This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/3139322e3138382e3139362e302f32342d3234203d3e203237393437.roa
File: 3139322e3138382e3139362e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier: Z3XiIGwddohfdTB7+iqeFpJ/vLy2tVieciZ2Q39TK2Y=
Subject key identifier: 3D:7F:29:DF:49:F4:10:EA:30:5D:9D:95:45:EE:F6:FA:49:8D:C5:1E
Certificate issuer: /CN=962E09CED777E3B6E30D51D97754EF33B1DFD373
Certificate serial: 1FA98537730BB57B36460BAB71396CE1281E82D7
Authority key identifier: 96:2E:09:CE:D7:77:E3:B6:E3:0D:51:D9:77:54:EF:33:B1:DF:D3:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/3139322e3138382e3139362e302f32342d3234203d3e203237393437.roa
Signing time: Tue 06 Jan 2026 19:31:36 +0000
ROA not before: Tue 06 Jan 2026 19:26:36 +0000
ROA not after: Tue 05 Jan 2027 19:31:36 +0000
asID: 27947
IP address blocks: 192.188.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.crl
rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 12:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a9:85:37:73:0b:b5:7b:36:46:0b:ab:71:39:6c:e1:28:1e:82:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962E09CED777E3B6E30D51D97754EF33B1DFD373
Validity
Not Before: Jan 6 19:26:36 2026 GMT
Not After : Jan 5 19:31:36 2027 GMT
Subject: CN=3D7F29DF49F410EA305D9D9545EEF6FA498DC51E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:ee:39:d7:10:0b:f2:5b:de:0b:3c:8c:b5:
93:e6:08:90:7d:cb:e5:8a:4b:48:71:bd:c8:8d:44:
b1:be:de:99:c2:86:18:ef:cb:cb:40:5b:dd:2d:2d:
3c:3d:52:46:6a:b6:95:57:ec:c4:6b:55:f5:2c:91:
4b:3b:e8:63:b0:c2:ee:57:0b:6a:38:82:61:a6:0b:
58:0d:a0:93:ba:d2:a2:bd:46:2d:a4:29:dc:dc:7b:
82:3d:10:16:11:3f:c8:19:a3:60:3f:8f:35:c6:21:
da:69:f0:9b:65:99:6d:d4:81:a7:20:25:e0:f8:87:
79:9b:8f:69:0d:a5:31:a4:07:a9:b0:84:28:5d:af:
d0:e3:6a:24:44:cf:f9:18:d7:b3:f5:c9:53:2d:8e:
ab:17:5e:34:55:42:1d:2f:6c:f1:59:6e:56:ed:d6:
0b:35:e2:c7:43:6d:25:38:63:a3:e7:25:e5:f6:42:
1c:f6:57:25:4b:d2:eb:ba:f7:96:a1:b3:ea:69:3b:
14:08:6a:7c:93:7b:17:c7:20:2c:60:1c:ff:3a:54:
1a:8d:ab:e0:be:f7:54:51:44:a3:d9:73:c1:b8:c6:
b5:aa:56:d4:9f:f6:a7:9a:6a:a5:96:1a:9e:8b:02:
df:61:94:59:60:2f:6c:02:c1:93:f4:38:b5:a8:ce:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7F:29:DF:49:F4:10:EA:30:5D:9D:95:45:EE:F6:FA:49:8D:C5:1E
X509v3 Authority Key Identifier:
keyid:96:2E:09:CE:D7:77:E3:B6:E3:0D:51:D9:77:54:EF:33:B1:DF:D3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/3139322e3138382e3139362e302f32342d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:70:73:47:ac:98:d1:d2:fb:16:b3:bf:0d:45:1e:45:dd:e1:
47:e2:30:6c:c7:27:18:be:ea:b0:03:6b:5f:28:a3:8f:7d:b3:
e7:10:d1:07:59:f3:f3:a1:09:3e:33:43:a1:1a:97:55:63:59:
7f:cd:6e:5d:d1:01:8f:4b:d1:aa:11:12:62:2a:be:32:1e:4b:
0c:fd:3e:9c:58:5c:9b:15:c9:5e:55:38:76:68:ce:44:56:62:
c0:b9:04:d1:09:fc:e5:e3:af:22:71:35:ed:6a:3d:e5:1d:0a:
20:f5:c6:cd:9b:76:6b:5e:b8:87:60:f5:2a:48:5a:93:b6:79:
7f:29:e5:95:84:9d:a0:83:bb:1a:5b:e7:2f:c4:3a:82:a3:13:
ff:37:3e:34:ac:96:37:73:8d:ff:f1:93:43:79:2d:53:3d:9d:
3a:16:41:73:40:0d:ed:c5:29:04:d7:d8:1e:8e:5f:83:38:65:
08:93:25:66:58:5a:92:9e:4a:b0:3f:1e:5d:9c:8f:29:5b:44:
95:92:9b:d0:8f:ad:ac:a6:87:87:fa:9e:1d:8e:da:bd:86:f3:
6e:f8:16:50:ae:9a:53:ed:3a:ba:c3:97:9f:15:38:4c:46:4d:
ac:43:8c:6d:fa:d8:41:87:37:4c:fd:a0:da:c8:58:c0:56:b9:
df:5d:ba:27
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUH6mFN3MLtXs2RgurcTls4SgegtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYyRTA5Q0VENzc3RTNCNkUzMEQ1MUQ5Nzc1NEVGMzNC
MURGRDM3MzAeFw0yNjAxMDYxOTI2MzZaFw0yNzAxMDUxOTMxMzZaMDMxMTAvBgNV
BAMTKDNEN0YyOURGNDlGNDEwRUEzMDVEOUQ5NTQ1RUVGNkZBNDk4REM1MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6O451xAL8lveCzyMtZPmCJB9
y+WKS0hxvciNRLG+3pnChhjvy8tAW90tLTw9UkZqtpVX7MRrVfUskUs76GOwwu5X
C2o4gmGmC1gNoJO60qK9Ri2kKdzce4I9EBYRP8gZo2A/jzXGIdpp8JtlmW3Ugacg
JeD4h3mbj2kNpTGkB6mwhChdr9DjaiREz/kY17P1yVMtjqsXXjRVQh0vbPFZblbt
1gs14sdDbSU4Y6PnJeX2Qhz2VyVL0uu695ahs+ppOxQIanyTexfHICxgHP86VBqN
q+C+91RRRKPZc8G4xrWqVtSf9qeaaqWWGp6LAt9hlFlgL2wCwZP0OLWozuorAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPX8p30n0EOowXZ2VRe72+kmNxR4wHwYDVR0j
BBgwFoAUli4Jztd347bjDVHZd1TvM7Hf03MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Qjk5NkMxQUYyMUZDNUZCNTlCRTFDMzQ5QUFBOTA2NjFE
NjNENjg0NjQ3Nzc0NjU5NjE4N0U0MzJGOEY1RjIzLzAvOTYyRTA5Q0VENzc3RTNC
NkUzMEQ1MUQ5Nzc1NEVGMzNCMURGRDM3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjJFMDlDRUQ3NzdFM0I2RTMw
RDUxRDk3NzU0RUYzM0IxREZEMzczLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUI5OTZDMUFGMjFGQzVGQjU5QkUxQzM0OUFBQTkwNjYxRDYzRDY4NDY0
Nzc3NDY1OTYxODdFNDMyRjhGNUYyMy8wLzMxMzkzMjJlMzEzODM4MmUzMTM5MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzkzNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLzE
MA0GCSqGSIb3DQEBCwUAA4IBAQAacHNHrJjR0vsWs78NRR5F3eFH4jBsxycYvuqw
A2tfKKOPfbPnENEHWfPzoQk+M0OhGpdVY1l/zW5d0QGPS9GqERJiKr4yHksM/T6c
WFybFcleVTh2aM5EVmLAuQTRCfzl468icTXtaj3lHQog9cbNm3ZrXriHYPUqSFqT
tnl/KeWVhJ2gg7saW+cvxDqCoxP/Nz40rJY3c43/8ZNDeS1TPZ06FkFzQA3txSkE
19gejl+DOGUIkyVmWFqSnkqwPx5dnI8pW0SVkpvQj62spoeH+p4djtq9hvNu+BZQ
rppT7Tq6w5efFThMRk2sQ4xt+thBhzdM/aDayFjAVrnfXbon
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:23 2026 by rpki-client