This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
File: 3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa (raw, json)
Hash identifier: 0oK6u3qQTCYAUxIJ5H5Pyw/qzRID2Y+mC8Cf14poLx0=
Subject key identifier: CC:92:B0:03:81:AE:C6:C2:9F:94:24:AA:59:30:D4:8D:52:B9:A3:AB
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 0CABBEB538A3528BFFB0813E820294FCEF418EEF
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
Signing time: Tue 06 Jan 2026 19:14:12 +0000
ROA not before: Tue 06 Jan 2026 19:09:12 +0000
ROA not after: Tue 05 Jan 2027 19:14:12 +0000
asID: 19905
IP address blocks: 132.251.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ab:be:b5:38:a3:52:8b:ff:b0:81:3e:82:02:94:fc:ef:41:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Jan 6 19:09:12 2026 GMT
Not After : Jan 5 19:14:12 2027 GMT
Subject: CN=CC92B00381AEC6C29F9424AA5930D48D52B9A3AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:2b:93:35:57:d3:a3:ac:e5:cf:f4:9d:d1:
cf:87:32:54:84:b7:43:dd:ea:09:38:42:f7:0e:84:
64:ef:1a:59:39:45:7c:fa:cc:f8:9b:4a:41:1f:be:
c2:6a:2b:2d:e2:3f:3f:e5:38:a9:42:51:49:75:50:
97:3e:4a:15:79:4e:a2:b2:d3:1b:5f:d3:ee:6a:3b:
8c:f4:65:a8:04:51:d1:49:f7:09:cf:80:58:44:63:
dd:5b:87:a5:1d:4e:5b:ed:79:99:b2:50:fd:4f:9c:
e8:50:81:f8:28:95:be:23:ce:b2:ac:94:a1:48:94:
4f:da:40:8a:09:1b:b6:a8:2a:2a:0b:57:ae:5e:93:
51:ae:17:7d:6a:c8:73:07:35:bf:b5:3c:1d:3e:ed:
b6:e4:7c:c7:06:c4:f3:4d:82:90:01:45:a0:b2:ff:
c2:e8:51:e2:9e:13:1c:4c:fd:33:fd:56:d2:4d:29:
e0:76:e9:0e:57:83:f9:fb:6a:e7:e8:cf:5d:74:bb:
56:c4:e6:c6:ff:0e:dd:93:3e:36:15:c5:e6:65:5f:
8b:33:23:5c:dc:2b:ce:a5:d8:f2:22:a1:aa:f8:35:
29:d2:49:48:ea:f0:07:22:14:c4:75:cc:b5:e8:92:
c9:b5:15:6e:8c:30:32:b5:27:ca:4c:1e:96:9c:28:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:92:B0:03:81:AE:C6:C2:9F:94:24:AA:59:30:D4:8D:52:B9:A3:AB
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.251.128.0/18
Signature Algorithm: sha256WithRSAEncryption
61:a0:51:d7:55:2a:a9:a9:8c:55:8e:90:14:f7:44:bc:5a:a9:
5c:e5:ed:f8:02:89:5b:a6:72:68:09:df:ec:84:7f:fb:49:33:
27:eb:8d:6f:77:a0:c9:3e:ab:1d:2c:f0:09:5a:5d:98:a4:73:
21:b4:ba:5b:4e:94:64:bf:af:e1:df:02:d1:5a:38:c1:40:2d:
9a:3a:59:37:fe:ae:7c:95:48:72:81:ac:7d:b5:c4:28:5d:44:
18:f0:b0:a0:58:d4:0f:9f:8c:15:1a:e0:09:ab:ac:f2:20:37:
85:c1:9a:dd:66:f4:8b:0d:09:87:67:f0:7f:e2:e7:af:f6:78:
f1:6a:04:98:ff:f2:4c:c0:92:5c:ca:12:f0:44:c9:d1:89:d5:
5d:7f:31:54:b0:2c:dd:50:66:64:e0:28:27:c2:2b:e9:a9:64:
71:0e:6b:1c:46:da:5e:59:64:f2:da:ac:dd:85:62:76:f5:51:
cc:4a:dc:10:60:6b:40:9a:f6:e3:4f:9b:d3:3e:86:9e:fc:d7:
03:9b:f3:fb:5e:c3:42:10:0f:3e:2a:49:bb:77:d6:19:45:03:
11:71:dd:dc:6c:e9:d2:a8:e0:d4:fd:f2:f2:b0:3b:c5:65:d4:
08:15:91:13:1f:c1:7f:91:70:ac:e8:19:15:94:84:0c:11:eb:
35:00:22:ff
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDKu+tTijUov/sIE+ggKU/O9Bju8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNjAxMDYxOTA5MTJaFw0yNzAxMDUxOTE0MTJaMDMxMTAvBgNV
BAMTKENDOTJCMDAzODFBRUM2QzI5Rjk0MjRBQTU5MzBENDhENTJCOUEzQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrCuTNVfTo6zlz/Sd0c+HMlSE
t0Pd6gk4QvcOhGTvGlk5RXz6zPibSkEfvsJqKy3iPz/lOKlCUUl1UJc+ShV5TqKy
0xtf0+5qO4z0ZagEUdFJ9wnPgFhEY91bh6UdTlvteZmyUP1PnOhQgfgolb4jzrKs
lKFIlE/aQIoJG7aoKioLV65ek1GuF31qyHMHNb+1PB0+7bbkfMcGxPNNgpABRaCy
/8LoUeKeExxM/TP9VtJNKeB26Q5Xg/n7aufoz110u1bE5sb/Dt2TPjYVxeZlX4sz
I1zcK86l2PIioar4NSnSSUjq8AciFMR1zLXoksm1FW6MMDK1J8pMHpacKEFnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzJKwA4GuxsKflCSqWTDUjVK5o6swHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMxMzMzMjJlMzIzNTMxMmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM5MzkzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGhPuA
MA0GCSqGSIb3DQEBCwUAA4IBAQBhoFHXVSqpqYxVjpAU90S8Wqlc5e34AolbpnJo
Cd/shH/7STMn641vd6DJPqsdLPAJWl2YpHMhtLpbTpRkv6/h3wLRWjjBQC2aOlk3
/q58lUhygax9tcQoXUQY8LCgWNQPn4wVGuAJq6zyIDeFwZrdZvSLDQmHZ/B/4uev
9njxagSY//JMwJJcyhLwRMnRidVdfzFUsCzdUGZk4CgnwivpqWRxDmscRtpeWWTy
2qzdhWJ29VHMStwQYGtAmvbjT5vTPoae/NcDm/P7XsNCEA8+Kkm7d9YZRQMRcd3c
bOnSqODU/fLysDvFZdQIFZETH8F/kXCs6BkVlIQMEes1ACL/
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:33 2026 by rpki-client