This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa
File: 3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa (raw, json)
Hash identifier: kpAD2XTwRoVW22a8bFm0BWsQySXrfgGAknsB1L4kO+I=
Subject key identifier: 2A:81:C9:92:FF:CF:62:1C:62:8A:8E:A4:AD:09:BA:EA:F8:1B:57:58
Certificate issuer: /CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
Certificate serial: 6576FFD58981C39F8100A0144B7814398BB7AF67
Authority key identifier: D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa
Signing time: Tue 06 Jan 2026 19:04:09 +0000
ROA not before: Tue 06 Jan 2026 18:59:09 +0000
ROA not after: Tue 05 Jan 2027 19:04:09 +0000
asID: 262259
IP address blocks: 190.99.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl
rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:76:ff:d5:89:81:c3:9f:81:00:a0:14:4b:78:14:39:8b:b7:af:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
Validity
Not Before: Jan 6 18:59:09 2026 GMT
Not After : Jan 5 19:04:09 2027 GMT
Subject: CN=2A81C992FFCF621C628A8EA4AD09BAEAF81B5758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:e2:4e:04:b6:55:4e:3c:2a:fd:78:2a:92:
4a:aa:45:a7:1d:5a:10:fb:3c:a8:b1:45:04:ca:7f:
5f:bd:59:65:8a:ae:1d:be:ce:4b:58:82:a7:e3:e6:
d4:44:35:0f:b6:0f:52:98:d4:02:48:c7:94:cd:20:
04:25:05:8a:5f:77:77:3b:44:72:39:a3:a5:3f:db:
15:80:4e:32:c9:6f:30:5a:d3:41:32:02:67:11:cc:
0d:75:6c:c0:46:76:00:c9:b3:92:b3:13:d5:45:bc:
73:cc:1e:70:7a:f3:e3:df:20:79:74:af:d7:bf:ee:
4c:f5:ca:4e:6f:c3:7f:2c:40:fd:10:5b:a8:d4:93:
7a:ba:cf:57:b5:2a:e7:47:f4:6a:93:4e:4b:a4:15:
b0:ad:20:ba:a0:73:15:ee:e4:2a:b7:21:e0:8d:67:
5e:e8:3f:59:c4:2d:00:1c:a3:b4:a5:fb:54:63:e7:
50:10:12:eb:2e:e9:e4:11:df:7a:33:9d:5f:a2:2f:
46:09:5f:13:14:e3:ac:e2:b6:b5:d8:c9:9c:b6:94:
61:94:45:01:40:8b:fc:6f:c8:b6:f0:38:c9:27:5d:
a0:79:6e:09:75:60:0f:d2:69:db:c9:45:4f:89:78:
22:a7:8a:4b:1c:a6:f3:c5:29:67:2c:b9:88:69:ae:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:81:C9:92:FF:CF:62:1C:62:8A:8E:A4:AD:09:BA:EA:F8:1B:57:58
X509v3 Authority Key Identifier:
keyid:D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:c8:3f:42:91:3e:c2:52:72:f1:4e:45:e8:ac:a5:52:4a:5c:
76:ad:1f:4a:c6:c0:0b:59:a3:c1:e7:2c:e4:e8:9c:cd:ca:f2:
ee:a5:b7:76:03:8e:b0:36:7e:59:48:71:52:3b:f2:ce:6a:dc:
05:10:9f:cb:c1:93:eb:7a:2d:d4:3a:0e:2b:b0:f6:a6:e4:b1:
22:9e:1c:be:6b:84:ed:93:2f:1e:4e:87:eb:e1:3a:2f:43:4d:
6d:e6:54:58:28:dd:42:5b:14:92:28:e6:7a:b1:e0:03:5c:64:
2d:b2:42:13:a3:43:b4:cf:11:bc:48:e4:b5:96:31:9f:57:3b:
c0:c6:8f:16:f0:6a:4f:4d:9f:3a:3a:52:d8:ef:63:da:8c:16:
9f:f6:f6:92:6a:39:99:5d:25:a0:57:ff:d9:f0:72:1a:a5:0f:
88:8d:fb:24:60:ac:dd:79:eb:58:5c:75:2c:aa:07:c6:b9:69:
68:14:2b:29:5a:ef:e8:6a:a2:85:e3:af:18:6d:2f:8c:ab:91:
54:ed:1c:1c:d6:d3:9e:f6:42:90:77:9b:80:ba:c9:bb:f9:cb:
06:2f:d3:1b:e7:b2:38:b8:e5:31:e3:c3:7a:a9:06:3c:10:f1:
2c:de:7f:71:4a:32:5b:71:5b:c9:35:a1:e3:10:59:53:9d:e1:
15:11:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:00 2026 by rpki-client