This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/3230312e3232302e3132382e302f32302d3234203d3e203237383834.roa
File: 3230312e3232302e3132382e302f32302d3234203d3e203237383834.roa (raw, json)
Hash identifier: Ee2nL8FKy9MsDWUo59E3+jYW/xuhPgM7LM5zb+DWlE4=
Subject key identifier: D2:DB:C6:ED:39:BD:F9:58:21:5D:A3:D1:E1:B7:A8:D1:A7:C3:69:FB
Certificate issuer: /CN=DC3731A45F327EDCD8C0847227CDEEEAE8376B9A
Certificate serial: 1118D881A6D918248FE0A2333FD05AEB5FD07CC4
Authority key identifier: DC:37:31:A4:5F:32:7E:DC:D8:C0:84:72:27:CD:EE:EA:E8:37:6B:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/3230312e3232302e3132382e302f32302d3234203d3e203237383834.roa
Signing time: Tue 06 Jan 2026 19:10:48 +0000
ROA not before: Tue 06 Jan 2026 19:05:48 +0000
ROA not after: Tue 05 Jan 2027 19:10:48 +0000
asID: 27884
IP address blocks: 201.220.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.crl
rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:18:d8:81:a6:d9:18:24:8f:e0:a2:33:3f:d0:5a:eb:5f:d0:7c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC3731A45F327EDCD8C0847227CDEEEAE8376B9A
Validity
Not Before: Jan 6 19:05:48 2026 GMT
Not After : Jan 5 19:10:48 2027 GMT
Subject: CN=D2DBC6ED39BDF958215DA3D1E1B7A8D1A7C369FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:0d:80:e4:5f:27:05:c4:f5:11:64:69:4c:
c5:09:07:02:8e:de:a4:a4:76:5a:04:81:4f:a5:fe:
2e:9b:fa:47:4c:88:c3:f4:b7:14:a5:71:7a:56:6a:
16:89:28:5d:06:7b:3a:d3:0f:af:51:f5:fc:5b:c4:
f9:16:7e:81:61:ab:91:25:1e:1d:b7:62:c5:bc:4a:
4d:d3:44:f2:30:04:98:c4:96:be:ca:73:2b:8f:b8:
46:2c:36:cb:c5:14:a1:ba:58:b5:a2:29:85:78:ac:
f3:c6:96:13:7b:d1:f1:f7:f1:11:d8:76:17:e8:3e:
d9:6f:bb:cd:e1:fd:3a:92:5f:b3:58:ec:6a:4c:ac:
6f:1f:f6:f3:a0:b1:29:52:ab:67:5b:d5:3c:06:00:
7f:fd:1c:67:8e:3d:0c:4e:06:0b:4d:4a:6e:3e:a3:
12:2f:74:1d:8e:46:b0:75:37:78:96:c3:d3:99:47:
7b:17:bc:33:a0:fc:94:cd:7a:de:52:3a:c4:68:fb:
4b:71:b6:41:4a:af:b1:fe:2c:75:aa:9c:9e:e5:e4:
63:0d:24:01:5e:e0:9f:84:a8:25:a5:c6:c1:91:78:
3a:01:8b:b3:26:e0:c5:ef:79:33:65:2e:c1:b3:40:
50:44:6e:ec:e2:89:19:b1:65:c0:a4:45:b3:e1:83:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DB:C6:ED:39:BD:F9:58:21:5D:A3:D1:E1:B7:A8:D1:A7:C3:69:FB
X509v3 Authority Key Identifier:
keyid:DC:37:31:A4:5F:32:7E:DC:D8:C0:84:72:27:CD:EE:EA:E8:37:6B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/3230312e3232302e3132382e302f32302d3234203d3e203237383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.220.128.0/20
Signature Algorithm: sha256WithRSAEncryption
30:b6:ac:c6:cc:ce:12:ec:6b:e0:50:8a:c8:7d:d3:43:2c:54:
f9:76:8c:58:f4:45:39:1d:8f:04:e9:ba:82:47:42:7e:02:a2:
76:03:d4:a6:cc:d7:93:bd:92:14:31:64:b9:d1:fc:b0:de:7d:
5e:c0:13:6c:c1:65:0a:76:56:68:19:e5:c9:5e:10:60:2b:ef:
e3:08:46:4f:08:42:65:de:71:a1:8e:48:c7:8c:ab:1f:50:4a:
2c:3d:59:31:be:9a:15:e9:81:48:54:70:d8:6d:9c:41:6f:a4:
3c:de:fe:74:70:6a:4e:a9:72:06:ca:59:62:62:ad:33:b1:b5:
90:e5:2c:fa:cc:b5:e8:55:30:f4:0d:c4:74:1c:9d:50:f5:5b:
06:ca:31:68:97:05:1d:80:6c:2b:3b:f5:f0:f5:8d:75:6e:6b:
77:db:1c:c4:d6:9b:36:4a:da:0d:40:1b:75:6c:8c:5c:11:01:
81:54:f3:e8:de:03:76:0b:e3:c4:58:ea:0d:24:d8:05:61:2e:
10:7e:ea:24:bf:5b:c8:a8:52:22:02:cf:1a:75:a2:34:2a:17:
ca:85:9e:b7:14:e8:64:91:60:23:a6:86:ee:28:bb:03:b7:17:
6b:b5:d6:de:75:65:a4:9b:6f:f0:ec:44:73:3b:ae:31:a0:34:
7e:15:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:17:44 2026 by rpki-client