This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3133382e3131382e33362e302f32322d3234203d3e203532333038.roa
File: 3133382e3131382e33362e302f32322d3234203d3e203532333038.roa (raw, json)
Hash identifier: q06dOAXBlSYrL8Pzvqz/tlgLd129Q8mGoe6yb1lW0OU=
Subject key identifier: 9B:91:3C:BA:36:79:79:50:D0:5A:D3:F9:E5:0D:C8:60:FC:01:29:B0
Certificate issuer: /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial: 475AE757E8A0AD69CB8420B0449CB8994758AB10
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3133382e3131382e33362e302f32322d3234203d3e203532333038.roa
Signing time: Tue 06 Jan 2026 19:21:49 +0000
ROA not before: Tue 06 Jan 2026 19:16:49 +0000
ROA not after: Tue 05 Jan 2027 19:21:49 +0000
asID: 52308
IP address blocks: 138.118.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5a:e7:57:e8:a0:ad:69:cb:84:20:b0:44:9c:b8:99:47:58:ab:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Validity
Not Before: Jan 6 19:16:49 2026 GMT
Not After : Jan 5 19:21:49 2027 GMT
Subject: CN=9B913CBA36797950D05AD3F9E50DC860FC0129B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:c1:75:89:82:42:b9:42:26:05:89:a1:d1:
a4:ff:90:cd:eb:cf:e6:e8:ae:95:52:2e:36:2e:22:
33:c7:a3:77:8e:1b:df:92:f1:90:13:12:a3:b8:ef:
11:32:ec:17:92:e2:08:b5:6e:c7:f5:17:66:7c:c8:
ad:db:83:e3:6f:87:23:32:c0:3c:f9:04:52:5d:9d:
40:c0:87:52:f2:fa:ed:61:86:09:ef:02:21:0f:66:
cb:5d:43:ba:57:61:ad:61:b1:fa:03:3f:53:0f:d8:
91:63:95:59:91:95:43:5e:bb:d2:a8:fd:1a:d9:fa:
cd:0c:27:63:86:26:e0:6c:2e:0a:93:a4:38:e0:39:
e4:56:c5:18:fb:40:7e:13:4c:41:6f:f1:84:e8:1a:
53:a1:f7:ad:65:b1:5a:a8:ab:b6:74:a1:dc:8d:a7:
b8:bf:cb:e2:59:74:c5:a1:6a:d3:94:dd:75:d6:3b:
91:da:a8:53:0e:ca:66:12:91:03:10:68:eb:10:4b:
29:eb:5f:70:28:26:6a:13:fd:f5:19:4d:91:c9:f6:
92:89:aa:f3:33:81:1f:df:df:db:35:35:43:09:b0:
5f:38:c1:46:a4:51:e3:b1:e7:14:fc:46:e4:ed:fb:
36:ec:a8:af:ec:c2:64:cb:b7:b5:c4:b2:35:ad:ca:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:91:3C:BA:36:79:79:50:D0:5A:D3:F9:E5:0D:C8:60:FC:01:29:B0
X509v3 Authority Key Identifier:
keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3133382e3131382e33362e302f32322d3234203d3e203532333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:8f:4b:1b:8d:26:64:f0:17:fa:fe:f7:46:4a:ac:55:bb:bb:
1f:8f:c6:c2:e5:e8:f5:c7:c6:31:46:9f:2a:4a:24:96:a3:0d:
75:59:f8:72:0b:32:2c:38:e7:97:68:08:e2:87:ba:dc:79:68:
76:68:e7:bb:3f:5b:f8:6a:a5:e5:c9:f0:ce:fa:db:b0:78:35:
c2:f6:59:4a:ec:a5:bc:cf:ba:ac:c0:80:4d:53:7e:65:73:66:
0b:b5:48:6b:71:db:3c:9c:be:1d:18:0b:bd:56:db:60:b1:d9:
7e:03:6e:74:34:56:3a:73:4c:17:d8:79:12:07:0b:fa:87:1c:
45:e7:6d:9a:0c:35:29:8e:32:8f:87:91:39:bc:e2:36:b5:3a:
d3:3d:48:ad:b2:ef:6a:3e:be:eb:3b:64:d2:de:9b:fb:df:1f:
6b:c0:2a:86:04:03:aa:b2:8b:3d:d5:85:72:a7:0f:27:b5:1e:
93:12:8b:92:e1:0b:36:70:80:3b:4c:c1:4d:31:38:50:49:55:
25:8c:8b:61:bc:d1:78:c6:e0:95:5e:c4:c6:36:d1:c0:e6:53:
28:4f:42:5c:08:b6:a9:79:fe:6a:c6:aa:f9:3e:82:ad:15:0f:
ec:61:9a:05:22:ff:ec:3b:74:f9:23:bb:9e:84:b8:51:83:af:
7d:00:92:3b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUR1rnV+igrWnLhCCwRJy4mUdYqxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwMkUwRTU3OUM2MDM2OUI5RTU5NjJCQzdFNzAwNDI3
QjY5MTVCNjAeFw0yNjAxMDYxOTE2NDlaFw0yNzAxMDUxOTIxNDlaMDMxMTAvBgNV
BAMTKDlCOTEzQ0JBMzY3OTc5NTBEMDVBRDNGOUU1MERDODYwRkMwMTI5QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0cF1iYJCuUImBYmh0aT/kM3r
z+borpVSLjYuIjPHo3eOG9+S8ZATEqO47xEy7BeS4gi1bsf1F2Z8yK3bg+NvhyMy
wDz5BFJdnUDAh1Ly+u1hhgnvAiEPZstdQ7pXYa1hsfoDP1MP2JFjlVmRlUNeu9Ko
/RrZ+s0MJ2OGJuBsLgqTpDjgOeRWxRj7QH4TTEFv8YToGlOh961lsVqoq7Z0odyN
p7i/y+JZdMWhatOU3XXWO5HaqFMOymYSkQMQaOsQSynrX3AoJmoT/fUZTZHJ9pKJ
qvMzgR/f39s1NUMJsF84wUakUeOx5xT8RuTt+zbsqK/swmTLt7XEsjWtyjXLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUm5E8ujZ5eVDQWtP55Q3IYPwBKbAwHwYDVR0j
BBgwFoAUjALg5XnGA2m55ZYrx+cAQntpFbYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMUY1MTM0RDNGNzg0MkZDODNBMTVERUJBMjRCNTFDNzBC
RTcyNkRBRjlGMkQxNkFDNTQ1RUVBRDc0NDMyN0ZFLzAvOEMwMkUwRTU3OUM2MDM2
OUI5RTU5NjJCQzdFNzAwNDI3QjY5MTVCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QzAyRTBFNTc5QzYwMzY5QjlF
NTk2MkJDN0U3MDA0MjdCNjkxNUI2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjFGNTEzNEQzRjc4NDJGQzgzQTE1REVCQTI0QjUxQzcwQkU3MjZEQUY5
RjJEMTZBQzU0NUVFQUQ3NDQzMjdGRS8wLzMxMzMzODJlMzEzMTM4MmUzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMzMzAzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAop2JDAN
BgkqhkiG9w0BAQsFAAOCAQEAHo9LG40mZPAX+v73RkqsVbu7H4/GwuXo9cfGMUaf
KkoklqMNdVn4cgsyLDjnl2gI4oe63Hlodmjnuz9b+Gql5cnwzvrbsHg1wvZZSuyl
vM+6rMCATVN+ZXNmC7VIa3HbPJy+HRgLvVbbYLHZfgNudDRWOnNMF9h5EgcL+occ
Redtmgw1KY4yj4eRObziNrU60z1IrbLvaj6+6ztk0t6b+98fa8AqhgQDqrKLPdWF
cqcPJ7UekxKLkuELNnCAO0zBTTE4UElVJYyLYbzReMbglV7ExjbRwOZTKE9CXAi2
qXn+asaq+T6CrRUP7GGaBSL/7Dt0+SO7noS4UYOvfQCSOw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:00 2026 by rpki-client