier: 0RWIVviB7FfDxMlDIrHtPJ4esdhpZ30TMLLm54Vhycs=
Subject key identifier: A1:EE:00:C4:57:02:D9:D6:4C:5D:8C:F9:9F:DC:E8:46:13:AF:BC:36
Certificate issuer: /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial: 79AFAC7F350284599B983F66985CFDAC34C18F71
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33382e302f32342d3234203d3e203132363834.roa
Signing time: Tue 06 Jan 2026 18:58:44 +0000
ROA not before: Tue 06 Jan 2026 18:53:44 +0000
ROA not after: Tue 05 Jan 2027 18:58:44 +0000
asID: 12684
IP address blocks: 201.220.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 05:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:af:ac:7f:35:02:84:59:9b:98:3f:66:98:5c:fd:ac:34:c1:8f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Validity
Not Before: Jan 6 18:53:44 2026 GMT
Not After : Jan 5 18:58:44 2027 GMT
Subject: CN=A1EE00C45702D9D64C5D8CF99FDCE84613AFBC36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:8e:5e:b0:47:3d:38:a7:e4:4f:f0:ae:48:
ee:55:3b:18:b7:a0:ed:a4:aa:24:d5:2d:ab:bb:3b:
b9:cd:8d:ba:84:c6:c7:17:3b:70:a9:61:8b:34:3c:
61:6e:54:17:07:e9:7f:a2:02:56:8e:97:70:8f:e2:
31:1b:8d:ce:a3:db:bf:09:f5:4f:3f:4b:e1:46:6b:
74:9c:db:45:2e:82:5f:83:64:83:cd:9e:3f:17:32:
5f:83:4d:92:f4:15:47:41:e5:67:ac:9a:d8:ec:2f:
d4:4e:80:d9:37:e4:00:32:64:b7:6f:e5:a0:71:28:
6a:b5:e1:71:5e:bb:33:f9:8a:c0:65:0f:05:d5:7b:
77:01:57:91:ce:75:fa:8a:f5:c6:bc:45:b0:50:da:
e1:05:9c:bf:90:dd:1a:6b:ad:82:c9:8c:49:b8:fa:
5e:68:41:0a:2a:a0:f5:03:4c:a8:e7:3f:6e:79:87:
1e:30:a5:28:0a:9a:ae:20:8d:ac:a8:e2:7e:12:13:
2f:30:d2:90:6d:bb:9c:8f:d6:6a:bd:f6:35:2f:1c:
66:ae:c9:7d:9b:46:84:4e:d6:52:fe:c5:84:b9:0e:
92:3c:86:d5:d2:9c:71:e8:20:d7:1c:e8:2e:65:05:
31:f1:bb:8e:b7:64:ad:df:0b:cb:24:99:22:a7:98:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EE:00:C4:57:02:D9:D6:4C:5D:8C:F9:9F:DC:E8:46:13:AF:BC:36
X509v3 Authority Key Identifier:
keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33382e302f32342d3234203d3e203132363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.220.38.0/24
Signature Algorithm: sha256WithRSAEncryption
63:21:4a:8d:d2:6c:6b:7e:68:18:6d:5b:20:8d:7c:2a:71:19:
43:cc:96:68:00:22:eb:b5:64:ed:99:28:b1:b6:99:18:3e:5c:
a5:5c:64:f2:18:0a:c6:5b:1e:43:ab:cf:a7:5b:8a:c1:a8:32:
0c:9e:3b:16:ce:fa:ab:dd:85:ab:e4:a6:ac:24:70:16:82:08:
02:69:9b:ae:54:7d:56:06:00:ee:92:a0:96:e0:89:cf:61:09:
ac:a5:87:5c:55:81:d2:ea:6f:8e:dd:e0:ab:32:73:d8:94:82:
58:1c:ef:0f:38:30:19:13:99:23:3e:d2:64:5c:dc:52:ca:bd:
93:e0:d5:e6:0c:1d:f8:91:81:33:87:49:3a:ad:52:e2:a5:15:
23:ae:16:7d:02:d0:27:47:54:9d:ad:a2:ba:95:79:9d:eb:34:
9d:c7:6b:b0:4a:f6:55:2b:b9:16:c5:c9:50:01:57:60:c9:8a:
1b:bc:5c:20:7c:d9:0d:ce:a7:6d:bf:56:5a:65:db:b0:66:ba:
2e:4d:bf:be:5f:d3:92:ad:a4:e8:7d:4a:98:67:ea:6e:f8:d0:
f7:b3:25:bf:50:86:eb:e4:d9:29:59:a1:c2:83:aa:83:89:c9:
d9:2f:35:5b:30:cd:60:53:0b:73:3c:01:04:07:2b:b5:bb:85:
25:2c:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:40 2026 by rpki-client