This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3133382e35392e3230342e302f32322d3232203d3e20323633373335.roa
File: 3133382e35392e3230342e302f32322d3232203d3e20323633373335.roa (raw, json)
Hash identifier: WWXwBQLq7ohbW2meknWPsLWQqjOuCfTfcJKvHizwBqw=
Subject key identifier: FF:A8:F6:1D:EB:C0:1C:6E:F3:9D:C6:1B:82:DB:0E:11:89:68:EC:EE
Certificate issuer: /CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
Certificate serial: 7FBBD5553325CB64017FFE654E762E25C31CBACC
Authority key identifier: 24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3133382e35392e3230342e302f32322d3232203d3e20323633373335.roa
Signing time: Tue 06 Jan 2026 20:57:54 +0000
ROA not before: Tue 06 Jan 2026 20:52:54 +0000
ROA not after: Tue 05 Jan 2027 20:57:54 +0000
asID: 263735
IP address blocks: 138.59.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl
rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bb:d5:55:33:25:cb:64:01:7f:fe:65:4e:76:2e:25:c3:1c:ba:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
Validity
Not Before: Jan 6 20:52:54 2026 GMT
Not After : Jan 5 20:57:54 2027 GMT
Subject: CN=FFA8F61DEBC01C6EF39DC61B82DB0E118968ECEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:7e:45:de:6d:67:be:fe:ea:b4:b5:8f:c2:
0a:51:84:65:81:47:b3:66:3f:6f:14:cf:35:2c:b4:
79:10:f3:cd:81:d5:80:d1:4f:1e:fc:a5:31:01:3d:
8c:38:c7:ae:5e:ac:3f:ed:d1:e5:e8:f5:d7:3b:31:
ec:08:c4:71:3d:4a:ad:53:94:56:e1:da:84:63:a7:
5f:db:9c:24:12:d9:84:07:3d:2a:5f:5d:7c:76:d1:
75:72:0d:0e:9e:5b:c0:53:5a:d2:d7:1f:a8:fd:4e:
4d:73:75:41:e1:96:4d:8f:b8:db:8b:2e:28:6e:ba:
68:74:8d:c4:5d:8f:e6:ff:67:70:7c:28:53:69:92:
d1:3c:18:13:2a:6d:a7:6a:57:e1:65:8d:57:69:88:
00:fe:73:b3:5c:83:be:85:b2:d0:1e:61:c5:18:b7:
9f:09:04:04:05:a2:6d:6a:dc:fc:b3:65:c6:b8:9a:
db:84:6c:eb:52:da:fb:5a:da:eb:0d:47:9c:b8:32:
cf:57:c0:35:7d:e3:6d:62:36:9d:c2:c0:b7:61:4a:
b5:51:c6:86:46:d6:13:5e:d4:b1:30:da:fb:e6:23:
ef:71:5b:ba:ef:2e:01:c4:99:fe:dc:9b:9e:23:d2:
5d:08:1a:82:79:21:2f:a3:ae:be:70:31:65:41:a0:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A8:F6:1D:EB:C0:1C:6E:F3:9D:C6:1B:82:DB:0E:11:89:68:EC:EE
X509v3 Authority Key Identifier:
keyid:24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3133382e35392e3230342e302f32322d3232203d3e20323633373335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.204.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:2b:99:2f:66:1a:42:eb:ad:5f:d0:73:74:99:de:20:ec:bc:
fc:94:67:42:cb:21:65:0c:18:b0:c0:c4:91:3f:b9:17:f2:ac:
af:93:7a:a0:47:c6:27:93:11:fb:8f:e5:fe:54:16:c2:a6:24:
2c:0d:6f:58:5e:25:76:3b:b6:91:ad:5f:9e:c6:3e:cd:b7:1b:
11:87:a3:95:c8:ed:3b:78:bc:f8:91:ba:82:d8:1f:d5:db:07:
29:52:f3:49:1c:c2:dd:67:cb:1a:e8:30:30:1d:a6:c3:78:bb:
ca:f1:e4:f4:cb:d7:83:a9:58:85:98:f4:0a:67:88:80:56:3e:
16:3a:cc:39:db:13:40:59:63:54:26:79:ae:d6:55:be:1c:37:
d1:3e:00:5e:08:72:52:77:d0:0e:72:26:5f:3a:94:f8:07:84:
69:98:43:f9:e5:d9:6c:da:a9:db:51:f6:72:3b:da:c3:03:08:
2c:b4:88:47:be:73:ef:65:fb:b7:91:1c:b0:21:32:cb:5f:3b:
93:8c:c0:13:2d:17:19:02:08:eb:54:a1:aa:bf:b3:07:26:e9:
13:02:a2:74:c5:19:56:11:dd:0f:dd:78:d4:15:38:67:8b:bd:
6f:0a:46:d8:31:65:d5:60:1b:5c:89:63:40:9d:17:e8:b9:b5:
de:31:9f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:56:56 2026 by rpki-client