This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa
File: 3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa (raw, json)
Hash identifier: A4ZGUwwsD2buCYa4tD362Xv1Agy9vvodVLxv6iWdJ8Y=
Subject key identifier: D7:D6:32:F4:BE:F9:57:B0:4B:FC:54:E2:E0:10:12:55:39:EF:0C:80
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 600A49234D7FC2F83F19749A9501F1928CA43400
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa
Signing time: Tue 06 Jan 2026 19:14:18 +0000
ROA not before: Tue 06 Jan 2026 19:09:18 +0000
ROA not after: Tue 05 Jan 2027 19:14:18 +0000
asID: 19905
IP address blocks: 132.251.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0a:49:23:4d:7f:c2:f8:3f:19:74:9a:95:01:f1:92:8c:a4:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Jan 6 19:09:18 2026 GMT
Not After : Jan 5 19:14:18 2027 GMT
Subject: CN=D7D632F4BEF957B04BFC54E2E010125539EF0C80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:2f:0f:81:e9:3e:c8:6b:83:a6:25:cd:93:
ba:07:6f:23:55:1c:8a:20:0f:61:da:28:70:c8:e4:
ec:8d:1f:ee:19:0f:f5:6c:25:a3:01:07:af:00:9a:
4f:fa:cc:24:41:13:55:76:04:44:3e:95:4d:44:73:
6c:2a:48:99:70:23:98:05:d2:f4:4e:46:52:c9:b8:
a4:dc:3f:b6:7b:33:aa:6e:19:38:55:03:ce:67:bd:
15:7b:9d:34:af:92:0f:fa:69:c1:79:4a:27:54:d2:
48:25:3e:a1:a4:0e:8f:12:57:2c:08:f2:0d:7c:b0:
49:1f:81:24:c4:ce:a8:e5:87:0e:b8:a3:81:b9:3e:
62:2c:1c:82:41:68:98:db:00:ef:4d:48:66:84:a9:
68:c3:69:e6:72:b4:f3:4f:37:1b:49:73:0a:7b:60:
a9:8e:4b:82:cc:93:93:8a:4d:28:62:f2:08:f6:28:
8a:00:7a:8b:56:62:b0:68:c0:3d:de:84:3c:f2:19:
7b:09:78:48:08:80:5f:2b:be:d1:33:9a:f0:91:7f:
ba:3d:87:a8:ef:c0:5a:96:b2:f5:94:88:b6:b6:28:
72:ed:09:88:10:32:21:4e:6b:9b:5d:fa:c8:d9:14:
de:6c:7b:02:77:73:23:db:f4:7f:48:0d:a4:a7:e0:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D6:32:F4:BE:F9:57:B0:4B:FC:54:E2:E0:10:12:55:39:EF:0C:80
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.251.192.0/19
Signature Algorithm: sha256WithRSAEncryption
95:ec:9a:17:e5:da:4f:58:f6:f0:55:71:df:c9:22:04:00:d3:
0d:6d:bb:8e:6b:eb:54:c4:8d:0b:8d:22:33:fe:88:f8:71:2f:
7a:13:37:ac:25:fc:7b:6f:3f:2c:28:43:dc:10:4f:0e:5a:11:
79:51:0e:ea:f9:02:e8:ae:7a:ac:38:cb:5e:87:25:f5:bb:ff:
24:df:12:4e:41:1f:86:b5:b8:93:82:70:e7:83:ae:09:43:31:
9a:21:3d:43:be:50:e9:30:19:67:32:25:34:05:33:b3:e6:de:
9e:b9:f2:00:7a:65:74:1a:32:9e:9e:5a:ed:e2:47:44:09:33:
2d:88:60:ec:d1:a2:cd:4e:44:83:d3:62:a1:85:b6:6a:7e:20:
53:84:87:8d:72:46:87:7a:48:d5:3d:17:24:07:81:79:23:d7:
79:08:2b:94:78:77:05:74:ff:5b:a9:5a:a1:56:c8:7e:9e:9f:
4c:85:74:43:50:70:0a:cd:27:1f:33:b2:6d:02:d3:a3:c1:77:
8b:ef:3f:ea:d7:cc:59:af:ee:58:23:78:ab:c5:e8:bc:38:08:
d6:f1:78:a3:38:40:69:19:46:44:4a:07:48:51:aa:26:04:79:
a5:20:7c:4a:e7:e4:92:f4:11:69:9a:12:63:f9:5d:69:20:a9:
2a:49:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:35 2026 by rpki-client