This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa
File: 3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa (raw, json)
Hash identifier: CEaDssmjQKdeM6np5d6hycQDXk27Voux1wpEStkzVRo=
Subject key identifier: DF:F1:0B:13:EC:A0:BE:71:B7:E5:8D:B7:60:59:87:67:D0:1F:A1:17
Certificate issuer: /CN=1E0307467F6E7691E7E576722E5D0EE6A42EDB86
Certificate serial: 76F63AA1A7971533FAFFE0FB1454E03A185C6DC8
Authority key identifier: 1E:03:07:46:7F:6E:76:91:E7:E5:76:72:2E:5D:0E:E6:A4:2E:DB:86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa
Signing time: Tue 06 Jan 2026 18:59:40 +0000
ROA not before: Tue 06 Jan 2026 18:54:40 +0000
ROA not after: Tue 05 Jan 2027 18:59:40 +0000
asID: 272031
IP address blocks: 181.189.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.crl
rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 06:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f6:3a:a1:a7:97:15:33:fa:ff:e0:fb:14:54:e0:3a:18:5c:6d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0307467F6E7691E7E576722E5D0EE6A42EDB86
Validity
Not Before: Jan 6 18:54:40 2026 GMT
Not After : Jan 5 18:59:40 2027 GMT
Subject: CN=DFF10B13ECA0BE71B7E58DB760598767D01FA117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:80:8d:27:91:1c:eb:22:23:b1:2f:60:b4:
06:28:16:65:3e:6e:78:f5:10:e2:9f:1e:05:cd:d0:
89:75:0d:d7:bf:a7:a4:91:d8:6f:e8:b1:ca:48:ea:
9c:c7:2d:f9:62:53:b4:69:01:4f:1f:80:f5:a7:23:
34:78:7c:2a:b4:59:ba:20:86:c3:f1:8c:cc:30:78:
3c:0d:b1:93:0a:d1:6e:63:a5:6a:4f:de:64:06:97:
7d:e3:a3:17:e1:23:10:74:b9:a2:3b:1a:59:55:31:
26:fa:51:37:b5:85:1c:d4:8e:be:81:82:bc:f5:9a:
de:36:33:62:16:28:d9:87:d0:fd:58:85:df:cf:46:
b3:39:90:b9:dc:92:ec:3f:24:fd:9d:d8:7b:11:5a:
f4:a5:90:45:72:b3:16:12:3d:bf:65:34:ad:47:f4:
46:fd:ed:35:e3:ee:86:77:ac:a0:14:e1:9d:d5:be:
77:bb:ac:ca:49:a4:d4:bc:41:af:59:d5:5c:6f:00:
19:50:4c:98:34:27:c4:c6:0d:80:ce:18:f0:0c:c5:
ac:27:87:3c:6d:9b:f9:5e:99:09:ab:5c:a3:df:cb:
3e:e7:6a:d3:a6:21:b6:c1:5f:5c:6c:1e:72:ec:e8:
53:a8:4d:29:53:6e:d4:5e:8f:ec:0f:7a:4c:ec:2f:
0e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F1:0B:13:EC:A0:BE:71:B7:E5:8D:B7:60:59:87:67:D0:1F:A1:17
X509v3 Authority Key Identifier:
keyid:1E:03:07:46:7F:6E:76:91:E7:E5:76:72:2E:5D:0E:E6:A4:2E:DB:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.20.0/22
Signature Algorithm: sha256WithRSAEncryption
97:ad:1e:9f:01:22:c3:d4:3f:c1:58:f8:f7:36:c9:c9:17:f2:
6d:52:b3:dd:2b:42:98:6c:41:48:54:74:c1:47:c2:40:7f:b3:
cb:43:4f:5d:e7:35:d7:e2:3a:1b:de:4f:02:47:e0:26:a0:5b:
dc:0a:44:0b:b1:65:4c:a9:06:50:9a:bd:fb:17:c4:ee:e9:24:
da:ed:96:e6:9e:b3:94:c3:e1:c8:a5:25:58:30:51:af:a7:66:
f9:ef:2d:64:16:08:45:da:85:67:77:8a:80:25:ba:55:44:da:
b4:64:1c:1a:4c:85:37:8b:20:ac:d3:3b:dd:da:18:50:7e:3a:
e5:e3:0e:27:9a:b5:3b:09:83:1c:dc:9a:9e:58:0a:bb:15:6d:
17:2f:7d:8c:4d:67:44:6b:e4:06:aa:06:b0:a9:45:71:d1:16:
f7:c4:4f:af:6d:15:4f:c7:fb:a0:a8:f4:b0:ba:d6:b3:e5:56:
9b:8b:c7:0a:58:1b:71:0a:7c:f4:97:ba:18:93:7e:11:31:23:
74:2e:a2:de:c0:de:00:5e:d1:da:f4:96:f3:12:4d:5d:68:53:
ef:9b:a3:bf:93:7f:c5:4b:42:05:dd:93:5c:d7:13:89:bf:64:
41:ef:98:03:f5:61:73:24:4d:66:b0:6d:e9:7f:7d:1f:94:ef:
8d:d2:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:32 2026 by rpki-client