This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3132382e302f31382d3234203d3e203532323238.roa
File: 3138362e3135392e3132382e302f31382d3234203d3e203532323238.roa (raw, json)
Hash identifier: oyJ1YuldbRubTzq8qXg1pMqkXdIQzD/NTvxoq8KBThM=
Subject key identifier: 8D:D6:E3:CD:57:97:C6:30:8E:ED:4D:D1:7E:27:BB:0D:54:05:44:7D
Certificate issuer: /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial: 6C3CD3C2C1833C04899DC20B1D5E1712D2D94057
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3132382e302f31382d3234203d3e203532323238.roa
Signing time: Tue 06 Jan 2026 19:00:07 +0000
ROA not before: Tue 06 Jan 2026 18:55:07 +0000
ROA not after: Tue 05 Jan 2027 19:00:07 +0000
asID: 52228
IP address blocks: 186.159.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3c:d3:c2:c1:83:3c:04:89:9d:c2:0b:1d:5e:17:12:d2:d9:40:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Validity
Not Before: Jan 6 18:55:07 2026 GMT
Not After : Jan 5 19:00:07 2027 GMT
Subject: CN=8DD6E3CD5797C6308EED4DD17E27BB0D5405447D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:93:c3:c6:60:4c:ea:f0:01:c8:19:94:3c:
98:30:d9:af:9a:ae:5d:55:89:74:f5:5f:89:e6:2d:
a8:0c:5f:2b:e3:72:5e:38:37:2e:fe:6d:aa:7e:06:
19:fc:37:85:58:46:2c:43:16:3f:28:c2:93:71:3a:
0b:dc:0b:22:ef:94:a8:07:aa:83:3f:66:b6:0a:07:
fc:0c:4c:e3:52:e7:c4:e7:36:cd:4a:a2:3c:05:c6:
4b:c7:6e:a5:9c:88:d1:19:a4:60:b9:d8:9d:98:0d:
11:97:71:87:30:8c:db:9d:58:d9:d8:a1:8b:08:9b:
09:13:4c:08:72:2d:4a:44:7b:b8:8c:8e:98:40:e5:
10:e5:7c:79:be:5e:8f:9f:0c:a2:ce:e0:6d:e8:dc:
ab:0b:eb:0f:eb:90:6c:8c:c1:79:f6:63:31:44:53:
60:ce:7c:63:d9:cf:04:b4:6b:85:0f:7c:b6:6e:0a:
2d:86:6e:fd:68:cc:41:36:36:fb:bc:c9:82:f0:be:
b9:43:92:ba:c0:43:58:84:dd:4b:4a:8b:f5:1b:33:
ef:35:df:a7:47:12:21:25:06:69:6e:8d:a9:7f:39:
b5:3c:48:56:1d:36:5c:c4:c2:4a:ea:b1:e4:5e:31:
46:77:63:87:bb:ee:f6:63:06:11:42:91:6c:03:c7:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D6:E3:CD:57:97:C6:30:8E:ED:4D:D1:7E:27:BB:0D:54:05:44:7D
X509v3 Authority Key Identifier:
keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3132382e302f31382d3234203d3e203532323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.159.128.0/18
Signature Algorithm: sha256WithRSAEncryption
12:fc:12:d9:44:04:b3:55:07:80:ba:77:14:94:42:1f:fa:d2:
43:fa:da:32:db:26:be:3a:67:79:97:44:46:5c:bc:99:86:9d:
c3:39:3e:b7:15:bf:fe:1c:83:8a:95:ca:92:cc:a5:42:37:d0:
5a:40:64:66:1e:88:7e:39:2e:e9:52:1e:03:b8:55:5a:cb:52:
c4:85:5f:61:32:72:b6:0a:42:ce:1a:be:00:df:ac:57:73:88:
ac:f0:5d:b6:5e:a9:cd:12:d3:b0:3d:a9:63:34:9f:fb:af:dc:
e3:47:88:0d:6f:ba:93:61:3d:f0:ac:aa:84:22:75:84:44:85:
b9:db:d5:9d:67:18:c8:69:f8:f8:9a:98:84:72:18:1c:d3:ae:
ff:43:33:03:db:8e:1f:a1:3a:ab:db:96:7d:10:a3:e2:c2:37:
b1:93:67:35:6f:41:7b:28:11:99:2a:a2:ba:4f:1f:5e:f6:10:
9f:a9:e8:84:f3:04:d9:73:e5:34:be:4a:59:cc:0a:4f:5f:04:
bd:73:f1:12:6c:77:ea:e5:a2:f7:b7:42:de:40:99:48:67:83:
26:4c:63:79:ac:c0:4a:d4:8f:96:09:c8:51:77:78:78:aa:bb:
9a:c2:cc:e1:1a:b3:16:59:49:db:aa:56:f1:a0:89:78:8b:49:
f3:05:c6:c7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbDzTwsGDPASJncILHV4XEtLZQFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxMUFDQkE3MkU4MEMwMEZFQzEzRDMwQUM2NzYxMzhB
N0FDNDhDNzAeFw0yNjAxMDYxODU1MDdaFw0yNzAxMDUxOTAwMDdaMDMxMTAvBgNV
BAMTKDhERDZFM0NENTc5N0M2MzA4RUVENEREMTdFMjdCQjBENTQwNTQ0N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNlZPDxmBM6vAByBmUPJgw2a+a
rl1ViXT1X4nmLagMXyvjcl44Ny7+bap+Bhn8N4VYRixDFj8owpNxOgvcCyLvlKgH
qoM/ZrYKB/wMTONS58TnNs1KojwFxkvHbqWciNEZpGC52J2YDRGXcYcwjNudWNnY
oYsImwkTTAhyLUpEe7iMjphA5RDlfHm+Xo+fDKLO4G3o3KsL6w/rkGyMwXn2YzFE
U2DOfGPZzwS0a4UPfLZuCi2Gbv1ozEE2Nvu8yYLwvrlDkrrAQ1iE3UtKi/UbM+81
36dHEiElBmlujal/ObU8SFYdNlzEwkrqseReMUZ3Y4e77vZjBhFCkWwDx9etAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUjdbjzVeXxjCO7U3Rfie7DVQFRH0wHwYDVR0j
BBgwFoAU9RGsunLoDAD+wT0wrGdhOKesSMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQz
MzZDMEMzQkU3RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvRjUxMUFDQkE3MkU4MEMw
MEZFQzEzRDMwQUM2NzYxMzhBN0FDNDhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTExQUNCQTcyRTgwQzAwRkVD
MTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVBMUE0N0M4MkU1NDQzNTNFNEJEMzY3OUQyNTUyOEREMzM2QzBDM0JF
N0Y5QzhCODg0NTRFN0M0MTdCNjlGRi8wLzMxMzgzNjJlMzEzNTM5MmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzNTMyMzIzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGup+A
MA0GCSqGSIb3DQEBCwUAA4IBAQAS/BLZRASzVQeAuncUlEIf+tJD+toy2ya+Omd5
l0RGXLyZhp3DOT63Fb/+HIOKlcqSzKVCN9BaQGRmHoh+OS7pUh4DuFVay1LEhV9h
MnK2CkLOGr4A36xXc4is8F22XqnNEtOwPaljNJ/7r9zjR4gNb7qTYT3wrKqEInWE
RIW529WdZxjIafj4mpiEchgc067/QzMD244foTqr25Z9EKPiwjexk2c1b0F7KBGZ
KqK6Tx9e9hCfqeiE8wTZc+U0vkpZzApPXwS9c/ESbHfq5aL3t0LeQJlIZ4MmTGN5
rMBK1I+WCchRd3h4qruawszhGrMWWUnbqlbxoIl4i0nzBcbH
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:25 2026 by rpki-client