This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31382e302f32342d3234203d3e203532333335.roa
File: 3138352e37342e31382e302f32342d3234203d3e203532333335.roa (raw, json)
Hash identifier: A9ubWd6zXRextJ/B+1lIfmXt9WeNTj1eBcTgamTQDXo=
Subject key identifier: 2A:A1:F9:14:27:3B:D2:8B:58:52:6A:E1:BA:8B:90:B4:79:B4:EE:42
Certificate issuer: /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial: 041086307FA582F5A6F5DBC8815B65F15A27F17E
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31382e302f32342d3234203d3e203532333335.roa
Signing time: Tue 06 Jan 2026 19:02:14 +0000
ROA not before: Tue 06 Jan 2026 18:57:14 +0000
ROA not after: Tue 05 Jan 2027 19:02:14 +0000
asID: 52335
IP address blocks: 185.74.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 15:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:10:86:30:7f:a5:82:f5:a6:f5:db:c8:81:5b:65:f1:5a:27:f1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Validity
Not Before: Jan 6 18:57:14 2026 GMT
Not After : Jan 5 19:02:14 2027 GMT
Subject: CN=2AA1F914273BD28B58526AE1BA8B90B479B4EE42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:45:b9:2b:f2:5d:61:96:87:fb:26:76:1a:
e8:2e:38:f7:98:05:05:0e:a0:7e:e5:94:64:53:f2:
db:de:5f:8e:32:51:c2:6d:ca:71:75:2c:6a:3b:0c:
8b:d0:90:60:73:de:d3:1b:a3:65:ea:b8:ca:31:ed:
a0:64:87:0d:3e:fb:6a:57:17:c1:1f:0a:02:dc:75:
05:8a:d6:55:c5:3d:11:68:30:17:13:95:70:d0:d2:
6c:67:7f:d3:31:9c:fa:53:d4:15:15:2f:27:18:8e:
bf:b6:63:00:42:9d:57:8f:ed:a3:dd:a7:a8:44:18:
79:0f:f1:e6:7a:45:4e:e7:60:6b:93:1c:1e:f2:e2:
3d:b3:ab:43:81:9d:59:fb:b9:84:d4:ba:ea:65:cc:
2b:1c:56:c2:e9:63:b1:1e:50:17:0d:3e:7b:64:9b:
92:74:6b:a5:ae:d0:18:77:ef:09:ed:d0:b0:a5:94:
5c:c5:a2:5b:c6:3f:de:de:7a:48:7c:a5:51:0f:65:
a8:c1:fd:05:44:33:71:e3:b4:4c:98:33:9d:0b:bb:
9c:d9:05:d6:02:fb:50:14:9c:ac:0c:07:10:e2:be:
53:6f:98:39:e2:c3:93:75:a7:7d:1a:84:16:48:7a:
cf:85:09:94:68:68:4c:15:07:9e:1a:cc:f7:00:e0:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A1:F9:14:27:3B:D2:8B:58:52:6A:E1:BA:8B:90:B4:79:B4:EE:42
X509v3 Authority Key Identifier:
keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31382e302f32342d3234203d3e203532333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a9:1b:e1:74:f2:65:d7:b5:1f:c5:6b:ef:4e:28:a2:21:9a:
28:bd:2b:1c:55:f5:c7:af:af:af:06:21:33:8f:e4:f1:20:18:
1d:9b:03:e7:bf:1b:52:48:c9:bd:9f:6b:02:b2:5c:bf:06:0a:
d9:88:6a:70:98:96:68:0a:f0:63:f8:5f:0b:67:dc:af:9b:aa:
0b:7f:31:dc:16:06:b5:5e:e0:d5:34:3f:2b:a4:45:4b:0f:81:
bd:17:86:d6:44:5f:e7:17:52:f4:92:e7:5e:13:00:e2:21:6b:
fa:e6:ad:ec:5a:f6:bd:76:37:7a:54:2c:fa:6b:21:a2:57:68:
49:aa:7a:22:05:59:22:18:63:c9:1d:88:05:95:b1:85:39:1d:
bb:40:f7:6b:14:a1:eb:2a:f5:e7:34:91:e2:be:39:71:4d:0d:
76:35:05:7d:ad:c1:c4:fc:fc:c1:a9:91:54:3f:b8:ca:95:06:
4d:e9:4a:12:5e:a2:4b:a3:43:f2:60:4d:b3:d1:f1:1e:dc:93:
c1:95:f0:a9:eb:c5:b7:60:ca:61:91:a1:36:0d:ed:b1:1b:9a:
98:ff:b0:e9:3e:40:95:8c:57:be:55:a3:90:e6:69:bc:69:5d:
04:b7:ce:62:f1:63:1b:31:64:14:14:6c:df:ad:85:ef:fc:a2:
45:e2:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:47:33 2026 by rpki-client