This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133392e302f32342d3234203d3e203631343937.roa
File: 3133382e39392e3133392e302f32342d3234203d3e203631343937.roa (raw, json)
Hash identifier: I/KJd2Zdz4QYX3AqagWc5jDLSBu5YbvZCRePbr1en1Y=
Subject key identifier: 08:24:01:F6:4D:9E:8A:C2:8E:F1:B3:0B:C1:3A:96:85:16:B8:1F:1A
Certificate issuer: /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial: 3461B2EF9F5FECA64ACD769C465963289A749C8F
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133392e302f32342d3234203d3e203631343937.roa
Signing time: Tue 06 Jan 2026 20:56:16 +0000
ROA not before: Tue 06 Jan 2026 20:51:16 +0000
ROA not after: Tue 05 Jan 2027 20:56:16 +0000
asID: 61497
IP address blocks: 138.99.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl
rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:61:b2:ef:9f:5f:ec:a6:4a:cd:76:9c:46:59:63:28:9a:74:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Validity
Not Before: Jan 6 20:51:16 2026 GMT
Not After : Jan 5 20:56:16 2027 GMT
Subject: CN=082401F64D9E8AC28EF1B30BC13A968516B81F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:a8:f2:2e:0f:1a:56:f6:a3:42:5d:94:8c:
c3:a1:51:29:f6:20:73:8f:cd:47:c9:1d:16:f6:fd:
6b:ad:57:c9:e3:be:1f:f3:ab:aa:96:59:59:44:55:
5b:38:ec:31:90:1f:3c:8e:d0:b9:4f:ef:11:19:19:
ce:f4:a1:66:7b:02:e1:dd:3e:f6:ce:86:47:66:cf:
9b:c3:80:f4:48:7a:bf:85:5e:c8:8b:e8:b2:ce:c0:
e7:9c:27:a7:f0:f4:17:72:ca:6c:57:ba:a2:b4:c8:
e6:ec:b6:30:24:5c:4f:d3:9c:8a:c2:3b:89:6c:80:
2d:ca:f4:e7:2b:ca:d5:49:f7:54:95:9f:0f:e6:83:
a8:ee:39:cd:ca:7a:ac:3e:db:85:52:b0:78:e7:e9:
a3:12:ac:8a:31:9b:dd:4c:e6:77:78:da:f4:bf:88:
82:0f:ba:d7:ee:67:90:ae:70:31:a9:2f:d1:b7:d8:
0d:cf:2e:3e:17:31:d1:0b:b7:cf:11:84:94:1f:3f:
f5:d1:bb:49:86:f0:76:80:e4:99:8b:c9:78:26:b3:
d5:c1:8d:fb:af:1f:7f:46:52:55:cd:c9:1c:8a:2f:
ff:b7:3e:57:4c:6d:54:04:18:9e:3d:5b:91:33:9f:
43:85:64:8f:a2:b0:ce:73:b6:7f:6d:62:7c:8d:30:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:24:01:F6:4D:9E:8A:C2:8E:F1:B3:0B:C1:3A:96:85:16:B8:1F:1A
X509v3 Authority Key Identifier:
keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133392e302f32342d3234203d3e203631343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.139.0/24
Signature Algorithm: sha256WithRSAEncryption
03:31:2e:0b:b8:da:40:f7:54:31:26:f1:9a:cf:cf:12:c0:19:
a6:29:84:42:3a:3d:76:e5:7c:7e:cc:0a:3b:aa:90:98:a3:92:
ac:03:89:5a:5f:dc:ca:52:ae:f6:04:83:6b:d0:49:50:1b:cd:
27:63:ff:63:05:98:5a:85:19:46:56:24:ff:cf:a8:3f:e8:7a:
90:9b:6b:45:18:7a:da:f7:ec:8c:14:28:01:df:49:b8:12:d3:
8d:94:6f:5a:aa:21:12:fc:36:fe:d7:e5:40:8d:64:6a:f9:89:
c5:e3:2c:32:87:7e:7c:8e:dc:9b:8a:f0:8a:f9:ce:96:05:a0:
cb:38:76:54:00:06:73:2d:52:d4:3c:1b:d6:8b:37:1c:ce:d2:
5d:93:3f:47:9c:60:f4:91:84:c6:8b:1e:8b:c3:db:fa:e7:31:
ce:fd:64:d0:de:f2:f0:7e:60:5a:c5:d3:6a:5a:7c:53:2c:9e:
98:86:16:22:b6:90:44:9a:ea:bb:da:03:3e:6f:48:cd:db:45:
08:29:03:a0:e4:3c:b6:e9:ca:c4:d8:35:02:d8:eb:30:11:20:
51:39:80:e8:59:a1:4d:e0:f9:de:c0:8b:48:c7:d7:dd:5d:49:
2b:e2:bc:12:65:26:2e:97:6e:ee:d8:b1:61:22:e9:e2:c2:ad:
a1:23:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:06 2026 by rpki-client