This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3134332e3235352e38342e302f32322d3234203d3e20323633373033.roa
File: 3134332e3235352e38342e302f32322d3234203d3e20323633373033.roa (raw, json)
Hash identifier: rVS1TmhX7cnr+403fPRL+Eikiq2c2CMoJ5Jmbd8h3AM=
Subject key identifier: AE:A3:E1:69:12:02:0F:B6:C2:9F:19:49:07:76:DE:BE:90:4E:A3:89
Certificate issuer: /CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Certificate serial: 1BEE4F0A5E7920F62E893D5F03E4BCFD8965A78C
Authority key identifier: C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3134332e3235352e38342e302f32322d3234203d3e20323633373033.roa
Signing time: Tue 06 Jan 2026 19:21:24 +0000
ROA not before: Tue 06 Jan 2026 19:16:24 +0000
ROA not after: Tue 05 Jan 2027 19:21:24 +0000
asID: 263703
IP address blocks: 143.255.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl
rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 17:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ee:4f:0a:5e:79:20:f6:2e:89:3d:5f:03:e4:bc:fd:89:65:a7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Validity
Not Before: Jan 6 19:16:24 2026 GMT
Not After : Jan 5 19:21:24 2027 GMT
Subject: CN=AEA3E16912020FB6C29F19490776DEBE904EA389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:2e:ea:a7:47:6c:ba:f3:92:06:a1:64:73:
80:38:a6:dc:b7:39:80:9a:be:d1:31:c0:66:92:c5:
d2:e1:23:4c:19:d3:12:d2:2d:61:23:74:91:d2:5a:
04:c7:fe:42:f8:9a:a9:44:cb:7c:95:0b:c8:f8:55:
49:13:00:53:f0:4b:29:23:ff:de:42:bf:47:b0:4c:
ad:6a:d8:48:b6:8c:09:ff:0b:ee:eb:cc:b8:c5:03:
9a:71:bd:e5:74:85:9c:18:fc:60:8a:ab:65:1a:e5:
fa:dd:31:99:36:c6:01:17:a7:e5:17:31:4a:92:2f:
26:49:fd:82:54:28:8e:49:4e:cf:db:47:85:6b:e5:
85:cd:ff:f4:96:7c:2c:f9:df:77:bc:94:a4:e6:b9:
d9:50:e3:a4:9d:95:b0:e1:7d:2e:3c:c7:9a:a7:14:
58:ee:5a:cd:5e:10:50:a7:b5:42:3b:d8:59:4b:d8:
12:be:f6:12:95:80:68:41:77:fe:d9:ba:fe:47:6d:
07:73:db:92:45:37:fe:72:f0:45:4d:01:f7:18:9a:
2e:5e:dd:64:cb:53:c6:8e:a3:9a:43:f2:aa:a7:d3:
f2:ba:7d:63:aa:9f:99:37:d8:d4:e9:7b:b9:6b:e5:
ec:19:5e:2e:f2:ad:9c:0f:95:d0:2f:61:79:f1:65:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:E1:69:12:02:0F:B6:C2:9F:19:49:07:76:DE:BE:90:4E:A3:89
X509v3 Authority Key Identifier:
keyid:C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3134332e3235352e38342e302f32322d3234203d3e20323633373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.84.0/22
Signature Algorithm: sha256WithRSAEncryption
37:ee:96:aa:c2:e1:be:ec:97:2e:f3:c3:73:9b:9e:01:82:ef:
c0:80:0a:eb:af:fa:21:39:bc:b2:90:b9:b0:04:96:f7:15:fa:
32:c3:c8:c9:a0:5e:47:d6:40:a2:bb:d1:16:9f:be:0d:de:e5:
24:9d:e1:3b:f3:2e:4b:2b:ac:16:fc:49:78:24:9c:f5:da:e2:
68:e1:eb:f2:bf:36:81:41:69:ee:3d:c5:9b:b0:aa:67:0f:3e:
66:ad:69:6b:71:24:f6:8c:a5:fe:78:d3:6a:33:08:f5:17:11:
bf:6b:39:89:f2:4d:c1:e2:38:86:a8:cd:83:a6:4e:b2:a5:a3:
3d:f9:c0:e3:24:55:be:56:b9:58:90:ee:49:53:d2:ed:8e:62:
64:cd:c1:74:8a:2f:17:cd:46:a9:9c:d9:4d:c2:2a:e7:5c:82:
7b:a3:8c:3e:1a:67:f1:ba:1e:de:49:48:34:75:0b:c2:d6:4f:
3c:21:8f:90:ce:5f:ad:86:62:2c:ab:5e:bf:a1:22:e7:23:f6:
70:a5:be:99:d3:94:2a:90:fe:3f:f7:c1:e9:f4:c4:09:04:f0:
a3:4d:46:4c:6b:e2:f2:14:cb:1b:36:46:81:3b:16:19:40:f6:
8c:7e:9b:c1:58:fe:0d:5a:b5:9a:c2:da:16:b3:f5:c2:f8:6f:
46:57:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:21 2026 by rpki-client