This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132312e302f32342d3234203d3e20323632313832.roa
File: 3139302e35322e3132312e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier: SMBnAmp/GB/GfFD2YfdN7ymFG8OEFXqdE8jdjlgh3Y4=
Subject key identifier: 72:A3:1B:C7:6B:DE:D3:21:90:25:43:75:E2:1E:46:E3:53:4A:BB:B7
Certificate issuer: /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial: 6597CAA7991FF8EF15053F76970BFC085DC220FE
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132312e302f32342d3234203d3e20323632313832.roa
Signing time: Wed 14 Jan 2026 21:00:35 +0000
ROA not before: Wed 14 Jan 2026 20:55:35 +0000
ROA not after: Wed 13 Jan 2027 21:00:35 +0000
asID: 262182
IP address blocks: 190.52.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:97:ca:a7:99:1f:f8:ef:15:05:3f:76:97:0b:fc:08:5d:c2:20:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Validity
Not Before: Jan 14 20:55:35 2026 GMT
Not After : Jan 13 21:00:35 2027 GMT
Subject: CN=72A31BC76BDED32190254375E21E46E3534ABBB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:65:a2:81:74:d8:d2:78:7a:d4:3e:1c:a0:
b6:da:ba:3a:af:45:84:11:73:f8:a3:47:ff:51:33:
bc:65:cd:15:58:c3:03:10:17:ae:84:01:09:4e:6b:
99:1c:b3:b8:b8:cc:4c:1a:04:c6:32:42:e6:34:78:
e3:15:61:ec:a3:31:4b:84:65:3e:65:51:a7:5d:3b:
a4:04:28:9a:1d:94:d3:19:5d:83:31:98:b4:6c:04:
9d:15:26:02:43:e9:eb:94:c1:a8:82:19:d5:fe:6c:
62:ab:71:8a:14:42:a6:c0:6a:af:78:ed:10:be:c6:
20:56:96:9d:0b:c1:f4:7c:54:b1:a3:b0:b5:7b:32:
7b:91:bc:1a:09:67:fe:2f:e9:8c:d0:f8:af:85:f8:
53:cb:a9:66:d6:f9:83:dd:9d:7d:1b:4f:40:d7:70:
33:5e:36:8a:a9:f6:18:58:fb:ce:99:13:4e:c4:f4:
c1:dd:e6:b1:49:ce:f8:0a:c3:5a:b9:42:ef:90:ec:
8f:de:69:d8:69:c7:03:9f:85:52:91:72:82:c0:5b:
29:48:a7:05:55:6a:89:99:bc:cd:8d:09:50:c6:3a:
3e:88:0a:c4:dc:ac:6e:e3:7f:eb:6b:6b:2f:19:a7:
42:a3:4d:c3:ca:81:7e:cd:b4:0b:65:50:aa:e6:c2:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:1B:C7:6B:DE:D3:21:90:25:43:75:E2:1E:46:E3:53:4A:BB:B7
X509v3 Authority Key Identifier:
keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132312e302f32342d3234203d3e20323632313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.121.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ec:83:62:12:f2:d9:d8:f7:dc:c3:88:1d:af:4a:8e:d2:f6:
37:06:44:f5:1a:17:d7:55:81:04:8b:07:70:af:2d:b7:37:29:
d8:e3:25:eb:f9:13:5c:ed:64:6d:5f:35:83:bf:b5:da:09:8e:
ca:27:14:6f:9e:1d:5e:6d:57:ce:a8:a4:76:2d:da:92:c3:eb:
88:1e:3c:a8:31:c8:12:cd:eb:c2:da:06:38:03:e1:b2:0a:07:
a0:d8:e5:24:88:24:3e:d6:99:2c:4c:c2:25:35:50:13:b7:ed:
f8:a9:b7:d1:6e:11:cf:c2:1b:f8:d7:21:dc:2c:1c:17:af:57:
66:5e:b4:7e:25:44:8e:5c:d8:f3:69:83:98:2e:42:fe:c5:dd:
0f:6b:3b:86:88:89:81:6c:85:18:5b:14:78:3f:76:b8:8f:59:
16:11:4b:c1:a7:be:68:07:b9:64:d9:bf:8b:c8:6b:9e:d2:dd:
6b:ae:1d:93:e6:c0:69:f6:2f:3f:fa:9a:cd:1b:58:35:6f:e8:
1c:b7:f8:8c:47:81:ee:e0:23:02:a2:dc:3a:e2:3f:34:e6:4e:
bd:e3:2c:73:c6:e2:6b:10:ff:61:75:28:a3:32:ec:31:05:1f:
72:59:40:da:52:da:4c:f0:a9:7a:ae:ae:6a:fb:1b:58:47:7c:
ad:ce:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:46 2026 by rpki-client