This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37322e302f32312d3231203d3e203237383435.roa
File: 3139302e39372e37322e302f32312d3231203d3e203237383435.roa (raw, json)
Hash identifier: 6UquvPo5f7BoQNa7lexJH9bK0jA+ukN94EOdZabZ3yY=
Subject key identifier: AA:AC:06:47:B1:60:15:42:7F:3F:51:7A:F2:97:60:E4:90:31:6E:AC
Certificate issuer: /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial: 7EA1C173444BD5ED6AFE0452235DAF90188BB2AB
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37322e302f32312d3231203d3e203237383435.roa
Signing time: Tue 06 Jan 2026 19:44:05 +0000
ROA not before: Tue 06 Jan 2026 19:39:05 +0000
ROA not after: Tue 05 Jan 2027 19:44:05 +0000
asID: 27845
IP address blocks: 190.97.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a1:c1:73:44:4b:d5:ed:6a:fe:04:52:23:5d:af:90:18:8b:b2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Validity
Not Before: Jan 6 19:39:05 2026 GMT
Not After : Jan 5 19:44:05 2027 GMT
Subject: CN=AAAC0647B16015427F3F517AF29760E490316EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:e0:87:39:85:b1:fd:71:78:e4:25:0f:c4:
4e:ab:78:3c:78:b7:3c:ba:66:da:01:e7:fa:42:a8:
1c:34:4c:3f:16:56:ef:27:e5:25:96:4a:2b:a7:59:
d6:6e:d0:74:85:e7:6f:27:27:e0:61:1d:1f:fe:0e:
99:b0:47:ed:03:2a:87:b8:11:c5:ed:35:73:77:90:
6d:3f:cf:16:d3:77:5a:e3:1a:d2:cd:81:ab:d7:a0:
3f:42:3f:57:b9:d2:88:d2:88:30:84:2f:c7:7f:f1:
8b:3c:1f:b1:30:24:bf:8e:e9:6d:b2:58:91:b1:f0:
da:c3:aa:17:62:ae:2e:e0:eb:0c:f4:e2:90:be:84:
22:93:3e:a5:42:07:fb:f7:ee:13:b1:0e:9a:da:9f:
c1:45:a3:df:95:f9:89:78:04:5f:f6:e6:62:91:5b:
20:5e:76:df:51:dc:19:71:fb:50:b4:57:99:be:84:
fc:46:7f:34:fb:5e:70:70:e0:84:6b:0f:5b:17:7c:
82:b9:cb:7d:91:bc:1a:ed:6c:86:83:30:16:4b:e2:
84:1c:4f:2e:6c:c2:00:22:da:3e:df:43:79:be:54:
fe:e0:39:30:e4:0b:14:0f:b7:d7:f6:9c:6d:4d:0f:
e7:0a:86:1b:3b:3c:e3:0c:e1:2f:40:91:e8:53:dd:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:06:47:B1:60:15:42:7F:3F:51:7A:F2:97:60:E4:90:31:6E:AC
X509v3 Authority Key Identifier:
keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37322e302f32312d3231203d3e203237383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.97.72.0/21
Signature Algorithm: sha256WithRSAEncryption
58:1c:ef:f1:3d:f0:aa:53:00:01:d2:42:1d:48:eb:c4:dc:fa:
be:55:93:a1:49:ac:72:79:e5:d5:09:25:83:46:c9:7c:ea:b6:
f3:2d:ae:ec:2a:8d:7e:77:1d:a8:b1:11:fb:6a:e3:c5:35:76:
09:28:9b:de:73:e7:e7:47:01:61:fd:a2:6b:b6:e2:bc:24:d2:
ee:bc:9e:ab:8f:87:e6:8f:c0:aa:77:74:c7:33:56:4f:53:bb:
fb:40:71:f2:96:8e:bb:c1:f1:1b:ff:27:5d:65:5b:0a:ce:92:
03:00:4f:2e:35:98:f7:20:06:b1:e1:be:60:98:90:fc:86:f4:
6d:cb:3b:cc:71:e6:e8:26:cb:3a:25:7a:8d:2e:94:4c:f4:5f:
dd:7f:6c:2a:54:9c:21:2d:1c:d1:a7:ca:e2:64:56:a2:c0:03:
7d:2b:03:4d:ec:4d:69:cb:31:2b:af:83:05:42:a1:59:a4:82:
a6:1c:bf:fd:bc:f1:c7:a5:37:e2:b2:db:97:8b:a4:d5:4c:b1:
0c:40:75:d0:e3:9d:06:c5:bd:0c:92:73:37:d2:16:4b:a2:7a:
48:ea:c8:96:83:e8:68:33:8b:f7:68:39:06:73:eb:87:7d:12:
be:a8:09:98:1b:6c:ee:47:8c:53:c1:88:f8:e3:52:e1:06:32:
17:15:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:35 2026 by rpki-client