This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134302e302f32322d3232203d3e203631343930.roa
File: 3133312e3130382e3134302e302f32322d3232203d3e203631343930.roa (raw, json)
Hash identifier: 3l1sQmFDhXK1DeQIlcLshu/CBzPCAl5ef+fyeJ7zEvo=
Subject key identifier: 9A:49:33:A3:CF:E0:50:BC:A6:56:AA:8E:88:61:58:B3:C8:11:AE:A4
Certificate issuer: /CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Certificate serial: 3CC2232451F9C70F8A8E698F6C0F932326B44927
Authority key identifier: D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134302e302f32322d3232203d3e203631343930.roa
Signing time: Tue 06 Jan 2026 18:57:43 +0000
ROA not before: Tue 06 Jan 2026 18:52:43 +0000
ROA not after: Tue 05 Jan 2027 18:57:43 +0000
asID: 61490
IP address blocks: 131.108.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c2:23:24:51:f9:c7:0f:8a:8e:69:8f:6c:0f:93:23:26:b4:49:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Validity
Not Before: Jan 6 18:52:43 2026 GMT
Not After : Jan 5 18:57:43 2027 GMT
Subject: CN=9A4933A3CFE050BCA656AA8E886158B3C811AEA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:91:25:4e:47:22:e1:5d:99:fb:d2:7a:4d:
bb:0a:a8:3d:5c:7a:bd:2d:37:0b:08:4e:11:d3:32:
98:07:4b:d2:09:73:0a:e8:b4:de:e8:9c:7f:32:c2:
b3:6b:fd:ea:5b:3d:8f:a7:a9:45:f5:f1:ef:49:f9:
0c:68:b8:fa:ca:c8:06:b5:eb:67:ef:1c:9f:71:f7:
2e:45:e9:52:78:dc:2b:f4:48:a9:68:ef:01:f8:fa:
7d:2b:8e:af:77:ed:67:a8:e4:44:bf:3e:76:0e:09:
8e:f0:a7:c2:e9:76:5d:4a:48:4f:b9:13:93:6f:0d:
e6:f8:60:9a:d3:15:7d:95:45:5f:4c:e7:47:68:ac:
2f:5f:f3:bb:73:37:89:47:21:a4:51:85:55:09:db:
cc:f3:d4:99:6d:6f:60:36:f0:ba:ab:6f:89:21:aa:
5f:ab:db:76:df:25:c0:11:ee:84:60:84:47:24:f2:
85:b8:02:3b:36:49:68:a2:d0:18:c1:48:1a:91:f0:
46:72:51:b9:e8:45:ca:bd:57:6a:80:07:2d:e6:16:
ad:da:86:a1:20:3f:f7:ec:16:02:3e:13:d6:b6:39:
92:49:bd:ae:b7:e0:bf:cd:b5:e6:20:85:a4:03:6f:
41:f3:ef:53:14:96:d2:72:85:3c:7e:4d:7d:11:a8:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:49:33:A3:CF:E0:50:BC:A6:56:AA:8E:88:61:58:B3:C8:11:AE:A4
X509v3 Authority Key Identifier:
keyid:D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134302e302f32322d3232203d3e203631343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:c5:95:05:59:fe:85:dc:8d:fd:f1:35:b8:e1:ae:3d:eb:75:
86:f6:73:5d:de:32:0f:dc:79:96:72:4a:9d:a3:81:a8:ce:4e:
90:af:e1:d0:98:73:b9:59:f5:3a:f5:39:9f:b5:92:8a:4e:92:
c0:50:d4:db:3b:67:78:ba:02:46:45:10:76:73:fa:a2:5f:1f:
56:17:7a:98:0f:0a:e1:68:f0:d3:75:7d:37:9c:76:b4:18:0f:
d3:57:75:fc:b9:ce:c8:9d:62:9e:93:d5:56:7b:24:7c:47:bf:
ba:85:f4:b4:a9:5d:d2:20:1d:82:41:8f:ab:bb:33:1c:4b:33:
f7:3f:93:50:a1:e3:18:a8:53:4b:fa:08:3d:1a:0f:e0:70:02:
d7:d6:b4:32:20:13:d6:a4:84:88:0c:32:c2:0b:cb:7a:49:0c:
dd:7f:44:77:a9:02:bc:c0:81:0e:a8:50:22:76:e1:10:8b:bf:
38:b4:0b:b6:91:8c:49:b2:80:9c:41:f3:05:90:90:41:85:35:
7b:6a:3f:2c:7e:9d:fa:9f:0a:04:2c:64:a8:01:79:8c:ec:06:
84:87:17:40:58:5a:29:c6:ca:54:f3:d9:23:d7:11:66:99:3b:
11:07:9d:71:5b:7b:6e:60:d5:4e:5a:40:92:c9:95:0a:fd:51:
58:3f:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:35 2026 by rpki-client