This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3133382e3231392e342e302f32322d3232203d3e203134323332.roa
File: 3133382e3231392e342e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier: 8zNB3ITjadM0liXJ9SMBmZmkARLwMEsv3x1vWUEUfg4=
Subject key identifier: ED:AE:CF:09:76:9D:41:DB:6D:AB:51:F2:92:47:A3:23:7C:CF:EF:F6
Certificate issuer: /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial: 151363E776645F3F6966AFA435191214FEBDDEBE
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3133382e3231392e342e302f32322d3232203d3e203134323332.roa
Signing time: Tue 06 Jan 2026 19:24:31 +0000
ROA not before: Tue 06 Jan 2026 19:19:31 +0000
ROA not after: Tue 05 Jan 2027 19:24:31 +0000
asID: 14232
IP address blocks: 138.219.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:13:63:e7:76:64:5f:3f:69:66:af:a4:35:19:12:14:fe:bd:de:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Validity
Not Before: Jan 6 19:19:31 2026 GMT
Not After : Jan 5 19:24:31 2027 GMT
Subject: CN=EDAECF09769D41DB6DAB51F29247A3237CCFEFF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:ce:9e:28:65:47:c4:ca:1f:f2:9f:fb:57:
bf:ef:e8:95:c5:3a:41:7b:4a:b0:2b:81:c3:9c:f4:
2b:c1:b9:f5:fd:59:06:d9:e3:66:21:eb:bd:80:76:
03:a6:6b:d4:cd:ff:bc:76:b1:fc:67:ef:30:f4:5f:
59:2a:f2:5d:50:42:29:a3:98:81:61:a2:55:62:0e:
fe:46:2c:60:cd:43:a8:45:fb:d4:b3:1d:23:8a:05:
3d:9a:18:97:20:96:9a:53:de:a8:dd:a7:e1:e3:0a:
54:d7:c7:59:b6:64:27:99:12:3f:d7:7f:a7:9d:48:
29:1c:83:25:b2:44:f7:f2:4b:27:21:0f:91:ec:be:
03:39:eb:63:47:df:f6:bb:7b:e1:ce:eb:ba:89:2b:
5d:ef:3d:77:3e:15:c6:55:ef:a2:fa:67:a9:c7:27:
f3:23:a0:28:6a:f9:cb:af:c1:e3:dc:5f:10:74:5c:
a8:02:a9:99:ac:5d:56:da:40:bd:48:b4:11:f1:5c:
6e:15:58:21:67:bb:5e:f0:bf:ea:44:85:61:34:2d:
91:ab:c4:e0:41:bd:3b:29:c8:b9:4b:6e:26:72:44:
57:6d:1e:37:76:16:cb:86:1a:19:93:5b:52:34:06:
9f:45:16:8d:4b:b1:36:6b:08:85:2b:cb:d6:0a:0a:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:CF:09:76:9D:41:DB:6D:AB:51:F2:92:47:A3:23:7C:CF:EF:F6
X509v3 Authority Key Identifier:
keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3133382e3231392e342e302f32322d3232203d3e203134323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.4.0/22
Signature Algorithm: sha256WithRSAEncryption
80:f1:33:33:1b:44:14:a8:1b:ca:80:e9:b0:47:fc:6e:b5:60:
fc:14:44:03:22:b0:fc:c6:78:01:3d:cf:05:5d:ea:d4:59:ce:
fe:4f:c0:8b:9a:65:5c:fe:ab:08:f4:9f:0c:00:07:5c:52:b7:
c3:dc:3c:49:e3:9e:69:4a:3a:20:04:f3:31:d4:1c:97:44:f9:
e0:a2:0b:4d:52:08:20:41:22:95:b0:49:0e:ba:8a:ba:52:6f:
ec:e1:ae:3f:59:84:66:42:fa:ba:72:73:66:46:fc:91:b4:4b:
26:2e:82:6a:e1:38:0a:4d:36:ac:ff:e3:c9:6b:b7:f4:cf:4a:
71:5a:31:f7:cb:9a:be:aa:78:70:81:38:1b:36:4d:47:d4:22:
52:58:15:b7:83:26:35:36:53:69:15:c2:8c:79:c5:fc:7e:8b:
b3:ce:4a:9f:b5:8a:2c:2c:22:88:87:1a:09:ba:6e:95:aa:fa:
78:f5:61:ae:19:ef:37:67:f4:2f:39:47:3f:3e:2b:5c:0b:06:
cc:dc:1c:0b:d6:b3:11:e0:da:f6:8c:fb:67:e5:df:95:8a:29:
da:45:1f:d0:fe:d3:26:06:f1:de:b6:7e:f0:29:0e:97:33:6a:
25:34:2f:b1:4a:79:9d:aa:41:cc:73:d2:1e:e7:bd:03:58:45:
16:ef:0a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:26 2026 by rpki-client