This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131362e302f32322d3234203d3e20323635353031.roa
File: 3133382e3235352e3131362e302f32322d3234203d3e20323635353031.roa (raw, json)
Hash identifier: s3mpc4Av7VjG+AxmE4HJoP0uggg1DRcgn29nUDYyAZc=
Subject key identifier: 82:D6:02:A0:4D:F2:C0:BB:1C:8D:F5:CF:CE:57:78:60:A1:22:00:5F
Certificate issuer: /CN=35D619733A3D3A776B2D5FB84305186B942E249A
Certificate serial: 63269A911F441CC00FC9E0C44BB8BA3D4510C461
Authority key identifier: 35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131362e302f32322d3234203d3e20323635353031.roa
Signing time: Tue 06 Jan 2026 19:14:33 +0000
ROA not before: Tue 06 Jan 2026 19:09:33 +0000
ROA not after: Tue 05 Jan 2027 19:14:33 +0000
asID: 265501
IP address blocks: 138.255.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl
rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:26:9a:91:1f:44:1c:c0:0f:c9:e0:c4:4b:b8:ba:3d:45:10:c4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35D619733A3D3A776B2D5FB84305186B942E249A
Validity
Not Before: Jan 6 19:09:33 2026 GMT
Not After : Jan 5 19:14:33 2027 GMT
Subject: CN=82D602A04DF2C0BB1C8DF5CFCE577860A122005F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:8c:41:59:ef:fe:36:74:02:a6:50:88:8a:
10:3f:11:b1:c4:e2:3f:3d:dd:c5:b8:70:be:0c:c6:
9f:aa:00:48:a5:f7:ab:f8:cc:57:98:27:19:8a:01:
23:7e:f9:6d:2d:43:ff:11:11:71:b0:ff:bb:86:e1:
5d:76:01:a1:c8:48:ea:ef:77:fc:34:f3:89:a2:6a:
52:25:a4:46:ca:27:77:63:86:fe:ce:60:a9:6b:2f:
0d:9f:50:e5:92:80:ce:53:30:32:ec:59:78:23:6a:
95:a0:12:85:38:06:ef:7c:99:5d:76:6b:f6:cf:73:
dd:e5:15:b0:7e:1c:8e:1a:a4:66:99:b8:b5:35:79:
a2:64:04:d3:2c:65:27:d5:53:a7:01:87:75:af:1b:
c8:bc:4b:7a:df:1e:42:bb:3a:67:4c:3b:ff:7e:b0:
af:9c:be:a5:7f:73:ad:d9:71:f1:0e:23:8f:53:bd:
d2:21:bd:4b:cf:13:a3:e0:e4:ee:c4:cb:97:34:0f:
84:e3:65:91:b4:f9:bd:c5:db:fe:ec:9e:75:ee:98:
72:ab:46:68:6a:ad:ef:bc:a1:ab:25:e8:d3:c1:33:
d0:5f:33:0b:6e:2d:7a:9e:d4:d3:19:07:b5:33:aa:
53:43:be:16:93:85:a0:33:8e:cb:c8:1e:51:11:e8:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:02:A0:4D:F2:C0:BB:1C:8D:F5:CF:CE:57:78:60:A1:22:00:5F
X509v3 Authority Key Identifier:
keyid:35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131362e302f32322d3234203d3e20323635353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:15:71:3f:ac:ee:5c:ed:25:7e:0e:fe:65:2f:06:62:6b:0c:
12:25:ec:a3:a1:59:40:2b:1b:5d:be:76:fe:e8:60:a0:ca:72:
97:45:29:9b:a7:fa:90:08:cc:96:63:a4:6f:a7:a7:59:74:38:
f7:7e:a4:c9:a9:29:f5:24:01:74:7b:84:da:1e:77:10:40:b1:
dd:43:ae:92:6a:d7:1d:87:cb:d5:d7:9e:f7:27:27:6d:18:82:
bb:a6:86:e3:ae:28:cc:2b:cc:11:74:2e:bf:80:17:8e:d8:2d:
14:ac:36:43:94:16:db:36:09:df:63:bb:ad:90:0c:2b:15:95:
6d:b8:00:31:f7:de:05:33:2f:40:e3:26:f2:8f:fc:fb:8a:de:
e0:d8:4d:5f:03:cb:98:41:14:b4:22:61:75:77:d6:ea:d3:cb:
81:de:de:40:cc:48:be:b7:61:ed:43:c0:8d:2c:d4:fd:cb:40:
b3:c9:51:6b:d5:95:5c:19:9e:7d:8b:5f:b8:7d:68:a9:36:1f:
98:86:1d:b3:00:a6:f0:87:0c:0a:ee:be:94:da:4d:9c:39:14:
89:61:d0:6f:bb:7a:b6:f4:78:cb:80:99:c0:57:e3:5a:0d:75:
f4:09:83:90:eb:d6:6c:bb:6a:b4:66:1f:d0:73:f8:29:68:7d:
d6:5b:62:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:50 2026 by rpki-client