This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3133312e37322e3230382e302f32322d3234203d3e203237383834.roa
File: 3133312e37322e3230382e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier: Bc6KYhn8sSyKYQIVNTPqSI8lax4RK0anDMHkATFlfuY=
Subject key identifier: FD:B3:80:9E:9F:D2:D2:D9:86:79:BB:19:BB:AE:06:4E:AE:86:59:58
Certificate issuer: /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial: 6D668ADACDEA9C73D8EEA1612F35D8DED7C5A0D9
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3133312e37322e3230382e302f32322d3234203d3e203237383834.roa
Signing time: Tue 06 Jan 2026 20:52:31 +0000
ROA not before: Tue 06 Jan 2026 20:47:31 +0000
ROA not after: Tue 05 Jan 2027 20:52:31 +0000
asID: 27884
IP address blocks: 131.72.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 09:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:66:8a:da:cd:ea:9c:73:d8:ee:a1:61:2f:35:d8:de:d7:c5:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Validity
Not Before: Jan 6 20:47:31 2026 GMT
Not After : Jan 5 20:52:31 2027 GMT
Subject: CN=FDB3809E9FD2D2D98679BB19BBAE064EAE865958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:17:f1:64:f8:22:ac:77:76:e6:84:db:42:
53:4f:81:bb:2e:b1:01:e9:cb:4f:95:0a:6e:58:62:
ae:1a:f9:3d:e9:b6:18:9f:0d:22:a6:84:22:7b:67:
71:e4:c6:73:b1:9a:dc:7c:13:ba:0e:5e:d7:76:e0:
88:a9:84:49:7c:b0:41:ed:9d:64:27:ea:60:cb:0c:
39:a4:30:8b:70:47:25:28:d2:3c:c0:dc:c4:33:73:
40:93:56:9e:27:ff:82:a1:60:37:2e:a3:44:c2:3c:
44:cb:62:f8:28:6f:b9:5b:11:3b:b1:4f:8f:ef:e7:
fa:cc:d0:75:69:e3:d7:2c:a1:78:19:d9:01:ce:6e:
c3:9e:c0:54:b7:7a:fa:4e:55:2d:c6:ff:9a:b0:cf:
f0:f5:02:23:36:22:64:66:da:1e:d5:e4:ec:58:84:
d2:02:31:62:92:1c:cb:f3:63:39:17:da:49:e7:e6:
9f:d1:eb:f5:08:6a:bb:37:0d:2e:2f:cc:e8:4b:4e:
f8:1f:32:0e:b8:36:2b:48:9d:c9:9d:b5:99:13:52:
44:51:26:fb:3f:65:11:1c:9d:eb:cf:13:60:47:07:
c0:78:0e:bc:3c:c6:03:17:07:de:12:9a:32:55:7d:
c6:df:e1:da:70:63:9d:83:f9:84:ba:87:b1:4a:d1:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B3:80:9E:9F:D2:D2:D9:86:79:BB:19:BB:AE:06:4E:AE:86:59:58
X509v3 Authority Key Identifier:
keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3133312e37322e3230382e302f32322d3234203d3e203237383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.208.0/22
Signature Algorithm: sha256WithRSAEncryption
51:10:0c:4b:6a:b8:3a:9f:cc:e0:6e:b9:ee:5b:7b:66:93:10:
31:52:22:7b:fa:63:b4:09:4c:12:25:03:c7:27:2d:3f:b8:f8:
10:cc:17:5b:0c:2a:29:d9:0a:51:78:f3:58:b1:40:4e:d5:8b:
47:e3:5f:00:49:7a:15:26:00:9a:96:de:1c:de:23:91:27:66:
6f:ba:c1:9a:f6:01:5d:af:88:74:83:25:b2:08:ed:95:19:5a:
49:19:39:ec:ef:4a:1b:09:df:1f:1b:99:92:7b:b6:cd:db:e4:
67:74:97:96:e4:7d:c7:fd:52:44:76:04:24:69:a0:a2:75:d5:
eb:34:36:42:7c:ab:63:1d:ba:d2:28:64:22:76:85:71:65:1b:
d7:d3:8b:97:3c:ff:da:bf:55:8a:16:c6:e6:0e:db:18:5d:0b:
26:7c:6b:7a:81:c1:b6:b4:2e:f1:11:50:b8:3b:42:1f:76:45:
1d:86:01:b8:25:9b:8b:5e:ad:e6:66:77:24:8a:37:99:95:02:
be:12:3b:6b:3a:2d:91:05:dd:00:b4:d1:58:29:92:90:41:ab:
f1:c4:76:4f:22:4d:24:88:6d:7a:b7:ff:a7:68:e2:14:b3:f1:
16:c7:6d:f5:ec:65:c5:b6:33:e2:f1:ef:db:00:b7:f1:25:ea:
76:a2:3b:58
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbWaK2s3qnHPY7qFhLzXY3tfFoNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI3NUExRjFCQzY5MjgyQ0QwRjRCRDMzRjEyMDE1NTZD
NjZDRkQ1ODAeFw0yNjAxMDYyMDQ3MzFaFw0yNzAxMDUyMDUyMzFaMDMxMTAvBgNV
BAMTKEZEQjM4MDlFOUZEMkQyRDk4Njc5QkIxOUJCQUUwNjRFQUU4NjU5NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQBfxZPgirHd25oTbQlNPgbsu
sQHpy0+VCm5YYq4a+T3pthifDSKmhCJ7Z3HkxnOxmtx8E7oOXtd24IiphEl8sEHt
nWQn6mDLDDmkMItwRyUo0jzA3MQzc0CTVp4n/4KhYDcuo0TCPETLYvgob7lbETux
T4/v5/rM0HVp49csoXgZ2QHObsOewFS3evpOVS3G/5qwz/D1AiM2ImRm2h7V5OxY
hNICMWKSHMvzYzkX2knn5p/R6/UIars3DS4vzOhLTvgfMg64NitIncmdtZkTUkRR
Jvs/ZREcnevPE2BHB8B4Drw8xgMXB94SmjJVfcbf4dpwY52D+YS6h7FK0e+bAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/bOAnp/S0tmGebsZu64GTq6GWVgwHwYDVR0j
BBgwFoAUQnWh8bxpKCzQ9L0z8SAVVsZs/VgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDI1RTNEMEQzOUQzQjc5MUJCQUI0NkY3QTFDQTEyMjE2
QjJCMzE1MzgxOEI3RjVBQzExOTg4M0ExNUMzNjA3LzAvNDI3NUExRjFCQzY5Mjgy
Q0QwRjRCRDMzRjEyMDE1NTZDNjZDRkQ1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Mjc1QTFGMUJDNjkyODJDRDBG
NEJEMzNGMTIwMTU1NkM2NkNGRDU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQyNUUzRDBEMzlEM0I3OTFCQkFCNDZGN0ExQ0ExMjIxNkIyQjMxNTM4
MThCN0Y1QUMxMTk4ODNBMTVDMzYwNy8wLzMxMzMzMTJlMzczMjJlMzIzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM4MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNI0DAN
BgkqhkiG9w0BAQsFAAOCAQEAURAMS2q4Op/M4G657lt7ZpMQMVIie/pjtAlMEiUD
xyctP7j4EMwXWwwqKdkKUXjzWLFATtWLR+NfAEl6FSYAmpbeHN4jkSdmb7rBmvYB
Xa+IdIMlsgjtlRlaSRk57O9KGwnfHxuZknu2zdvkZ3SXluR9x/1SRHYEJGmgonXV
6zQ2QnyrYx260ihkInaFcWUb19OLlzz/2r9VihbG5g7bGF0LJnxreoHBtrQu8RFQ
uDtCH3ZFHYYBuCWbi16t5mZ3JIo3mZUCvhI7azotkQXdALTRWCmSkEGr8cR2TyJN
JIhterf/p2jiFLPxFsdt9exlxbYz4vHv2wC38SXqdqI7WA==
-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:21 2026 by rpki-client