This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/3139312e39372e38382e302f32312d3234203d3e20323633323132.roa
File: 3139312e39372e38382e302f32312d3234203d3e20323633323132.roa (raw, json)
Hash identifier: S9F2J8/4BzTSKn7EfAuk9gzRiZ3KehHylaiIjjNQDNE=
Subject key identifier: 2C:53:93:AF:B0:12:52:C1:12:15:79:6E:19:FA:30:84:9F:57:BE:04
Certificate issuer: /CN=AFBD0215C0EE827E1DDF72219656649845EB2918
Certificate serial: 66358D47434B68D0EDC47A038471E6E326601955
Authority key identifier: AF:BD:02:15:C0:EE:82:7E:1D:DF:72:21:96:56:64:98:45:EB:29:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/3139312e39372e38382e302f32312d3234203d3e20323633323132.roa
Signing time: Tue 06 Jan 2026 19:43:28 +0000
ROA not before: Tue 06 Jan 2026 19:38:28 +0000
ROA not after: Tue 05 Jan 2027 19:43:28 +0000
asID: 263212
IP address blocks: 191.97.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.crl
rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 11:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:35:8d:47:43:4b:68:d0:ed:c4:7a:03:84:71:e6:e3:26:60:19:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFBD0215C0EE827E1DDF72219656649845EB2918
Validity
Not Before: Jan 6 19:38:28 2026 GMT
Not After : Jan 5 19:43:28 2027 GMT
Subject: CN=2C5393AFB01252C11215796E19FA30849F57BE04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:ce:d0:18:1c:e2:df:8b:3e:9d:1f:03:b4:
8f:9a:9d:ef:c9:4f:f5:db:0e:5f:7a:d2:db:ea:5e:
6e:2f:04:1f:50:86:f5:f7:93:7e:38:14:ad:b4:3b:
e1:a4:90:3e:3d:32:23:c8:fb:8c:9f:02:7c:6b:4c:
fc:47:a2:2c:23:4a:68:5b:06:e9:ac:40:64:3d:38:
58:f9:93:ac:56:ed:d9:fe:b7:a1:c1:6d:69:04:08:
39:f3:e7:25:03:5f:e9:9d:76:ee:65:74:c7:43:b5:
85:2c:b1:d7:c1:95:68:12:55:da:93:de:86:e5:f5:
59:83:a6:04:8f:34:27:d1:00:88:20:bf:31:6a:a8:
ad:02:de:9a:99:0c:e9:ca:8e:6c:74:3b:8e:67:4f:
a1:c8:c7:60:78:d0:a6:38:81:ce:6d:a7:84:45:ff:
fe:af:b1:73:7e:27:dc:28:7b:a2:a7:af:59:10:6d:
0f:55:b8:d1:3c:e0:a9:35:0b:43:1a:96:6b:35:55:
b5:8e:be:9e:56:64:41:73:6d:dd:9a:6b:48:72:1b:
de:c7:a9:eb:ad:45:01:b5:bc:77:d4:f2:95:7a:6c:
e4:38:21:11:f4:84:3e:93:30:32:e8:84:81:b9:b8:
51:59:85:4a:0b:61:ae:5e:38:3b:83:c6:8a:8a:27:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:53:93:AF:B0:12:52:C1:12:15:79:6E:19:FA:30:84:9F:57:BE:04
X509v3 Authority Key Identifier:
keyid:AF:BD:02:15:C0:EE:82:7E:1D:DF:72:21:96:56:64:98:45:EB:29:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/3139312e39372e38382e302f32312d3234203d3e20323633323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.88.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:01:4d:52:c6:72:f0:2c:71:8a:cd:59:19:92:6f:84:75:56:
9f:be:b4:7c:79:c2:ec:6d:c7:39:e0:13:5a:7c:5d:26:2f:42:
de:c4:da:16:97:b2:a6:e4:12:a4:b8:d0:a0:9a:af:18:35:78:
d5:07:05:04:a8:99:09:d6:ed:b7:cd:e2:f0:30:10:73:81:71:
6e:45:b5:f6:c1:1d:ab:1e:81:ba:b3:c2:cf:be:62:20:bb:6d:
a6:00:11:ff:20:a0:05:1e:40:5f:64:ee:fa:e7:c2:93:00:44:
c9:17:2b:ac:61:c9:43:2e:83:3d:95:4c:84:c9:50:49:93:45:
c3:ca:1b:1e:03:23:e6:26:80:91:c0:30:45:4a:67:46:ba:b4:
fc:34:8e:ac:49:d8:fa:5c:cc:f1:26:dd:7d:5c:9d:ac:a0:ef:
3e:8f:a2:c7:b9:93:c5:c9:34:73:d9:05:f1:82:1f:d0:d9:0e:
d3:5a:45:cd:ed:08:5d:f7:7c:e6:a4:f1:e4:4a:49:36:c3:d8:
60:2d:38:b6:1d:23:f1:e8:6b:c3:8e:32:ef:ef:3c:72:38:80:
02:7c:c6:90:e6:ed:8e:0e:cb:32:1c:e5:f1:46:95:d3:7c:43:
b4:a7:4f:63:d5:52:63:ee:74:3c:6c:fe:af:46:72:b8:a1:81:
12:28:65:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:06 2026 by rpki-client