This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3133382e35392e342e302f32322d3232203d3e20323633383231.roa
File: 3133382e35392e342e302f32322d3232203d3e20323633383231.roa (raw, json)
Hash identifier: XzWoWkRJLNThXbkduKbTJxwhac65yxknxo+qkaBtqOo=
Subject key identifier: C7:CA:85:4C:97:11:B8:6E:24:13:FD:61:BE:9A:34:16:6D:3E:B1:90
Certificate issuer: /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial: 3AA6CF22383EEF49328352DA6A93791D1BAB61D4
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3133382e35392e342e302f32322d3232203d3e20323633383231.roa
Signing time: Tue 06 Jan 2026 19:33:10 +0000
ROA not before: Tue 06 Jan 2026 19:28:10 +0000
ROA not after: Tue 05 Jan 2027 19:33:10 +0000
asID: 263821
IP address blocks: 138.59.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a6:cf:22:38:3e:ef:49:32:83:52:da:6a:93:79:1d:1b:ab:61:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Validity
Not Before: Jan 6 19:28:10 2026 GMT
Not After : Jan 5 19:33:10 2027 GMT
Subject: CN=C7CA854C9711B86E2413FD61BE9A34166D3EB190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:04:30:20:84:04:bd:7b:2a:81:98:56:91:
b9:08:25:da:66:c8:bf:e7:9d:08:58:5d:6f:b0:63:
0b:e4:4c:50:0f:31:a1:94:67:e0:1f:5a:a2:81:f3:
0b:46:9a:7a:f6:c7:ff:7d:c1:7c:95:f2:dc:ef:80:
f8:1d:23:20:b1:82:5b:d6:f1:45:0f:96:8a:3d:2c:
9d:d1:22:7f:2d:22:97:02:8a:d5:d8:44:af:bf:27:
d8:23:64:b5:74:ec:9f:66:82:80:59:fa:e0:77:e4:
ad:be:8b:46:4a:3c:79:ed:dc:b7:18:e1:d3:8c:e9:
58:5b:44:3e:71:c4:2c:26:0d:39:96:e9:22:97:7f:
0d:9a:de:11:e4:bf:b9:f2:05:50:e5:71:0e:ec:ce:
b8:e9:05:30:90:3c:9e:ed:b6:37:c6:a1:f2:a1:2d:
6a:c4:e8:b9:b5:6e:20:84:65:77:41:c2:2c:a1:1c:
96:88:ce:48:96:3b:99:c3:90:c5:21:6b:bc:b3:5c:
7d:03:a3:57:f0:bf:fe:f7:59:3d:4b:87:4a:70:61:
2f:d8:7c:92:f2:30:b8:b8:84:a5:89:aa:66:66:5e:
4f:f8:6f:b5:fa:a2:d3:23:5e:24:c6:fc:e7:d9:eb:
39:08:2c:a0:ab:73:68:ba:c0:94:f7:6e:c0:79:53:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CA:85:4C:97:11:B8:6E:24:13:FD:61:BE:9A:34:16:6D:3E:B1:90
X509v3 Authority Key Identifier:
keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3133382e35392e342e302f32322d3232203d3e20323633383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.4.0/22
Signature Algorithm: sha256WithRSAEncryption
49:0f:ad:69:1e:de:60:ce:e7:6c:a9:7e:76:25:6e:1e:6f:e1:
47:ab:df:d1:90:b2:94:ff:5c:64:91:60:b0:13:f0:c3:db:95:
d7:70:91:1f:f4:ec:26:76:b6:b1:50:a9:04:a5:f8:fe:9c:13:
fb:ff:5a:5d:fb:14:3f:5d:16:bc:b6:f8:0e:7e:6e:a0:c2:92:
dd:6f:1c:e7:a5:69:54:9b:99:75:f7:87:fb:c6:87:02:9a:74:
b4:fa:92:c0:ad:0e:ad:94:fe:27:6d:2d:e7:c8:96:2e:96:70:
cc:1f:1d:76:ea:d6:30:e7:67:1c:97:21:df:8f:bd:03:d3:fb:
a5:3f:71:91:20:a2:63:6a:e9:98:cf:3e:fd:f5:44:8b:29:39:
ab:9b:13:14:62:02:e3:95:93:80:db:0b:bd:8d:37:14:45:c0:
c0:35:1c:d8:4d:af:62:09:bb:2c:12:6b:3c:29:b8:1a:3e:58:
9c:5a:00:d6:c6:4d:09:9a:68:f0:48:84:f8:fc:a8:e1:fe:b0:
3b:75:31:d9:70:50:b7:f4:75:a6:a7:a6:ed:85:0d:81:28:f2:
7d:6f:fb:2e:a0:63:bc:0b:cd:0f:f8:18:49:ed:db:1d:0c:ac:
6e:7e:9e:7a:c6:80:6b:19:8c:1b:ef:41:7d:62:86:06:74:e5:
2c:f2:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:08 2026 by rpki-client