This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3132302e3234382e302f32312d3231203d3e20323634363238.roa
File: 3139302e3132302e3234382e302f32312d3231203d3e20323634363238.roa (raw, json)
Hash identifier: +q22EbKSFqINi4JxU45w0qBPLIb4Qfq7dSfYwcHBVzY=
Subject key identifier: E4:58:A4:0C:5C:EE:7A:85:9A:4D:F6:06:20:18:FD:2A:85:B8:24:EA
Certificate issuer: /CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Certificate serial: 031F5309AC74D77A636C41F4CCCE2891422AF080
Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3132302e3234382e302f32312d3231203d3e20323634363238.roa
Signing time: Fri 09 Jan 2026 13:20:01 +0000
ROA not before: Fri 09 Jan 2026 13:15:01 +0000
ROA not after: Fri 08 Jan 2027 13:20:01 +0000
asID: 264628
IP address blocks: 190.120.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:1f:53:09:ac:74:d7:7a:63:6c:41:f4:cc:ce:28:91:42:2a:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Validity
Not Before: Jan 9 13:15:01 2026 GMT
Not After : Jan 8 13:20:01 2027 GMT
Subject: CN=E458A40C5CEE7A859A4DF6062018FD2A85B824EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:81:b6:72:e5:62:06:6a:75:fe:7d:47:ca:61:
b1:93:98:1f:4a:86:f5:e0:ae:64:17:e7:da:15:ce:
16:4e:d0:37:5d:e9:a3:1d:13:10:04:f7:1d:6f:11:
1a:6b:39:2f:17:a1:39:61:f3:8c:6b:74:24:2e:3e:
5a:11:ad:0c:b4:07:e4:7e:ca:ef:f0:c4:3b:96:56:
9a:63:62:c1:62:9d:5f:1d:59:c8:b4:71:bf:10:c7:
86:9c:41:40:d2:52:66:33:fb:f7:3d:ac:dd:ff:23:
a6:1d:89:58:48:5c:7f:91:27:59:37:7b:76:76:47:
18:69:35:91:3f:82:4f:c1:12:22:6b:17:44:b4:1b:
a6:9d:a9:09:80:1e:2b:70:a0:64:38:82:25:86:86:
d7:02:d1:8c:71:56:40:a4:d3:f2:a9:49:b5:bc:5d:
ef:c2:4c:7c:ca:c4:77:c2:af:96:9c:dd:70:c9:d8:
f6:e4:d0:bd:6d:ae:e0:ca:57:aa:f1:36:41:96:32:
c0:41:b6:6b:c6:85:81:d1:46:6a:d7:1e:fb:d0:0d:
a5:61:e6:62:47:ea:45:fc:e5:0a:f2:cd:3e:eb:23:
56:a1:30:b9:13:2c:bd:38:dd:74:bf:a3:0e:bd:8b:
3a:0b:fe:11:82:4a:ea:5a:b1:a3:af:cc:c5:86:f1:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:A4:0C:5C:EE:7A:85:9A:4D:F6:06:20:18:FD:2A:85:B8:24:EA
X509v3 Authority Key Identifier:
keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e3132302e3234382e302f32312d3231203d3e20323634363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.120.248.0/21
Signature Algorithm: sha256WithRSAEncryption
88:2e:a8:0b:68:69:ed:ec:48:06:b7:63:a9:77:53:f5:2b:4f:
4a:d9:64:bd:ab:9c:bf:85:bc:02:3c:93:db:fe:1c:aa:3b:7b:
e0:dd:da:4d:08:7f:c2:8f:c4:4c:81:cd:a8:f3:e2:4f:69:4b:
8e:d4:90:71:4b:bc:35:9f:8f:d1:9b:06:e2:c3:6f:5d:85:e3:
7f:f7:98:f3:0f:9b:3b:49:11:7d:47:ac:06:3f:b7:66:59:06:
67:9b:fe:50:ae:fa:fb:5b:d6:15:00:13:58:21:fb:eb:9b:ac:
3c:64:51:a5:05:51:6e:0f:31:ce:ec:91:e1:e6:04:27:9d:72:
1a:66:10:aa:cf:9f:bc:7b:5e:a6:98:50:db:f4:96:ac:0e:28:
b0:0a:b4:5e:6f:74:13:85:98:8a:8c:85:2b:21:b5:43:a8:9a:
d0:f5:81:f9:c9:79:7f:49:a6:aa:2b:ac:f5:12:84:dd:af:b0:
bf:d1:ab:8b:52:79:e6:e6:2f:0b:54:b7:de:07:8e:74:ed:db:
54:b8:dd:ef:03:00:1e:56:4c:42:e0:dc:82:bd:31:58:a6:2f:
db:e0:4e:b0:8f:7d:36:93:d5:1c:ac:2e:39:98:d4:00:8f:81:
31:86:49:25:a2:a7:41:36:38:e1:ee:ed:67:15:00:8a:89:d9:
29:ca:9d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:39:30 2026 by rpki-client