This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa
File: 3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier: G0SLoM8kw3cK+veabbzaV8cVnyzsnzNgLbfBhjEKJiY=
Subject key identifier: A3:92:07:CA:F2:99:67:DD:AD:16:7E:2A:66:FC:9A:FC:AB:4B:33:1E
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 3613CD880EDECC87DBE02B6C9EC8DB4722430E1E
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa
Signing time: Tue 06 Jan 2026 19:14:18 +0000
ROA not before: Tue 06 Jan 2026 19:09:18 +0000
ROA not after: Tue 05 Jan 2027 19:14:18 +0000
asID: 19905
IP address blocks: 201.131.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:13:cd:88:0e:de:cc:87:db:e0:2b:6c:9e:c8:db:47:22:43:0e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Jan 6 19:09:18 2026 GMT
Not After : Jan 5 19:14:18 2027 GMT
Subject: CN=A39207CAF29967DDAD167E2A66FC9AFCAB4B331E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:fa:b2:48:05:34:d1:8e:d9:38:6b:db:51:
ae:32:02:d6:ce:d7:a8:64:86:da:48:ec:cd:a5:2d:
5a:39:1c:c8:d2:52:4f:69:60:44:87:36:a7:9e:94:
5d:d3:ec:7b:bc:6f:55:7a:34:85:c6:48:c2:e7:26:
67:e6:01:61:23:43:36:51:eb:1f:21:f4:38:aa:63:
2c:55:95:4b:9b:0c:26:bc:e2:aa:2e:47:cc:0b:7a:
49:49:4d:d1:f5:e3:63:44:35:ab:98:a7:3e:da:18:
6b:21:01:af:80:bb:d2:82:bc:3f:3c:a0:95:83:60:
cd:46:43:60:b8:80:e9:45:da:98:e2:f2:4d:1b:7d:
a6:b5:58:99:a4:ba:f5:9b:9f:d3:dd:e5:b1:54:05:
ec:df:f8:b1:18:51:63:bc:4b:e7:18:ca:df:2d:b1:
cb:e6:ff:c0:be:54:4b:7c:07:7b:20:cc:90:84:9e:
06:25:42:e4:e3:cc:f3:8e:55:07:56:cb:f4:c5:c5:
ab:a0:9a:3a:47:91:56:ab:21:85:c2:58:92:2f:c2:
7b:43:71:cf:d7:5a:6e:cb:f4:c0:ba:cc:a9:21:b6:
cb:8b:3e:f7:f8:bf:f4:e7:2a:50:55:90:46:5f:f9:
d9:c8:08:fc:f0:c0:8d:aa:e9:9d:57:90:84:6e:d1:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:07:CA:F2:99:67:DD:AD:16:7E:2A:66:FC:9A:FC:AB:4B:33:1E
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.121.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7a:7f:57:7f:65:50:1b:ca:52:ea:7a:b0:55:5b:6a:81:6a:
5a:f4:bb:69:a4:df:ac:aa:18:0e:9f:53:8e:c8:f2:0d:2a:d9:
8a:00:0c:11:18:a9:1f:9d:fd:fa:a1:d4:b7:81:ed:ee:ea:ad:
fa:84:c7:7a:dd:ec:27:68:97:58:2f:d7:83:f2:6e:f3:90:7d:
6a:5b:80:61:be:28:2e:d7:72:ae:e4:d0:a1:dc:05:49:6e:ae:
fd:7c:e7:46:fc:39:63:95:8d:55:28:26:a7:c6:e7:0b:50:73:
4d:e0:d0:a4:4a:41:09:67:32:80:05:7c:12:4d:06:44:2c:88:
4b:38:98:66:80:ac:ce:88:dd:af:3d:59:45:8b:de:bc:0a:a6:
b1:99:31:8e:0d:ba:22:63:a7:6c:3f:a2:81:3b:98:18:87:1a:
ff:d9:1e:ee:a7:95:8d:93:49:0d:a8:69:94:0b:10:82:a9:a4:
e3:86:ad:3d:5c:54:bd:d6:09:c0:76:d6:fa:80:df:39:e5:27:
39:3a:f0:5b:ec:9a:b3:0a:8e:26:4c:1c:bb:9e:4b:b5:99:f8:
d5:8c:ff:e5:12:2d:c3:95:a5:f7:ff:a6:55:6a:a5:62:4c:f6:
44:02:dc:dc:eb:0a:bf:26:27:b9:4a:97:f7:5a:98:81:a8:c9:
bf:f3:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:55 2026 by rpki-client