This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3133382e3231392e3137322e302f32322d3232203d3e20323633373335.roa
File: 3133382e3231392e3137322e302f32322d3232203d3e20323633373335.roa (raw, json)
Hash identifier: gQcvtP4veIgDQnHAEB7oNjH3/Yfr+Vn2rVRMNRBoJ5k=
Subject key identifier: 5A:08:C4:43:74:44:4E:09:D0:09:80:71:79:F0:7D:A6:CA:29:F1:72
Certificate issuer: /CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
Certificate serial: 76531B2E599F57969D76D9564C39A23A0172426E
Authority key identifier: 24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3133382e3231392e3137322e302f32322d3232203d3e20323633373335.roa
Signing time: Tue 06 Jan 2026 20:57:53 +0000
ROA not before: Tue 06 Jan 2026 20:52:53 +0000
ROA not after: Tue 05 Jan 2027 20:57:53 +0000
asID: 263735
IP address blocks: 138.219.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl
rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:53:1b:2e:59:9f:57:96:9d:76:d9:56:4c:39:a2:3a:01:72:42:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
Validity
Not Before: Jan 6 20:52:53 2026 GMT
Not After : Jan 5 20:57:53 2027 GMT
Subject: CN=5A08C44374444E09D009807179F07DA6CA29F172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:fb:ab:6d:82:ce:ed:ea:c4:50:1b:9d:29:
3c:5c:63:e5:83:50:ae:3e:5c:c3:c4:65:8a:bc:73:
49:3c:e8:f9:8a:8c:3d:00:d0:83:ab:4f:85:6d:75:
33:ce:da:aa:c0:73:f2:5b:24:16:23:fd:7f:7f:83:
84:86:70:78:a4:aa:43:b0:10:bc:06:20:10:83:09:
99:ef:39:9c:b4:df:35:3a:13:bd:22:18:c1:3f:02:
91:f9:5e:b1:b2:b5:00:1c:f2:99:43:8f:f8:7d:c6:
30:36:f2:e0:23:6b:9f:2a:48:87:56:33:f5:b8:70:
8e:9e:f1:b6:a8:bd:b8:19:ee:d4:47:8f:61:1a:b7:
17:a0:68:6c:de:a5:d0:0a:43:9b:41:fe:16:63:da:
01:06:2d:cb:4e:03:cb:a2:53:13:d5:4b:b9:b4:e1:
be:9b:eb:88:9d:80:aa:33:b1:87:0d:ff:a6:81:ef:
e9:b4:48:cf:01:49:17:c0:34:49:0d:67:74:5a:20:
8e:6c:e8:90:6d:1f:2a:bd:53:b6:c9:25:97:ed:12:
4b:9d:88:aa:e5:e1:43:67:f3:07:0f:e0:df:26:37:
c3:59:17:d0:50:a1:ea:a9:10:3f:0f:d3:d1:33:40:
92:39:8f:fc:2e:4b:b0:58:61:32:51:18:d1:27:2a:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:C4:43:74:44:4E:09:D0:09:80:71:79:F0:7D:A6:CA:29:F1:72
X509v3 Authority Key Identifier:
keyid:24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3133382e3231392e3137322e302f32322d3232203d3e20323633373335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:00:a7:77:5e:18:60:fc:b2:14:79:86:76:92:34:7c:02:38:
2f:71:7e:f5:e0:e9:34:8c:98:2d:54:2d:85:ad:59:c4:b8:79:
de:f3:9b:b7:d1:80:6b:00:5b:d2:86:bc:06:00:68:17:ed:05:
b2:a9:64:3a:00:fb:a4:96:bc:6d:bf:28:8e:77:cb:4a:64:53:
78:da:41:d1:2d:58:60:cb:0c:95:e1:b2:dd:c8:3e:cb:5a:70:
a8:01:34:97:4e:de:a2:43:a1:03:36:1e:5f:09:05:4c:e0:cf:
6f:d8:fe:ee:cb:71:b9:f3:74:db:2d:77:7c:27:3d:88:93:b0:
48:84:97:ca:de:fa:5f:c8:4c:2d:84:26:8e:d9:45:36:ed:05:
e3:52:af:0e:4c:95:30:76:b7:81:37:b9:7e:09:e7:7a:ce:4c:
2f:99:3e:c9:3a:8f:e0:4b:75:22:b5:f9:05:a9:fe:f3:60:35:
b6:bb:05:90:4e:5a:24:1e:5a:56:ce:1f:f4:bd:93:de:8c:dd:
ee:ea:d2:32:64:63:78:90:22:8b:dd:a1:3a:0e:69:06:dc:af:
aa:6c:2b:c6:57:da:da:70:d5:5e:46:8f:b1:89:7d:f4:aa:c2:
5b:41:3a:b2:21:6a:92:71:8a:a9:21:27:ab:64:91:6c:92:19:
1b:ad:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:55 2026 by rpki-client