This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa
File: 3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa (raw, json)
Hash identifier: B0ZkBZm5INQiSxSRrC7t6lysGfOWljvMGW8pQHHec1I=
Subject key identifier: 90:B5:C8:12:51:16:C8:3C:86:DF:F7:B1:F4:FC:79:6D:A4:5B:56:A0
Certificate issuer: /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial: 44389AA74D0BDB75EA09D149D0E50592C129DC37
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa
Signing time: Tue 06 Jan 2026 19:20:23 +0000
ROA not before: Tue 06 Jan 2026 19:15:23 +0000
ROA not after: Tue 05 Jan 2027 19:20:23 +0000
asID: 27818
IP address blocks: 131.161.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 10:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:38:9a:a7:4d:0b:db:75:ea:09:d1:49:d0:e5:05:92:c1:29:dc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Validity
Not Before: Jan 6 19:15:23 2026 GMT
Not After : Jan 5 19:20:23 2027 GMT
Subject: CN=90B5C8125116C83C86DFF7B1F4FC796DA45B56A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:a3:ea:58:0a:01:12:b2:f3:56:78:41:f1:
b4:66:a7:65:f1:2e:dc:3a:51:e7:fb:1a:24:3b:4f:
e1:74:80:df:00:5a:db:82:a9:f3:bb:a1:3f:b9:32:
bb:52:75:ab:85:fc:01:2c:9c:84:82:bb:b4:fb:2f:
b3:cd:3f:42:b1:9b:88:22:03:2a:f9:77:2e:f4:01:
e7:14:a5:ce:87:57:37:58:60:67:75:e4:6b:07:76:
74:f4:7b:9e:7a:bc:07:2d:c5:2b:7f:67:ad:ab:39:
54:12:5a:40:c0:8e:6f:cc:35:db:c7:35:57:a4:f0:
54:19:1a:6f:9b:43:57:16:98:00:99:a3:49:4b:80:
6f:0d:be:ed:0f:ae:8c:a1:d5:5e:2f:55:21:74:40:
7e:6c:26:72:fe:45:2f:3a:c7:e2:cc:1b:ea:4f:04:
4b:54:c8:eb:77:40:2a:6c:34:76:56:cd:74:33:ad:
97:8b:94:53:0d:3c:38:02:6f:a5:cb:5b:5d:55:c8:
9e:4d:a8:48:8f:b0:57:6b:66:b5:75:fa:b8:75:98:
a8:d3:55:16:ac:e7:38:30:ea:fb:18:a5:4a:91:71:
bb:15:14:99:11:7b:c1:14:11:68:92:94:7a:c0:30:
55:76:83:aa:94:7e:86:64:ec:2b:d6:b9:f1:00:13:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B5:C8:12:51:16:C8:3C:86:DF:F7:B1:F4:FC:79:6D:A4:5B:56:A0
X509v3 Authority Key Identifier:
keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:73:cf:1b:81:3c:4c:c1:87:8d:fd:4d:e5:2e:95:23:00:f9:
22:45:2d:1a:15:b4:3d:43:2d:7c:28:8d:0f:24:23:6a:33:dd:
3e:fc:3a:b7:d8:1c:aa:1e:81:07:4a:ad:f7:85:be:ae:cd:cb:
d7:9d:b1:be:04:6a:8d:f8:ae:98:79:81:bc:cd:59:b1:af:60:
45:0a:72:89:9d:fa:82:9c:62:b7:ac:7a:9c:7d:66:63:92:e7:
67:f3:b2:ea:b2:4f:34:db:29:29:2a:ed:4c:5c:80:93:51:97:
dc:f9:89:a9:5a:80:61:a8:8d:13:51:1c:b6:cd:37:40:9a:21:
7f:14:46:96:4c:27:08:7e:44:f9:d0:7e:17:08:2b:4c:88:d0:
a5:45:33:74:4b:81:e0:b2:59:f6:9a:34:d6:dd:18:88:17:cf:
6a:62:be:dc:3a:9f:31:7f:ff:7e:e5:de:33:60:02:00:48:b8:
41:cf:42:45:ff:d7:0a:05:49:05:e4:d3:2f:3e:fa:70:b2:29:
aa:c4:8a:c6:d6:80:6f:3f:f6:a0:d2:21:ea:29:39:7c:3f:41:
c4:4e:51:ff:7c:cc:c1:ad:2e:00:8d:d7:8c:e4:7e:95:c3:10:
96:8a:a7:04:c9:01:50:07:c2:3b:eb:b4:30:e7:64:d1:58:87:
d8:00:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:27 2026 by rpki-client