This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230312e3133392e3235332e302f32342d3234203d3e203238353036.roa
File: 3230312e3133392e3235332e302f32342d3234203d3e203238353036.roa (raw, json)
Hash identifier: /J5yNAXfJjqtHFmBlHTfkCS9MkDH+TByrZAlc13DVoQ=
Subject key identifier: FD:FE:4C:E9:25:21:9C:01:1A:12:F5:EB:70:BF:E5:91:C9:4C:58:5E
Certificate issuer: /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial: 2CC765CA967BDCA02098B8D3C991C57E0D6CBB31
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230312e3133392e3235332e302f32342d3234203d3e203238353036.roa
Signing time: Fri 19 Dec 2025 16:35:00 +0000
ROA not before: Fri 19 Dec 2025 16:30:00 +0000
ROA not after: Fri 18 Dec 2026 16:35:00 +0000
asID: 28506
IP address blocks: 201.139.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 09:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c7:65:ca:96:7b:dc:a0:20:98:b8:d3:c9:91:c5:7e:0d:6c:bb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
Validity
Not Before: Dec 19 16:30:00 2025 GMT
Not After : Dec 18 16:35:00 2026 GMT
Subject: CN=FDFE4CE925219C011A12F5EB70BFE591C94C585E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:16:91:71:7f:28:48:b9:b1:bd:10:7e:e9:
45:26:30:f6:38:0f:3f:b1:58:88:ea:c7:4e:d7:d2:
23:91:3a:58:25:47:8c:2a:3c:08:a5:38:4c:73:06:
26:a6:a8:13:ce:39:15:0d:c7:05:40:6b:0a:e6:73:
28:98:bb:78:3b:68:ef:7b:e0:90:ad:9f:61:36:6f:
72:50:65:5d:1f:a2:b8:b5:66:df:20:cc:22:fb:e5:
89:f8:c4:8b:ba:6c:ad:80:0e:4b:0e:bb:b5:da:c9:
bc:da:7a:b4:25:e6:c7:34:00:78:82:f6:33:09:96:
ed:e1:3c:4a:4a:9f:e4:dc:e9:be:31:d7:55:4a:91:
33:a5:91:6e:a1:2d:c7:bd:07:34:bf:00:49:92:96:
32:8c:48:c3:b1:b3:a8:9e:de:16:32:cd:44:36:08:
ce:56:bf:33:b1:74:ca:91:17:4c:dc:bc:c2:c0:cb:
87:5c:c1:1b:ab:11:c8:4b:61:bb:71:b8:7d:97:c3:
12:ee:af:98:f8:2b:4b:38:eb:f3:75:f4:71:d7:3f:
f1:2d:b3:b3:01:9e:2b:aa:56:6a:85:dd:9c:48:f2:
56:5b:5e:68:85:5d:71:4d:1a:86:0b:f6:ec:c7:6f:
ed:83:88:c6:0d:dd:08:0b:0a:4c:9f:3b:ae:51:7c:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FE:4C:E9:25:21:9C:01:1A:12:F5:EB:70:BF:E5:91:C9:4C:58:5E
X509v3 Authority Key Identifier:
keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230312e3133392e3235332e302f32342d3234203d3e203238353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.139.253.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7f:48:77:b1:eb:2b:a3:b0:bd:f7:6d:81:6c:ca:66:02:fc:
ca:c9:ae:ba:ab:9e:27:71:a3:50:ee:41:14:2c:28:f1:10:6f:
44:27:c7:6f:3b:89:4d:34:4f:d3:27:c7:61:17:dd:c5:67:28:
52:86:3e:5c:76:7a:eb:1e:2c:5e:03:39:7f:d5:16:25:e7:3c:
30:16:16:08:0e:8d:05:d9:6f:e2:dd:a2:a4:cc:97:1e:60:2c:
72:c6:51:5c:76:56:d7:75:db:79:76:4c:20:05:48:81:a1:2e:
61:64:58:34:14:ef:cc:c2:f9:fc:2e:84:2e:f9:01:f5:6a:34:
22:7f:96:f4:a6:03:fa:69:15:01:0c:d7:08:ba:e0:78:34:f8:
5c:63:93:fa:e1:59:c2:07:ee:c0:a9:8f:06:00:c2:48:35:46:
2f:84:38:00:2c:47:a8:a1:91:f9:b4:30:37:00:08:22:76:1b:
68:53:a1:a3:1d:15:0c:f8:48:2e:ea:0d:d3:7f:60:e4:5b:b2:
19:46:44:be:2e:c0:92:c5:a8:b2:39:1e:1e:c2:9d:16:a6:0d:
06:6c:3f:49:b8:af:db:fd:95:11:bd:27:be:6a:c6:cd:32:80:
5d:b3:c4:18:af:ac:d4:f8:03:d1:71:70:04:bc:64:4e:48:5b:
91:b8:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:44:51 2025 by rpki-client