This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134382e302f32342d3234203d3e203238333938.roa
File: 3133382e39392e3134382e302f32342d3234203d3e203238333938.roa (raw, json)
Hash identifier: iHMsdDC1Mp2ynZKWUhZfU6BAC4ETbIsf4M7hgXz1lEE=
Subject key identifier: E5:2C:3C:29:58:B7:A9:AA:69:5F:4C:4B:41:86:C9:91:05:E2:09:DE
Certificate issuer: /CN=8190D453933A57C152D409DC05B6F96B6F662E76
Certificate serial: 0A98178BB8A6184F9C6205E1342BA0D20628457E
Authority key identifier: 81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134382e302f32342d3234203d3e203238333938.roa
Signing time: Tue 06 Jan 2026 19:33:24 +0000
ROA not before: Tue 06 Jan 2026 19:28:24 +0000
ROA not after: Tue 05 Jan 2027 19:33:24 +0000
asID: 28398
IP address blocks: 138.99.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl
rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:98:17:8b:b8:a6:18:4f:9c:62:05:e1:34:2b:a0:d2:06:28:45:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8190D453933A57C152D409DC05B6F96B6F662E76
Validity
Not Before: Jan 6 19:28:24 2026 GMT
Not After : Jan 5 19:33:24 2027 GMT
Subject: CN=E52C3C2958B7A9AA695F4C4B4186C99105E209DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:a7:46:e7:55:97:67:59:ad:27:79:2e:2e:
0d:36:c5:6b:b4:33:e9:7f:e5:5a:64:08:66:f3:ee:
6d:30:b1:75:ff:c6:3a:1c:4e:b7:ac:05:38:8e:c9:
ef:5b:0d:c4:49:f6:f5:0c:2d:dd:77:b7:6f:56:02:
b5:b7:88:4f:9a:ae:ab:7f:97:de:0a:40:31:4c:e4:
8f:64:16:10:45:91:5a:e6:21:92:f9:8b:e3:6f:7a:
e3:1b:4d:51:ab:2e:86:90:57:97:e2:4b:59:f6:b3:
14:e3:38:5d:65:f5:68:a5:e2:14:5f:f2:f9:35:92:
d8:3d:73:71:e0:64:ce:87:93:21:ff:49:c3:da:1f:
24:79:d4:fd:66:b3:9c:db:99:f8:df:1a:ef:dc:47:
e4:d0:65:c0:4d:87:8f:69:e4:61:a5:4a:b9:8e:a0:
9a:0d:a0:70:9d:aa:8c:0d:3a:d4:f5:72:2d:d1:54:
ed:f3:22:72:65:ce:a6:92:43:98:89:15:13:4d:04:
50:22:f0:3d:f5:a7:b9:8a:fa:72:38:d3:53:70:11:
55:fb:91:71:74:58:03:50:6b:1b:31:a3:e9:a2:cd:
a1:a1:5d:41:ac:91:6d:24:7e:28:b1:b0:b4:3d:88:
aa:c5:9f:aa:a1:8b:73:b0:2d:bf:36:13:cf:b9:ac:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2C:3C:29:58:B7:A9:AA:69:5F:4C:4B:41:86:C9:91:05:E2:09:DE
X509v3 Authority Key Identifier:
keyid:81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134382e302f32342d3234203d3e203238333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.148.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ec:00:ef:3f:cf:bb:73:18:53:5a:44:96:ec:e1:2a:54:b7:
53:30:cf:6b:42:dd:40:a8:59:9a:01:fb:32:4f:d5:cc:f3:fa:
87:a6:f4:b1:cf:06:06:34:b4:99:bc:45:a3:37:f1:50:e7:18:
78:3f:80:13:64:df:3b:d9:89:86:47:30:03:40:fa:0f:08:ac:
16:34:2b:d7:d3:78:c6:03:f0:df:b5:4c:cc:1f:8e:f5:45:16:
54:6a:42:46:c8:0c:1b:d5:65:3e:d7:ec:2b:92:ec:7c:32:7e:
0e:74:86:f5:13:d8:86:15:52:52:cc:52:05:48:73:0d:54:70:
3e:3e:17:2a:53:92:e1:c4:e9:51:7c:a9:14:b2:0f:e5:29:9a:
c9:11:21:00:a1:43:d8:6f:80:e9:fe:dc:44:06:b6:04:4f:6f:
c1:30:c9:76:6a:cc:39:1e:ea:32:9c:b2:ee:53:e7:9d:8e:dc:
a8:3a:c4:2e:6a:84:e6:f4:f0:61:86:47:5c:36:40:2d:a4:f6:
be:f0:24:db:59:55:1f:16:b9:e6:31:be:b2:41:c0:ed:30:d5:
c8:59:07:d6:a5:18:98:52:af:00:71:ab:36:06:54:78:a4:c0:
b5:ff:db:97:4a:ad:ad:d9:7c:92:ec:ff:f4:21:df:5b:dc:ac:
41:14:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:54 2026 by rpki-client