This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/3139302e3131312e3135322e302f32322d3234203d3e20323730303338.roa
File: 3139302e3131312e3135322e302f32322d3234203d3e20323730303338.roa (raw, json)
Hash identifier: 3MFyw3rht7/WejnOMl/ydK4MeiuHS3dpZ9zyxmjnDfg=
Subject key identifier: 0E:BC:C6:E3:5C:89:B7:8E:CF:37:10:89:0C:5E:1B:D7:17:89:B9:3F
Certificate issuer: /CN=B9A10B1D1207BBEB3179CE7270A94F80E4A641D3
Certificate serial: 77385A6D23DCCA078D2FB5F917DC1165F7542DB5
Authority key identifier: B9:A1:0B:1D:12:07:BB:EB:31:79:CE:72:70:A9:4F:80:E4:A6:41:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/3139302e3131312e3135322e302f32322d3234203d3e20323730303338.roa
Signing time: Tue 06 Jan 2026 19:44:21 +0000
ROA not before: Tue 06 Jan 2026 19:39:21 +0000
ROA not after: Tue 05 Jan 2027 19:44:21 +0000
asID: 270038
IP address blocks: 190.111.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.crl
rsync://repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:38:5a:6d:23:dc:ca:07:8d:2f:b5:f9:17:dc:11:65:f7:54:2d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9A10B1D1207BBEB3179CE7270A94F80E4A641D3
Validity
Not Before: Jan 6 19:39:21 2026 GMT
Not After : Jan 5 19:44:21 2027 GMT
Subject: CN=0EBCC6E35C89B78ECF3710890C5E1BD71789B93F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6c:d7:04:10:aa:34:ee:74:32:e6:66:9f:9c:
02:90:84:ca:4d:61:91:2d:9f:e0:27:9f:d5:af:19:
49:16:bf:f8:b8:dc:cb:9c:87:a8:ad:31:65:17:fc:
67:19:f5:40:7e:08:51:52:ca:c4:aa:0c:10:b7:cb:
53:fc:1e:2e:80:05:1e:2f:38:69:cc:64:7c:b0:4f:
66:8b:7f:5b:83:27:f6:91:16:e8:81:b4:b9:df:ce:
7d:e5:e1:65:52:c4:ce:17:9f:c8:1e:7e:22:30:a4:
9d:39:c1:72:ed:7b:81:88:5c:ca:80:0a:8e:4c:aa:
b4:ab:ce:59:9f:2f:52:e5:ac:15:f1:43:6c:bb:bb:
29:79:ff:6d:d0:0c:b8:bc:c3:27:2b:a2:3e:68:29:
63:e5:6f:c5:cc:07:4a:d0:c0:d0:81:9a:18:0d:a5:
c9:11:85:47:de:fd:8c:a9:0e:5d:6c:a6:d0:77:75:
c5:95:df:72:d6:a7:13:eb:c1:77:03:0c:1c:42:51:
ea:45:11:6c:1f:86:82:d0:84:0f:b1:cb:ed:f6:ca:
9b:31:2a:02:b4:b5:78:c6:7e:66:ce:a5:2d:93:5d:
7c:a3:5d:cc:68:8a:d9:af:d5:8e:24:95:ac:75:a9:
6b:fb:f5:42:28:41:40:12:d1:e7:e5:2e:75:cb:0f:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BC:C6:E3:5C:89:B7:8E:CF:37:10:89:0C:5E:1B:D7:17:89:B9:3F
X509v3 Authority Key Identifier:
keyid:B9:A1:0B:1D:12:07:BB:EB:31:79:CE:72:70:A9:4F:80:E4:A6:41:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A10B1D1207BBEB3179CE7270A94F80E4A641D3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B4384D6A0955C34CEC118BA6C21BF8AE8D9E2157633A6B1809D5DBEE7A0CC15/0/3139302e3131312e3135322e302f32322d3234203d3e20323730303338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.111.152.0/22
Signature Algorithm: sha256WithRSAEncryption
91:8e:23:82:39:01:d4:9d:fc:d0:30:c0:8a:68:d8:1c:65:3d:
a2:03:4a:1a:86:45:43:e6:f1:bf:4f:26:78:52:4a:54:9d:3f:
fb:0d:9b:bb:2d:e6:85:e5:61:0c:ad:f6:9d:7f:a2:2e:57:48:
45:a5:31:b4:2d:a1:53:96:e6:a2:41:ac:32:5b:ef:57:46:f0:
4e:1f:8a:fe:9e:55:50:c7:5e:24:f9:48:7d:eb:c2:3f:54:a0:
4a:43:2c:80:1c:1e:55:a1:c0:92:86:0e:55:c5:ab:e9:44:16:
62:1a:9c:4e:5b:d0:32:ce:8d:e5:01:49:73:69:12:ec:d5:89:
1f:fe:48:05:27:eb:b5:a9:14:4c:14:a8:26:50:e1:0e:e6:9d:
a5:fe:f1:a4:a3:df:97:ac:ed:64:6e:0d:33:4c:45:19:21:f9:
a5:43:1d:a0:f0:ab:04:1a:2b:e2:ea:f1:05:cc:6b:84:b7:64:
94:d7:ef:5b:99:ed:df:85:fb:f1:c8:bc:a2:55:bb:0d:6c:32:
8d:22:5c:3f:e5:b1:af:17:0c:1f:55:e2:5f:05:78:ab:c6:19:
d0:9d:76:35:55:43:a9:11:33:bf:00:54:05:9c:25:21:1f:97:
d8:89:bb:a9:0b:54:ff:a2:52:e1:7b:5b:15:94:41:9c:0f:31:
f4:0d:65:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:32 2026 by rpki-client