This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/35392e3135332e34342e302f32322d3234203d3e20323634383235.roa
File: 35392e3135332e34342e302f32322d3234203d3e20323634383235.roa (raw, json)
Hash identifier: sikdVHClpZUMhO8xNOV+NIXhDE9I4mgQVWHAukreGSA=
Subject key identifier: 0D:8D:7B:8B:8E:33:6E:38:4F:6B:FA:D3:FB:C7:E8:BB:9D:4E:FC:79
Certificate issuer: /CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Certificate serial: 54A6A9F547095D8D81D071E3D867F96E3FB755A3
Authority key identifier: 40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/35392e3135332e34342e302f32322d3234203d3e20323634383235.roa
Signing time: Tue 06 Jan 2026 19:38:30 +0000
ROA not before: Tue 06 Jan 2026 19:33:30 +0000
ROA not after: Tue 05 Jan 2027 19:38:30 +0000
asID: 264825
IP address blocks: 59.153.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl
rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 22:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a6:a9:f5:47:09:5d:8d:81:d0:71:e3:d8:67:f9:6e:3f:b7:55:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Validity
Not Before: Jan 6 19:33:30 2026 GMT
Not After : Jan 5 19:38:30 2027 GMT
Subject: CN=0D8D7B8B8E336E384F6BFAD3FBC7E8BB9D4EFC79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:c4:3b:71:e4:47:79:67:0e:aa:97:a3:c4:
06:1c:82:16:3e:35:b3:c0:6b:7c:05:55:65:45:5f:
75:61:95:47:0f:cf:cc:ac:c6:bf:8c:d0:01:7d:71:
99:75:42:f6:58:c1:c9:fa:be:a3:73:5f:93:8a:89:
9b:8e:50:e5:f9:da:be:4a:82:52:4b:6c:a2:ca:b2:
9f:4c:8e:ca:37:d7:db:d4:59:68:55:bf:c6:8a:0e:
31:1d:f0:af:98:2c:2d:eb:44:c1:0b:ef:62:51:83:
21:f3:bd:61:e7:da:91:50:02:29:ee:f7:4d:b0:ea:
90:55:d9:a4:6f:ae:77:b6:42:16:54:d8:e2:60:6d:
39:24:32:b0:5a:c5:84:f7:6c:8f:14:12:1b:10:2d:
9e:8d:31:a7:db:fa:5c:c0:4d:92:ac:ea:c8:19:86:
0d:27:88:98:5f:c4:c6:b3:1d:6a:0c:7d:bc:ce:16:
24:65:cc:a4:56:59:da:81:94:1a:31:f8:61:31:28:
63:78:73:89:64:0c:f7:4f:f4:4e:fc:ae:aa:f5:a7:
85:2d:32:f7:c7:ce:59:32:a3:26:66:7e:29:96:d0:
81:fd:08:58:18:b6:f0:ab:f2:4b:38:4b:ad:36:81:
10:0d:1e:01:3a:e2:9c:ad:95:8d:04:c0:f4:79:93:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8D:7B:8B:8E:33:6E:38:4F:6B:FA:D3:FB:C7:E8:BB:9D:4E:FC:79
X509v3 Authority Key Identifier:
keyid:40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/35392e3135332e34342e302f32322d3234203d3e20323634383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.44.0/22
Signature Algorithm: sha256WithRSAEncryption
40:5e:98:53:6e:39:d6:ad:00:7b:7c:a5:9a:47:4c:96:2d:6b:
18:ce:72:21:b8:00:d3:0d:50:07:ee:79:a3:35:f8:68:a1:1e:
96:ff:71:61:0b:8c:29:04:f1:6f:d2:19:0e:f0:81:2a:b6:03:
c2:3d:e0:64:9e:58:12:e5:47:6c:3a:08:5d:96:81:4b:48:da:
55:2e:c5:b3:2f:04:87:ed:da:be:aa:42:8f:99:f6:e6:c5:51:
98:41:65:e2:18:e5:51:d1:11:22:5b:29:2e:54:b5:b4:b6:04:
46:ca:67:30:15:24:97:64:78:ce:16:2f:1b:58:5a:0e:a8:f6:
80:df:03:0a:e8:16:bd:30:24:a9:04:f3:69:e9:9e:df:ff:ae:
99:8b:7f:19:fe:47:3f:e6:04:0e:e8:8f:17:71:9e:0b:c5:29:
1a:c8:01:77:a5:9c:2f:34:71:0d:f4:af:90:5e:aa:66:6e:cc:
7d:fd:9a:e9:df:35:f0:2c:23:52:10:ee:71:20:96:6b:b7:72:
6d:aa:29:1a:51:c2:70:f2:0e:11:71:ce:52:7b:f9:e1:cd:45:
37:ad:6e:3e:ed:93:cc:70:e5:f1:61:5b:22:84:d5:aa:3c:68:
39:b7:6a:ed:92:d6:4c:c5:09:c3:ea:a6:c1:4b:a6:f0:9d:d1:
cc:c4:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:26 2026 by rpki-client