This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e392e3132382e302f31392d3234203d3e2038303438.roa
File: 3139302e392e3132382e302f31392d3234203d3e2038303438.roa (raw, json)
Hash identifier: WfccI7A+tQ+abzUUWvCryKuVrkaXzPfivW1UH3BYNkM=
Subject key identifier: EF:53:3D:EA:52:B9:D3:5B:43:9D:B4:7D:D2:BB:DF:1D:AD:65:38:51
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 79F1BAB0A6BF45AFF2A9A5048DAD280AAF63350F
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e392e3132382e302f31392d3234203d3e2038303438.roa
Signing time: Tue 06 Jan 2026 19:47:33 +0000
ROA not before: Tue 06 Jan 2026 19:42:33 +0000
ROA not after: Tue 05 Jan 2027 19:47:33 +0000
asID: 8048
IP address blocks: 190.9.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 04:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f1:ba:b0:a6:bf:45:af:f2:a9:a5:04:8d:ad:28:0a:af:63:35:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Jan 6 19:42:33 2026 GMT
Not After : Jan 5 19:47:33 2027 GMT
Subject: CN=EF533DEA52B9D35B439DB47DD2BBDF1DAD653851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:38:24:ee:81:61:ce:b7:cc:77:d2:aa:d5:
af:dd:d4:e3:b2:4e:4f:d7:70:38:46:81:8c:a9:8f:
fc:24:e9:48:f4:9c:dd:6d:dd:b2:9b:74:8b:d0:35:
c0:bd:e1:74:5a:cb:b6:1c:80:f3:df:fa:6a:72:8b:
98:44:7d:13:cd:28:0b:48:e2:d8:2c:43:cf:1c:a6:
71:9c:15:c6:5a:ea:fb:6e:f5:bd:31:4a:8b:7c:78:
bc:e9:3d:00:9c:99:8a:37:75:4e:75:35:25:c7:1f:
dc:3a:02:cb:e2:03:bc:fe:f5:e7:08:9b:0f:50:3c:
e4:97:45:e3:d1:6e:32:c3:b9:d1:92:98:a5:c1:de:
30:8c:60:9e:dc:ae:f6:00:20:97:69:cb:2a:e7:e3:
21:a3:15:d8:46:f4:55:80:94:af:c0:6f:8f:d8:c6:
f5:ca:19:04:0f:a9:20:0f:18:c3:26:7a:b9:6a:57:
d3:98:1e:4d:8f:b3:25:4d:c5:7e:40:b6:fd:4a:30:
0a:1b:87:32:71:64:01:13:b9:63:6f:81:72:6e:f2:
49:ea:ca:cf:f4:6c:7d:c5:bb:15:64:49:80:7c:b5:
66:f3:bc:36:32:4d:75:a1:77:28:83:dc:7d:1f:98:
d2:ed:5b:21:e0:d8:73:2c:95:64:9f:3d:f7:ab:ea:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:53:3D:EA:52:B9:D3:5B:43:9D:B4:7D:D2:BB:DF:1D:AD:65:38:51
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e392e3132382e302f31392d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:7d:48:4b:d6:0f:b9:20:5b:fd:dc:67:cf:52:82:72:05:78:
d4:63:aa:c2:ba:70:8f:1a:d6:b2:ec:f5:d0:2f:6a:9c:68:7a:
9b:aa:86:ca:64:c6:3f:4d:d1:2e:27:a6:59:90:d4:53:c3:00:
da:fe:b5:03:a6:3c:84:14:dd:b3:1b:13:76:de:1c:09:8c:cb:
15:4b:8e:12:f4:6a:63:12:ff:5c:e2:60:9c:f4:f1:21:f3:04:
59:5f:98:6c:d4:8a:d2:21:8b:41:bf:9e:5a:ac:1f:e9:19:3d:
a1:0c:65:ef:f1:96:01:00:c5:df:2b:2d:df:f6:5d:a2:7d:73:
c0:8f:25:30:e9:f4:61:96:8f:ea:a3:dc:f3:5d:27:98:20:20:
b2:54:07:be:95:66:59:63:81:4a:e4:58:c3:20:e1:32:79:70:
48:0b:67:5f:b5:9d:db:94:17:f9:37:1d:c3:42:ef:48:f6:4c:
7b:59:8a:38:93:e2:bf:41:6e:1d:3e:5b:c1:67:ea:75:20:5d:
80:3f:3c:18:f9:a1:ae:89:67:dc:70:83:c9:5a:d6:e8:9c:b1:
f9:51:d8:36:df:63:5f:ce:7b:5f:50:e9:ef:6d:33:91:d7:80:
69:61:5a:75:3c:fc:5d:08:b7:7b:03:45:46:d9:79:e1:62:ea:
66:fa:0e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:08:15 2026 by rpki-client