This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa
File: 3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa (raw, json)
Hash identifier: /25FD7cZDBYQ4b/Fk3PhB4+UsKi6/HQMfLFXyrc0v+4=
Subject key identifier: 14:8E:CF:34:51:FA:74:CA:98:DF:19:67:79:1D:AC:06:34:33:DE:ED
Certificate issuer: /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial: 3D464411E6996EABF2DA6846C4E857BDDB802924
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa
Signing time: Tue 06 Jan 2026 19:04:29 +0000
ROA not before: Tue 06 Jan 2026 18:59:29 +0000
ROA not after: Tue 05 Jan 2027 19:04:29 +0000
asID: 18734
IP address blocks: 189.204.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:46:44:11:e6:99:6e:ab:f2:da:68:46:c4:e8:57:bd:db:80:29:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Validity
Not Before: Jan 6 18:59:29 2026 GMT
Not After : Jan 5 19:04:29 2027 GMT
Subject: CN=148ECF3451FA74CA98DF1967791DAC063433DEED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:9c:52:54:c2:b0:cb:7f:40:3a:f9:2e:9c:
1f:af:d2:1f:f2:8b:2d:a3:c0:68:47:9d:94:68:95:
6b:a1:51:b2:9f:9c:a5:88:c7:33:a2:ab:52:e5:97:
e7:dd:80:d8:6e:72:42:40:8a:9c:fb:b9:9e:e1:0f:
74:bd:de:d3:57:0d:2f:65:c6:ba:07:96:86:db:dc:
1f:ae:fe:91:4f:a0:af:43:03:fa:25:fa:a3:b8:1d:
78:8b:fe:f2:bf:bf:2f:3d:a4:31:8d:7f:77:d3:47:
4b:bd:7e:87:15:4e:bc:4d:05:a0:9d:e6:91:72:55:
9f:ea:72:45:f0:25:a4:5e:34:e2:79:bc:0e:16:f1:
c3:dd:53:0c:71:4d:27:75:bf:1c:56:f8:82:3f:c8:
ca:7c:6c:83:7e:da:e5:ff:c1:48:47:da:d0:e2:1c:
b1:0e:52:0c:3e:79:f8:37:eb:e1:14:76:a2:6f:48:
c4:3b:48:19:ae:e2:0d:fc:ec:2c:40:1b:3b:cf:5a:
78:3b:15:ce:f3:7b:d3:f1:3b:8b:ac:97:fe:61:bb:
b7:60:fb:db:b1:0a:50:5e:34:47:27:d7:9d:99:17:
42:9b:97:a6:44:07:b4:84:c2:9e:df:9a:ea:26:94:
26:ff:ae:c5:4b:e5:37:35:88:86:a2:3f:3e:d8:21:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:CF:34:51:FA:74:CA:98:DF:19:67:79:1D:AC:06:34:33:DE:ED
X509v3 Authority Key Identifier:
keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.204.128.0/17
Signature Algorithm: sha256WithRSAEncryption
52:cb:ec:19:7e:f2:db:e7:74:c3:d3:b8:ff:4e:39:c9:3f:0c:
a0:e9:21:b4:d3:2d:49:60:ca:f7:1b:b6:8e:a9:c6:ff:e2:86:
a0:07:26:7c:e5:d0:fe:cb:6e:fe:32:9b:8f:87:4b:51:c4:96:
1d:25:fb:d3:f3:13:63:03:1d:aa:70:31:25:44:54:8c:72:ee:
4d:8f:f3:ea:4c:bb:18:32:2a:72:77:ea:6a:74:5a:e1:a5:06:
67:65:56:98:55:e9:ee:c6:c7:6c:9c:b3:62:8a:ed:94:cc:2f:
bb:1f:5a:da:31:b9:d6:d1:d5:08:8b:76:d6:00:f6:14:b7:39:
4c:32:df:d4:e4:0e:7c:3d:7e:70:41:a8:ce:3c:ac:bc:86:35:
ee:68:58:9d:eb:72:36:19:29:3b:b7:c8:03:6c:28:a0:1d:7b:
a3:13:64:ee:1d:12:96:20:a1:4b:11:bc:e1:2c:f9:48:87:bf:
98:7f:3f:18:9f:27:e2:26:e6:73:9c:af:3e:a7:df:7f:8c:45:
85:4a:01:9d:63:98:fd:57:f4:c0:0e:aa:c1:19:a8:d6:45:28:
4c:44:2a:23:bd:a4:15:2b:2d:6a:e1:4d:18:d2:35:10:a8:d2:
e7:58:bb:ac:5b:6f:89:d1:67:1a:fc:64:1e:64:b0:03:90:66:
eb:37:1c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:46 2026 by rpki-client