This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3133382e39392e3232342e302f32322d3234203d3e203237393031.roa
File: 3133382e39392e3232342e302f32322d3234203d3e203237393031.roa (raw, json)
Hash identifier: HejJA94Q6wT6XbDkOIGj0Q91kuTBBkon3XEtP+d61Tw=
Subject key identifier: 9E:FD:36:53:E1:52:A1:A4:62:AC:29:F3:84:48:0D:2F:87:E5:26:FB
Certificate issuer: /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial: 51A2707D62E2F944255BA91C47A0F8F0762034FD
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3133382e39392e3232342e302f32322d3234203d3e203237393031.roa
Signing time: Tue 06 Jan 2026 19:46:19 +0000
ROA not before: Tue 06 Jan 2026 19:41:19 +0000
ROA not after: Tue 05 Jan 2027 19:46:19 +0000
asID: 27901
IP address blocks: 138.99.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl
rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a2:70:7d:62:e2:f9:44:25:5b:a9:1c:47:a0:f8:f0:76:20:34:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Validity
Not Before: Jan 6 19:41:19 2026 GMT
Not After : Jan 5 19:46:19 2027 GMT
Subject: CN=9EFD3653E152A1A462AC29F384480D2F87E526FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:ac:0a:42:15:12:16:ea:44:41:68:9f:0c:
87:0c:31:31:e5:e2:bb:da:9a:a0:97:61:f2:a3:b5:
c0:ec:23:a6:91:67:ba:02:bd:b3:a0:13:80:49:1e:
9e:7b:d9:a7:21:09:82:a8:bd:8a:99:42:0d:c1:ad:
62:f1:f9:1c:fe:1d:d5:79:71:3d:11:0e:22:20:c5:
b2:ac:53:91:2b:1f:26:0f:b5:b9:9a:f6:ca:4e:05:
4b:f7:6f:9c:cc:05:65:1f:ad:3f:37:35:ca:17:21:
16:88:e1:78:e0:5b:1c:b0:1d:94:c1:aa:4d:e2:04:
d0:ca:87:e3:37:6c:9c:54:c2:9b:8e:aa:bf:3e:b5:
21:7c:af:95:d9:0d:f7:10:2e:6a:ac:0e:fa:57:8d:
9e:a3:41:2b:12:d3:dc:3b:ab:2b:9c:dc:44:c3:bb:
b2:88:aa:23:98:c8:83:01:63:b7:10:5f:e5:d1:09:
89:60:0a:55:21:a0:4e:39:cc:e9:43:37:64:1f:6c:
0f:2c:cc:f8:68:cc:7e:36:ba:97:f3:be:89:a1:39:
7b:1e:81:c9:19:9b:bd:ad:6e:b5:2a:9c:1b:f5:46:
56:d9:10:93:6b:36:ee:0e:cf:ea:d0:4e:ca:ad:f8:
50:a5:a3:34:1b:24:3d:3d:5c:dc:d9:16:af:fb:15:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FD:36:53:E1:52:A1:A4:62:AC:29:F3:84:48:0D:2F:87:E5:26:FB
X509v3 Authority Key Identifier:
keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3133382e39392e3232342e302f32322d3234203d3e203237393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.224.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:42:fb:ba:4a:ed:23:ab:9c:13:bf:80:1b:61:a0:ae:8f:9b:
90:89:92:c9:32:fd:f9:32:82:29:b3:35:ac:c8:f4:fa:4f:c9:
25:1c:0b:a5:c0:5b:37:30:42:6e:fc:9b:4f:23:d9:68:df:d0:
91:30:85:74:3c:0a:aa:85:3c:e2:d6:6a:a6:9c:1c:90:23:34:
10:95:db:24:64:d6:1e:e5:18:d0:8c:92:61:b5:f2:46:6b:c9:
80:ea:d6:f2:a6:8a:b2:d5:04:e3:f0:f8:e9:bf:b9:b4:7b:cf:
f2:37:ba:ef:c9:c0:39:a0:aa:e9:6c:f3:5e:db:cf:06:b6:16:
dd:38:48:fc:3b:e4:aa:49:3d:47:54:e0:6b:ce:e0:fe:21:d1:
e2:34:11:f3:21:ae:c3:29:ab:48:8e:d9:0c:a2:f7:0f:e7:12:
85:0a:2b:36:07:27:25:eb:e4:2e:e8:ab:04:48:08:d2:7f:74:
e5:a9:02:f5:af:19:79:1c:8d:76:af:86:68:0c:7a:c6:e2:7d:
d9:1e:18:df:b8:9d:71:94:4b:b3:81:0e:fd:79:5a:55:bb:7d:
56:0e:96:8c:51:9e:ea:56:06:9b:02:a0:d4:27:c3:29:a7:25:
ec:4a:a5:1c:15:91:62:73:31:46:fb:12:0e:61:6e:52:84:26:
d9:bb:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:22 2026 by rpki-client