This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3133382e302f32332d3234203d3e203532333236.roa
File: 3139302e3135312e3133382e302f32332d3234203d3e203532333236.roa (raw, json)
Hash identifier: bXpukXpSUlAhP86j93kEXFF31tzJ0ZoTyokpxBxa36U=
Subject key identifier: 47:1B:16:90:49:93:C8:C0:49:7A:41:2F:6C:51:40:72:C9:0C:D7:0E
Certificate issuer: /CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Certificate serial: 0B8C319DFFF1ED87177D9681DD9CD81FE52966EB
Authority key identifier: 9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3133382e302f32332d3234203d3e203532333236.roa
Signing time: Tue 02 Dec 2025 17:53:55 +0000
ROA not before: Tue 02 Dec 2025 17:48:55 +0000
ROA not after: Tue 01 Dec 2026 17:53:55 +0000
asID: 52326
IP address blocks: 190.151.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl
rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 00:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:8c:31:9d:ff:f1:ed:87:17:7d:96:81:dd:9c:d8:1f:e5:29:66:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Validity
Not Before: Dec 2 17:48:55 2025 GMT
Not After : Dec 1 17:53:55 2026 GMT
Subject: CN=471B16904993C8C0497A412F6C514072C90CD70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:20:a2:ad:3e:5b:d6:34:08:1b:78:0b:e3:b9:
5e:ac:4b:9d:63:70:fa:1c:a3:08:72:a3:37:5e:78:
5b:d9:2d:ae:2f:ee:b9:07:13:0c:09:22:b8:c5:da:
c9:a7:23:cb:6e:40:6b:a9:84:d6:27:44:3a:dd:dc:
ca:04:09:98:77:a9:fb:72:85:e4:a5:23:d9:a5:b1:
ad:cc:32:85:ce:91:db:f0:ad:83:5e:89:76:ca:47:
b5:d3:d7:e1:d2:92:8b:58:9a:3a:3f:5b:ec:1a:53:
14:71:23:e3:1f:02:71:85:c0:68:80:f0:81:ed:da:
a7:ed:85:a3:8b:4d:55:1c:c0:23:9a:65:7f:e2:f0:
27:6d:2f:a6:69:61:57:44:19:0e:be:5a:22:1c:1a:
00:8c:32:ca:ba:96:c1:91:cf:ec:dd:e5:78:d7:08:
bb:4b:87:d4:36:c9:fb:ec:85:d4:70:55:8d:df:d8:
3e:46:db:8a:9b:5e:88:1b:a3:47:0b:29:5e:b4:25:
c2:62:6e:8d:19:c8:28:d7:d8:c6:b0:d9:c9:52:b6:
ec:fd:07:60:c1:a2:fb:5c:02:96:31:41:69:fc:ac:
93:b8:52:46:dd:b6:34:98:95:68:05:c9:cb:e2:72:
75:6d:9c:79:33:48:49:b7:29:fe:99:04:6d:75:24:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:16:90:49:93:C8:C0:49:7A:41:2F:6C:51:40:72:C9:0C:D7:0E
X509v3 Authority Key Identifier:
keyid:9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3133382e302f32332d3234203d3e203532333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.151.138.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:23:b1:90:a2:2e:db:15:f6:5a:42:09:2d:6c:bb:d7:d3:13:
27:4b:c3:9d:70:63:73:05:8b:b3:01:1b:4b:37:24:0b:5b:d7:
cf:b7:44:9f:55:61:93:ef:bc:b2:34:7f:d9:a2:fa:d3:f5:cf:
63:f7:87:66:00:52:08:65:f8:fc:f1:f2:6c:41:45:a4:90:d1:
e6:88:ab:ee:c4:bd:a5:6e:da:5d:18:82:cb:0d:94:e6:d4:d0:
9e:45:30:76:68:19:8f:f7:15:d9:72:93:35:3e:34:37:c2:e6:
6f:6e:62:cf:4d:ae:14:68:e3:1c:95:26:e2:2a:6b:aa:94:56:
90:0e:02:43:21:a6:40:0f:f8:50:5e:14:8c:19:24:c4:22:59:
17:0f:1a:9e:7a:53:21:f7:f7:d0:8e:ee:b5:34:a2:53:0e:1a:
a5:04:42:40:42:8f:fb:a7:13:15:b9:9d:01:ac:16:be:81:76:
8b:ca:ef:a3:d3:4c:57:9a:a1:81:d8:1b:9c:af:ca:93:52:d6:
70:6f:80:2a:f7:0a:8b:6e:d0:7d:15:56:e2:f9:10:08:59:f8:
46:53:5c:ac:da:f3:1d:bf:c3:2a:ea:14:fe:f7:78:3b:05:d3:
5b:09:12:14:e5:b1:94:24:90:f8:2a:55:af:a3:43:62:a7:08:
fd:b1:76:76
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUC4wxnf/x7YcXfZaB3ZzYH+UpZuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNEQzcwRDlCRjUyREMzNUYxQjk4OEJDOEY3RjZEQjYy
QTIwOEU1RjAeFw0yNTEyMDIxNzQ4NTVaFw0yNjEyMDExNzUzNTVaMDMxMTAvBgNV
BAMTKDQ3MUIxNjkwNDk5M0M4QzA0OTdBNDEyRjZDNTE0MDcyQzkwQ0Q3MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcIKKtPlvWNAgbeAvjuV6sS51j
cPocowhyozdeeFvZLa4v7rkHEwwJIrjF2smnI8tuQGuphNYnRDrd3MoECZh3qfty
heSlI9mlsa3MMoXOkdvwrYNeiXbKR7XT1+HSkotYmjo/W+waUxRxI+MfAnGFwGiA
8IHt2qfthaOLTVUcwCOaZX/i8CdtL6ZpYVdEGQ6+WiIcGgCMMsq6lsGRz+zd5XjX
CLtLh9Q2yfvshdRwVY3f2D5G24qbXogbo0cLKV60JcJibo0ZyCjX2Maw2clStuz9
B2DBovtcApYxQWn8rJO4UkbdtjSYlWgFycvicnVtnHkzSEm3Kf6ZBG11JH3/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQURxsWkEmTyMBJekEvbFFAcskM1w4wHwYDVR0j
BBgwFoAUnNxw2b9S3DXxuYi8j39ttiogjl8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDJDMDkxMTlCRkE2NDY1NDFDOEFEMjcxQjkzRjVFMEU3
NjI3NkUxMTA2MTIxRjU0OTAyODE2MTVBRjFEMjFGLzAvOUNEQzcwRDlCRjUyREMz
NUYxQjk4OEJDOEY3RjZEQjYyQTIwOEU1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Q0RDNzBEOUJGNTJEQzM1RjFC
OTg4QkM4RjdGNkRCNjJBMjA4RTVGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QyQzA5MTE5QkZBNjQ2NTQxQzhBRDI3MUI5M0Y1RTBFNzYyNzZFMTEw
NjEyMUY1NDkwMjgxNjE1QUYxRDIxRi8wLzMxMzkzMDJlMzEzNTMxMmUzMTMzMzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMyMzMzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvpeK
MA0GCSqGSIb3DQEBCwUAA4IBAQBcI7GQoi7bFfZaQgktbLvX0xMnS8OdcGNzBYuz
ARtLNyQLW9fPt0SfVWGT77yyNH/ZovrT9c9j94dmAFIIZfj88fJsQUWkkNHmiKvu
xL2lbtpdGILLDZTm1NCeRTB2aBmP9xXZcpM1PjQ3wuZvbmLPTa4UaOMclSbiKmuq
lFaQDgJDIaZAD/hQXhSMGSTEIlkXDxqeelMh9/fQju61NKJTDhqlBEJAQo/7pxMV
uZ0BrBa+gXaLyu+j00xXmqGB2Bucr8qTUtZwb4Aq9wqLbtB9FVbi+RAIWfhGU1ys
2vMdv8Mq6hT+93g7BdNbCRIU5bGUJJD4KlWvo0Nipwj9sXZ2
-----END CERTIFICATE-----
Generated at Sun Dec 7 22:27:14 2025 by rpki-client