This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa
File: 3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa (raw, json)
Hash identifier: jx7EAbuxII/7UrSTHPmz+75CuCbKYifB1n3O6Q/Caq0=
Subject key identifier: B1:CB:71:DB:A3:0E:18:30:97:1B:9A:A8:35:91:D3:4A:84:20:9D:25
Certificate issuer: /CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Certificate serial: 2E458A9CF5E6C92C3B3CAA072E0EE5A4F35F2EC5
Authority key identifier: B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa
Signing time: Tue 06 Jan 2026 19:26:10 +0000
ROA not before: Tue 06 Jan 2026 19:21:10 +0000
ROA not after: Tue 05 Jan 2027 19:26:10 +0000
asID: 262287
IP address blocks: 138.99.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 15:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:45:8a:9c:f5:e6:c9:2c:3b:3c:aa:07:2e:0e:e5:a4:f3:5f:2e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Validity
Not Before: Jan 6 19:21:10 2026 GMT
Not After : Jan 5 19:26:10 2027 GMT
Subject: CN=B1CB71DBA30E1830971B9AA83591D34A84209D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:34:29:aa:a8:77:10:d1:8e:0f:08:2a:de:
ee:da:1a:05:75:ed:14:06:fe:02:26:91:be:66:ad:
e4:46:3e:20:97:f5:fd:34:e2:46:fb:f1:f9:b5:41:
17:d8:41:c8:26:df:2b:3e:a4:4b:b7:4f:e9:51:1e:
53:64:bf:99:0e:ed:ce:69:18:c9:8d:cb:ab:71:c6:
2d:39:5d:c8:c3:9c:7e:67:05:66:5d:7e:83:db:63:
65:74:af:4e:d2:12:89:f0:8d:3c:f4:d2:9f:c3:66:
f3:83:85:fe:15:84:70:31:01:58:43:a2:f6:4b:40:
58:f4:05:a3:53:65:1f:f2:08:e8:33:77:4a:20:23:
22:dd:5f:3c:ba:6a:7d:96:f7:bc:a3:d3:10:e9:23:
c8:8a:2d:8b:3c:40:dc:98:98:4c:b7:b7:bb:88:19:
54:b0:64:71:4f:9d:45:d2:18:c4:99:f5:b3:1f:61:
fb:b2:50:f4:5f:0a:c6:36:79:c8:ab:1b:93:32:f0:
ad:84:f7:91:dd:2a:d3:11:56:21:4e:f4:30:b3:14:
d8:09:3c:82:13:2b:36:f5:a0:3f:fb:4d:26:38:81:
a6:07:c4:f0:8c:21:64:dc:0e:3b:ed:65:0d:9f:2b:
13:a5:25:58:33:4e:b6:f2:fb:a1:72:05:df:97:85:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CB:71:DB:A3:0E:18:30:97:1B:9A:A8:35:91:D3:4A:84:20:9D:25
X509v3 Authority Key Identifier:
keyid:B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:e1:f0:c1:63:9a:52:32:84:00:18:8a:36:c7:0c:c1:b3:32:
ac:30:a5:42:ca:96:f6:60:37:25:68:d5:db:48:89:06:dc:19:
75:ad:f4:0e:b4:62:ce:e3:cb:28:0a:58:55:31:1b:55:1d:63:
c8:72:99:6f:4b:97:47:b9:fa:d6:df:91:95:e8:cf:d5:b3:c0:
b1:90:2f:61:b7:c5:b1:82:8e:6a:7c:39:85:80:56:3c:d6:e2:
fb:56:c6:8d:ad:0f:52:7f:07:b1:72:cc:c0:53:da:64:1a:de:
ab:d8:2d:b2:22:f5:14:f5:a3:ef:a9:b5:81:da:ae:a8:90:2f:
e6:d6:54:81:be:ae:a8:81:92:5f:a4:e3:08:e7:6c:0b:18:9b:
e0:b7:17:a5:7e:43:d5:83:fc:47:43:a8:c7:0f:77:80:61:2d:
dc:18:b9:7c:d2:46:71:15:ca:b3:df:88:67:b4:2e:b7:4b:f0:
e3:f9:35:89:26:65:33:e6:21:cd:34:26:b3:30:fd:83:58:0b:
6d:1d:3c:fa:60:0b:0f:c0:0e:ce:57:db:e3:28:db:fd:ca:0c:
2f:73:77:29:c5:4b:0a:54:f8:db:31:18:0a:f1:0f:e4:76:ba:
01:9c:2b:82:8e:16:f5:27:b8:5d:de:12:dd:a4:6a:93:f7:90:
f4:92:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:22 2026 by rpki-client