This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa
File: 3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier: MMfHH+1RoPMarZ227IwH5bom1llpoHDBvHcFguaRIj4=
Subject key identifier: 8A:A3:C0:EA:0D:7B:58:4B:BE:10:C8:5F:41:CB:8B:85:72:1A:19:E8
Certificate issuer: /CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Certificate serial: 034F7EBD802D5DA30117003CF2258AAF4D197587
Authority key identifier: B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa
Signing time: Tue 06 Jan 2026 19:26:09 +0000
ROA not before: Tue 06 Jan 2026 19:21:09 +0000
ROA not after: Tue 05 Jan 2027 19:26:09 +0000
asID: 262287
IP address blocks: 138.99.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 15:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4f:7e:bd:80:2d:5d:a3:01:17:00:3c:f2:25:8a:af:4d:19:75:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Validity
Not Before: Jan 6 19:21:09 2026 GMT
Not After : Jan 5 19:26:09 2027 GMT
Subject: CN=8AA3C0EA0D7B584BBE10C85F41CB8B85721A19E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a0:a3:46:5a:2f:af:fc:e6:e6:9e:56:10:64:
9e:a5:b4:80:68:9a:6d:c1:3b:73:96:33:eb:4f:0e:
a4:a1:18:b2:55:aa:08:00:65:22:41:df:5f:f7:47:
d4:6d:ff:9e:8e:d4:fb:c1:64:48:af:c3:7f:81:58:
50:14:f1:62:91:4d:13:cf:28:8f:03:e8:93:40:16:
c9:67:38:0f:3f:6e:ce:a1:1a:1b:15:62:ec:1f:cc:
18:57:56:70:8b:b0:43:03:f5:7a:a0:d1:0c:fd:37:
c2:1a:58:59:59:f7:64:cb:dc:67:d9:89:b3:51:fb:
eb:1e:57:d3:93:7b:bf:b3:cb:cd:1a:1d:b9:0c:1e:
fb:10:61:47:f5:ce:3e:5f:5f:02:2a:d5:77:b3:42:
32:08:17:44:e9:a2:a6:a1:00:50:71:2b:86:79:79:
56:16:73:fb:fb:38:50:f3:44:d9:4d:d9:c8:3a:00:
07:ee:bd:05:c0:cc:ae:a8:75:e9:5b:7d:4d:08:e4:
05:dc:82:63:7f:37:99:90:cb:28:a0:f4:5a:c7:60:
42:b9:d8:e6:fe:20:82:e5:ee:02:b1:ad:b7:88:3d:
08:32:f0:6a:a5:c2:22:9d:93:c1:7a:3c:a8:c7:18:
ef:34:22:2c:73:b5:4b:d5:21:77:f9:50:3b:98:53:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:C0:EA:0D:7B:58:4B:BE:10:C8:5F:41:CB:8B:85:72:1A:19:E8
X509v3 Authority Key Identifier:
keyid:B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.208.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6d:b0:3c:2e:df:19:47:dd:40:7f:c4:46:96:01:e1:a3:db:
1c:3b:f7:80:6d:0f:d4:18:99:f5:e8:37:65:b5:0b:96:6c:f1:
42:14:8c:0c:0e:e4:07:89:64:cc:a5:4c:42:86:8a:9d:da:4b:
fb:27:d4:92:c5:cb:ba:7e:58:8d:e9:c5:37:ba:3c:36:10:d9:
c9:4f:f8:cb:ee:f1:8f:d8:9d:62:ac:51:77:98:34:ce:c0:d9:
31:28:86:ba:49:fd:9e:b0:80:b5:49:83:e9:5c:97:95:74:b4:
22:42:9f:a0:08:7b:e5:58:01:53:72:f6:b5:d7:23:e9:3f:7c:
5e:3c:46:56:50:2a:29:05:c7:0b:48:a0:a1:46:0a:13:1c:50:
b6:9c:dc:23:29:27:ed:84:f5:97:21:19:e6:e0:60:56:18:d9:
47:98:26:6d:07:32:c4:e0:af:8c:ee:92:05:e6:c8:36:54:2f:
5d:62:68:0a:c6:d8:67:31:16:ab:6a:c6:40:ce:c2:fd:9d:67:
05:b0:d7:c6:ed:ed:94:7e:1b:b9:59:2c:17:dc:07:fd:7d:20:
dc:94:fe:9b:50:79:9b:f3:7b:83:85:5f:4b:5e:82:8f:89:49:
2f:b3:30:1c:66:10:18:2e:a4:1f:f5:08:53:45:83:23:90:06:
1b:cb:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:20 2026 by rpki-client