This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e39362e302f32312d3232203d3e203139313830.roa
File: 3138362e3136302e39362e302f32312d3232203d3e203139313830.roa (raw, json)
Hash identifier: CfY+S3f2rcPyOiwmZKoQnrMNAL0/2c/7zgJKwEXw6Ec=
Subject key identifier: 24:F5:1B:C8:D3:46:49:73:91:A0:D3:B3:D2:B6:FB:C2:FC:04:19:CC
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 454DB23B598CACF2637F1EB0D51A670549EF8E98
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e39362e302f32312d3232203d3e203139313830.roa
Signing time: Tue 06 Jan 2026 19:14:11 +0000
ROA not before: Tue 06 Jan 2026 19:09:11 +0000
ROA not after: Tue 05 Jan 2027 19:14:11 +0000
asID: 19180
IP address blocks: 186.160.96.0/21 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4d:b2:3b:59:8c:ac:f2:63:7f:1e:b0:d5:1a:67:05:49:ef:8e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Jan 6 19:09:11 2026 GMT
Not After : Jan 5 19:14:11 2027 GMT
Subject: CN=24F51BC8D346497391A0D3B3D2B6FBC2FC0419CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:06:67:5e:ca:77:be:48:43:92:fb:ec:36:
cc:29:d8:ea:79:12:9c:57:c7:31:f3:5a:9a:2b:0d:
5c:c7:19:e0:c6:de:a7:ed:b1:93:df:62:51:6e:72:
e5:44:82:10:25:b6:ad:f7:c6:c9:42:2f:13:0a:db:
15:ff:e3:68:07:1a:cd:32:73:f9:f8:88:33:5e:74:
9e:60:a1:bd:8a:38:29:f6:4a:5e:25:8d:51:d7:a7:
09:e0:cb:05:10:10:95:ab:93:d7:95:64:7a:09:5c:
9b:83:99:b1:da:64:a1:6f:bd:2b:1f:07:07:9b:a5:
b3:d5:08:7a:ee:e7:e8:14:87:2c:56:29:c5:cf:d4:
e2:e7:ce:dc:ac:e6:04:32:70:63:ce:d1:8f:ce:3d:
71:72:8a:5c:14:01:3d:31:2b:75:b1:fe:73:85:94:
22:5e:39:06:43:71:a3:b5:83:0b:bc:28:bf:83:92:
ce:51:30:6b:15:08:49:cc:4c:44:b4:7b:07:cd:ea:
9f:ea:0d:4e:f3:2d:a7:d1:22:a2:42:c3:9e:98:6a:
de:fb:7d:1f:03:dd:f9:57:21:0f:af:4b:09:27:e9:
81:cb:68:fe:60:9a:c8:1d:a5:bd:9e:3b:c8:69:38:
ec:c7:6f:49:29:1f:31:54:1e:76:2e:f8:1f:42:a4:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:1B:C8:D3:46:49:73:91:A0:D3:B3:D2:B6:FB:C2:FC:04:19:CC
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e39362e302f32312d3232203d3e203139313830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.160.96.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:ef:ac:3f:0b:aa:67:4e:3a:a6:07:81:91:9e:74:89:3b:60:
6c:6f:8f:a8:ce:50:ff:77:cd:48:a3:99:b0:5c:c4:b2:4f:02:
3d:cf:56:dc:a5:90:49:f0:82:45:90:1f:da:a8:1d:3f:47:2d:
e0:2e:bf:ca:21:28:47:ed:e9:30:d9:38:db:96:e8:0b:45:65:
3a:1a:93:7d:d3:4b:0f:8c:06:ea:f5:cd:52:d5:94:ec:2f:24:
62:d1:1b:18:f0:e7:96:d5:33:00:c7:e0:48:68:1e:0e:2b:1b:
d2:d3:3e:13:f3:74:59:85:39:b6:5c:7f:2e:45:63:9b:b4:08:
33:d9:0b:ff:de:b4:a5:6b:00:6d:b7:7e:63:6d:7c:61:5b:f1:
f3:c2:95:80:a8:f5:fe:74:2d:b4:d0:1f:ce:b4:e4:ad:2b:bc:
a6:db:57:c2:7e:28:44:8d:67:a3:83:06:d0:c7:81:52:76:da:
32:a7:68:1c:44:64:7e:be:40:79:af:6f:49:42:be:8b:a8:31:
0e:17:da:d8:ef:9d:2c:50:d9:c8:28:34:49:ff:bb:3e:6c:92:
b2:fe:fd:2e:b0:1c:c7:c8:9d:84:4e:df:b5:35:27:0a:69:2d:
68:2f:44:f9:44:db:0f:52:37:02:08:39:ef:2a:4c:78:1e:a0:
c0:f9:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:28 2026 by rpki-client