This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235322e302f32342d3234203d3e203634313035.roa
File: 3133382e3230342e3235322e302f32342d3234203d3e203634313035.roa (raw, json)
Hash identifier: DGBdxCYUv9H/AbvVUT0wQRkjqf3MtIjM9JW8Y19Iv84=
Subject key identifier: 74:DA:79:AC:1A:20:EC:14:57:DA:B3:32:E5:18:E5:11:CA:31:40:C9
Certificate issuer: /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial: 6E72EFBC6821580274307124C8652E457320EAD4
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235322e302f32342d3234203d3e203634313035.roa
Signing time: Tue 06 Jan 2026 19:29:28 +0000
ROA not before: Tue 06 Jan 2026 19:24:28 +0000
ROA not after: Tue 05 Jan 2027 19:29:28 +0000
asID: 64105
IP address blocks: 138.204.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:72:ef:bc:68:21:58:02:74:30:71:24:c8:65:2e:45:73:20:ea:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Validity
Not Before: Jan 6 19:24:28 2026 GMT
Not After : Jan 5 19:29:28 2027 GMT
Subject: CN=74DA79AC1A20EC1457DAB332E518E511CA3140C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:50:4f:9e:f3:ce:b8:6f:9c:a4:6c:91:2d:
b0:aa:c6:e4:a6:bc:8b:b0:f0:74:6b:af:82:1e:00:
d0:06:fd:2b:4c:f3:64:14:68:b1:42:54:d2:85:e5:
d2:b5:1d:db:f7:5d:06:3c:31:50:06:fc:00:96:b1:
06:e8:a7:a1:ce:24:1d:27:31:44:e2:31:05:26:b8:
0e:f2:df:44:7c:be:51:91:98:72:be:6a:9c:07:72:
e5:14:2b:e7:48:46:36:2d:d1:5d:c0:b6:f6:bf:53:
f2:dc:0e:64:bd:eb:7e:3e:50:e9:a6:53:d5:98:a9:
06:60:82:2f:92:8b:f4:47:52:2f:35:5e:b2:37:6a:
88:35:b8:d0:9b:d2:2a:8d:c7:cf:63:26:f1:ac:2e:
6c:10:8a:19:f6:fd:5c:fc:b9:7e:47:9a:94:dd:d7:
e4:96:4d:b7:1a:1e:32:4b:a4:77:75:f5:7c:02:6d:
89:8b:6a:60:40:96:c6:cf:66:41:e7:dc:a0:cc:3d:
85:a7:9d:f4:0d:1e:e5:d6:c1:e3:ad:f5:90:8d:70:
6c:55:53:1a:2d:c9:fa:41:4d:22:ca:05:50:6d:6c:
5d:2e:39:6b:64:3d:c5:4f:1e:9e:45:f0:a3:0e:b9:
ff:d3:0a:8d:a1:a1:bf:61:ff:9e:81:7a:ea:67:a0:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:79:AC:1A:20:EC:14:57:DA:B3:32:E5:18:E5:11:CA:31:40:C9
X509v3 Authority Key Identifier:
keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235322e302f32342d3234203d3e203634313035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:51:54:c7:0a:05:f0:ce:e1:c8:68:fc:7d:4b:38:2b:dc:ad:
fb:55:1d:28:c0:6c:7a:29:5d:65:04:ef:52:c5:8f:50:35:ad:
78:76:d1:7b:ec:14:7f:9f:82:c6:54:2a:eb:14:1b:10:c8:75:
89:88:15:89:bb:b5:22:db:bb:01:fd:e1:4c:77:e1:53:eb:23:
3c:09:e8:9a:cf:72:28:1c:8f:7b:7b:ae:56:12:20:35:a7:90:
61:f1:65:fd:16:60:4d:47:94:46:a6:64:62:32:5b:27:ab:9f:
af:c6:03:dd:83:c4:cf:d1:93:a0:f7:25:66:d4:45:9e:d6:ff:
11:4e:d9:04:a7:9f:db:40:6d:0d:a2:1d:49:3a:b4:02:7e:04:
20:b7:30:42:03:ee:87:fc:14:82:81:84:15:2d:a8:e7:ec:2a:
11:99:1a:f5:5b:98:97:ce:de:78:0e:fc:4d:28:17:45:4b:00:
89:41:a1:9b:ea:34:ae:28:2d:27:9c:c3:2c:62:f5:82:bd:5a:
f8:79:d7:88:fc:05:89:ff:14:37:ae:aa:6c:30:e2:c5:7c:68:
97:c7:94:fd:28:30:a3:f9:f8:8c:33:02:24:ff:d2:5e:73:a6:
fa:37:ed:bc:08:61:e4:78:50:05:e5:dc:3c:e7:0e:e8:3a:36:
4b:04:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:40 2026 by rpki-client