This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31322e302f32342d3234203d3e20323733303035.roa
File: 3133382e3131372e31322e302f32342d3234203d3e20323733303035.roa (raw, json)
Hash identifier: AsChvcQ9dXfWBNM0pPh4cC3DP/YhUudbvahOwxENkAw=
Subject key identifier: 9A:BE:E5:6B:4D:01:0F:C0:11:4B:73:89:09:5E:01:CC:33:AB:1E:2F
Certificate issuer: /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial: 214E60174B4C7D87DE5D07B94FB2DFA0F76A7186
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31322e302f32342d3234203d3e20323733303035.roa
Signing time: Tue 06 Jan 2026 20:58:23 +0000
ROA not before: Tue 06 Jan 2026 20:53:23 +0000
ROA not after: Tue 05 Jan 2027 20:58:23 +0000
asID: 273005
IP address blocks: 138.117.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:4e:60:17:4b:4c:7d:87:de:5d:07:b9:4f:b2:df:a0:f7:6a:71:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Validity
Not Before: Jan 6 20:53:23 2026 GMT
Not After : Jan 5 20:58:23 2027 GMT
Subject: CN=9ABEE56B4D010FC0114B7389095E01CC33AB1E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:a6:fa:46:84:95:c6:b5:14:c7:14:eb:57:
b5:ea:82:80:6e:78:95:3c:4e:d0:64:82:55:be:26:
ce:f0:22:05:0a:b0:82:17:1f:5b:76:26:35:f4:f9:
19:b9:cd:8a:74:e3:b8:fd:53:41:7f:22:6e:5c:5f:
4b:41:72:35:4e:0a:96:64:a1:62:32:c1:ed:af:91:
8e:c9:2c:e0:1f:ab:5c:58:45:5e:66:8e:b7:87:72:
1a:57:76:e5:c4:c2:15:56:3d:65:4a:e5:b1:d1:cc:
7c:bb:db:2d:04:01:d6:cd:7c:a3:10:47:99:96:e5:
7f:50:23:a3:f7:0e:38:fc:a9:fd:18:0d:3c:d4:79:
74:b5:b5:f3:da:a7:d1:b3:11:47:0a:6a:b0:e0:55:
ae:39:c6:e8:6a:e0:6d:ea:b8:9a:4d:06:c9:86:10:
2e:00:92:8c:1c:00:6c:98:c2:ca:96:e4:29:d4:ab:
4d:11:48:d0:00:16:2f:11:9a:13:d0:40:39:16:4d:
c7:9e:bc:66:3d:30:7e:a8:5e:c6:fc:7b:93:65:aa:
28:f1:a9:d3:48:5c:f7:61:b0:39:85:e4:eb:a7:54:
29:d6:e5:b7:a9:88:e3:46:74:96:df:97:4b:05:1b:
6b:89:f3:78:68:65:03:8e:b2:3a:fa:a6:dc:a8:9d:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BE:E5:6B:4D:01:0F:C0:11:4B:73:89:09:5E:01:CC:33:AB:1E:2F
X509v3 Authority Key Identifier:
keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31322e302f32342d3234203d3e20323733303035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.12.0/24
Signature Algorithm: sha256WithRSAEncryption
53:83:d7:12:d2:9f:8b:2c:c1:83:5e:68:d3:a6:64:97:80:e0:
ba:47:e9:0e:9c:fa:f6:1b:f9:c7:db:5f:63:c1:a6:f5:28:db:
33:a8:3e:13:fe:f5:61:8c:c1:3f:56:17:ba:90:40:be:8b:dc:
9e:ea:04:af:97:9a:b5:9b:b4:c7:5b:f6:fc:0d:fc:c6:0d:2f:
2e:1f:bc:b3:18:17:79:4c:4d:f3:c5:60:9c:ac:ef:b8:b0:8c:
3d:a8:5a:28:46:a9:03:bd:cc:c9:87:f4:d3:40:1e:ec:ef:5f:
3c:f1:f6:7e:e6:eb:81:c4:71:eb:35:cb:65:53:99:2d:47:38:
94:71:aa:51:ce:42:6c:e8:1d:d0:0a:ec:16:71:b4:f2:92:2a:
43:b6:06:d4:54:f3:85:4e:f4:40:ab:5c:12:2c:52:94:f5:cc:
d5:ed:f4:ae:3e:f2:7d:64:b7:82:d3:e5:49:12:40:3e:ac:ff:
0f:d2:a7:ba:b5:e4:9b:b0:57:fd:6c:b5:0d:bb:54:34:7f:d2:
de:7a:50:86:55:34:a8:a3:b7:74:0c:5c:9d:76:1f:bf:bb:e2:
f2:e3:5a:8a:ee:07:84:79:68:35:72:e7:b6:d3:1a:85:dc:40:
54:e2:d4:5c:a4:99:77:ba:77:15:24:82:4c:65:b1:68:3e:48:
d7:fe:dd:1c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIU5gF0tMfYfeXQe5T7LfoPdqcYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJFNkE4QUYzMjI2NTAxRDhDMEFFODlCMzFBNzhFMzY5
QkNEQkMwMzAeFw0yNjAxMDYyMDUzMjNaFw0yNzAxMDUyMDU4MjNaMDMxMTAvBgNV
BAMTKDlBQkVFNTZCNEQwMTBGQzAxMTRCNzM4OTA5NUUwMUNDMzNBQjFFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUqb6RoSVxrUUxxTrV7XqgoBu
eJU8TtBkglW+Js7wIgUKsIIXH1t2JjX0+Rm5zYp047j9U0F/Im5cX0tBcjVOCpZk
oWIywe2vkY7JLOAfq1xYRV5mjreHchpXduXEwhVWPWVK5bHRzHy72y0EAdbNfKMQ
R5mW5X9QI6P3Djj8qf0YDTzUeXS1tfPap9GzEUcKarDgVa45xuhq4G3quJpNBsmG
EC4AkowcAGyYwsqW5CnUq00RSNAAFi8RmhPQQDkWTceevGY9MH6oXsb8e5Nlqijx
qdNIXPdhsDmF5OunVCnW5bepiONGdJbfl0sFG2uJ83hoZQOOsjr6ptyonSEhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmr7la00BD8ARS3OJCV4BzDOrHi8wHwYDVR0j
BBgwFoAU0uaorzImUB2MCuibMaeONpvNvAMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QTlCRThCQUMwREJGMDRBMDRFNjU3RjE3NzIyMURFNUVG
QUVEMTQ3ODAzNEJERTYyNUZENDMxNTBCQ0ZCRjAyLzAvRDJFNkE4QUYzMjI2NTAx
RDhDMEFFODlCMzFBNzhFMzY5QkNEQkMwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkU2QThBRjMyMjY1MDFEOEMw
QUU4OUIzMUE3OEUzNjlCQ0RCQzAzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUE5QkU4QkFDMERCRjA0QTA0RTY1N0YxNzcyMjFERTVFRkFFRDE0Nzgw
MzRCREU2MjVGRDQzMTUwQkNGQkYwMi8wLzMxMzMzODJlMzEzMTM3MmUzMTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinUM
MA0GCSqGSIb3DQEBCwUAA4IBAQBTg9cS0p+LLMGDXmjTpmSXgOC6R+kOnPr2G/nH
219jwab1KNszqD4T/vVhjME/Vhe6kEC+i9ye6gSvl5q1m7THW/b8DfzGDS8uH7yz
GBd5TE3zxWCcrO+4sIw9qFooRqkDvczJh/TTQB7s71888fZ+5uuBxHHrNctlU5kt
RziUcapRzkJs6B3QCuwWcbTykipDtgbUVPOFTvRAq1wSLFKU9czV7fSuPvJ9ZLeC
0+VJEkA+rP8P0qe6teSbsFf9bLUNu1Q0f9LeelCGVTSoo7d0DFyddh+/u+Ly41qK
7geEeWg1cue20xqF3EBU4tRcpJl3uncVJIJMZbFoPkjX/t0c
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:34 2026 by rpki-client