This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/3133382e3131372e382e302f32322d3234203d3e20323637383137.roa
File: 3133382e3131372e382e302f32322d3234203d3e20323637383137.roa (raw, json)
Hash identifier: 42236CmWt8N+zhVDAqggti5erts2B/ppd9DzfU+Y6H8=
Subject key identifier: 96:F8:36:9C:C7:23:4F:FE:24:15:13:3A:0C:35:EC:39:D0:30:C0:4B
Certificate issuer: /CN=57696D227BF558822356A541E87E2F70E2A214E2
Certificate serial: 031D734983F9BC014C020EEB1AE1226746A90E57
Authority key identifier: 57:69:6D:22:7B:F5:58:82:23:56:A5:41:E8:7E:2F:70:E2:A2:14:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/3133382e3131372e382e302f32322d3234203d3e20323637383137.roa
Signing time: Tue 06 Jan 2026 19:42:28 +0000
ROA not before: Tue 06 Jan 2026 19:37:28 +0000
ROA not after: Tue 05 Jan 2027 19:42:28 +0000
asID: 267817
IP address blocks: 138.117.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/57696D227BF558822356A541E87E2F70E2A214E2.crl
rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/57696D227BF558822356A541E87E2F70E2A214E2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:1d:73:49:83:f9:bc:01:4c:02:0e:eb:1a:e1:22:67:46:a9:0e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57696D227BF558822356A541E87E2F70E2A214E2
Validity
Not Before: Jan 6 19:37:28 2026 GMT
Not After : Jan 5 19:42:28 2027 GMT
Subject: CN=96F8369CC7234FFE2415133A0C35EC39D030C04B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:87:63:84:51:f3:50:04:ec:88:05:4a:33:
24:36:ab:bf:79:0f:77:b4:f6:35:d4:9b:8e:bd:4d:
2a:37:1a:10:f6:48:02:26:2e:1e:3a:a6:e1:39:55:
7f:04:3c:3a:3f:43:72:fb:ed:dc:0c:e5:f8:af:ec:
ef:61:b5:c4:a3:08:f4:8d:cb:70:06:2a:23:b0:2f:
75:c0:6f:61:2b:55:e8:26:75:c3:6a:90:2f:24:5a:
e2:7c:2a:1d:de:64:84:25:e4:a3:e3:6b:11:17:df:
da:a9:8a:65:20:aa:5c:27:00:d3:b2:6c:c5:d9:3b:
3b:44:73:81:51:62:57:f6:0b:8a:49:51:f4:80:0b:
79:21:38:2f:1b:83:0f:d0:7a:be:4b:9a:19:8c:85:
c2:d5:c8:51:a6:25:fa:1d:f8:ea:10:37:b2:44:92:
8a:27:b0:e2:2f:de:00:9f:39:b7:51:96:f2:a5:da:
56:5f:c4:80:be:98:a7:f6:a1:3c:3e:85:d5:b1:62:
68:13:94:88:77:d4:7d:57:4a:8e:37:8c:c8:25:df:
a5:c4:b1:f6:b9:ed:2f:79:07:df:23:e9:90:c3:08:
07:0b:49:86:db:d7:59:8c:56:a9:8d:4a:89:c5:5b:
9f:a0:04:e8:a5:bb:84:77:f9:75:60:e3:92:28:98:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:36:9C:C7:23:4F:FE:24:15:13:3A:0C:35:EC:39:D0:30:C0:4B
X509v3 Authority Key Identifier:
keyid:57:69:6D:22:7B:F5:58:82:23:56:A5:41:E8:7E:2F:70:E2:A2:14:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/57696D227BF558822356A541E87E2F70E2A214E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/3133382e3131372e382e302f32322d3234203d3e20323637383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.8.0/22
Signature Algorithm: sha256WithRSAEncryption
20:b9:10:51:4c:0e:12:c4:ef:f2:e9:35:54:7c:f6:74:6b:72:
4d:a9:5a:b4:54:db:f1:bd:dd:0a:39:20:39:21:7c:bd:8f:f4:
d8:0f:ad:24:63:2c:78:64:90:ec:ad:a1:46:ac:b2:50:f8:dd:
57:db:d1:ae:64:7a:70:2d:45:96:6b:c5:6b:7a:85:08:41:cc:
24:6e:c2:29:c7:11:23:14:a8:5e:69:86:40:ab:26:89:b9:d6:
8c:ac:72:79:a0:da:0a:fb:68:f8:56:af:16:a0:53:44:a3:7c:
33:71:04:07:38:38:3b:6f:39:ff:26:94:0d:fb:71:6f:4b:7e:
da:aa:67:90:e2:a1:3d:e0:e9:ac:e7:ba:6f:b6:fc:3f:a0:2e:
4a:45:b4:12:57:c2:c4:47:42:e0:f8:1d:58:a0:00:7e:ea:77:
9c:ad:36:ce:26:3a:ee:b3:97:82:98:1d:12:0d:0d:d7:32:92:
ad:6c:75:bb:f4:2e:97:30:82:52:48:66:33:79:6e:b3:f0:8f:
22:50:72:be:de:58:10:15:cb:07:9f:de:be:0a:cf:d9:65:99:
75:bc:42:56:40:ac:06:35:91:4d:d1:9d:8e:64:3a:92:25:8c:
86:dc:58:06:b3:8a:43:07:82:2c:21:7c:73:d0:9a:75:5f:a0:
a5:df:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:44 2026 by rpki-client