This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa
File: 3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa (raw, json)
Hash identifier: /WKTTSLIDHKutRBox1QUvqKhzwW95ECCJgr/WZfEJDc=
Subject key identifier: 8C:CC:D1:A0:EB:54:04:4F:DC:F8:57:33:C0:F2:44:CF:D2:02:69:F0
Certificate issuer: /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial: 5110B41477F2F3CE3E85F0AFFBB0974AAE5201AC
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa
Signing time: Tue 06 Jan 2026 18:57:34 +0000
ROA not before: Tue 06 Jan 2026 18:52:34 +0000
ROA not after: Tue 05 Jan 2027 18:57:34 +0000
asID: 262589
IP address blocks: 190.211.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl
rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:10:b4:14:77:f2:f3:ce:3e:85:f0:af:fb:b0:97:4a:ae:52:01:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
Validity
Not Before: Jan 6 18:52:34 2026 GMT
Not After : Jan 5 18:57:34 2027 GMT
Subject: CN=8CCCD1A0EB54044FDCF85733C0F244CFD20269F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:4d:91:c8:07:ff:a3:99:8e:f9:a4:90:b5:
41:64:28:27:d8:62:c3:1d:23:55:e0:1d:7e:7b:fb:
ed:07:93:83:a9:5f:3b:2d:bf:d7:c3:3d:57:b2:de:
10:0e:67:27:5a:44:10:f2:b6:43:23:73:21:fd:c0:
8b:37:9f:b1:94:2d:b9:b6:f5:20:c7:fe:d9:c7:7c:
31:3d:5a:69:8b:fa:e2:14:c6:64:c4:43:c4:f2:db:
da:e0:74:9f:00:d4:02:c4:d0:36:ba:36:e7:0e:d4:
fe:5e:4d:8e:94:4b:14:a0:65:51:b6:47:a8:25:a8:
ed:7f:be:f2:cb:bb:c2:68:50:61:2f:4d:da:eb:f2:
b1:08:de:3a:7f:23:95:b2:19:57:71:e6:77:90:b8:
a0:74:0c:2e:a5:84:8c:f9:af:75:8d:fc:41:f2:5c:
a7:bc:4e:c9:76:02:a6:d8:2a:ec:5a:35:9f:81:fa:
4a:61:c4:18:f0:69:b0:08:48:22:75:35:5e:b1:c5:
25:15:9b:50:6b:22:51:b6:04:f3:60:a5:1e:62:4d:
a0:36:a0:f5:f5:4d:14:ae:b5:22:a5:ce:47:a8:9e:
ee:08:b2:91:9e:00:ef:2a:24:da:09:13:2c:61:d2:
d1:ee:5f:c5:84:a8:9f:d1:38:24:be:8b:08:73:be:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:D1:A0:EB:54:04:4F:DC:F8:57:33:C0:F2:44:CF:D2:02:69:F0
X509v3 Authority Key Identifier:
keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.211.168.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:32:4b:82:8d:8c:02:5a:62:f1:b6:c0:0f:ad:14:41:21:f8:
75:22:fb:97:36:c1:ef:c5:f4:57:f4:74:a8:65:38:33:dc:8d:
7f:4e:7a:56:70:6d:a5:9d:c5:96:ae:82:32:35:92:b7:0c:19:
65:f4:52:8b:3f:ab:a0:36:dd:8b:c7:87:60:4d:0c:91:ef:d5:
74:13:89:34:07:01:75:08:19:59:9a:b1:f3:c6:0a:c5:37:e2:
6b:f3:f8:5f:42:9f:70:fd:e5:c9:bf:c1:e4:14:1a:75:4b:61:
59:10:32:f0:34:ef:09:88:01:ba:58:3d:e6:6b:33:ef:81:43:
22:01:47:d0:26:22:91:ff:72:a0:18:2a:15:3d:e5:b8:e8:a7:
5b:a8:98:83:fe:78:eb:56:aa:a7:e2:18:ce:27:7a:13:0d:7d:
41:32:01:de:f2:f2:27:b0:ba:33:65:32:97:90:12:a0:cf:27:
b8:c7:a3:45:04:2f:39:f5:cf:e5:91:91:e5:6d:dc:d5:5e:57:
30:ed:e2:79:a7:66:78:1b:2a:8a:7b:15:59:23:27:54:5e:c7:
7c:e2:d6:65:b1:41:66:98:89:3e:cf:2b:68:ee:61:d9:44:e5:
a9:6a:bb:b2:c2:20:07:6f:c9:6f:83:d3:1e:52:d3:80:65:0e:
92:5d:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:40 2026 by rpki-client