This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3135332e302f32342d3234203d3e203532323432.roa
File: 3139302e3138312e3135332e302f32342d3234203d3e203532323432.roa (raw, json)
Hash identifier: 9J3VRI1WhgyP9359NQdWF7LpSzM3qWxgLRQgQhpeXj8=
Subject key identifier: D4:0C:46:4B:7D:F4:F3:8A:BB:BD:BB:F7:8D:18:3A:7F:9E:6F:AA:BE
Certificate issuer: /CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
Certificate serial: 137F9B787468CCB1C38527BFC172A727BD9C0AD2
Authority key identifier: 16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3135332e302f32342d3234203d3e203532323432.roa
Signing time: Tue 06 Jan 2026 19:00:26 +0000
ROA not before: Tue 06 Jan 2026 18:55:26 +0000
ROA not after: Tue 05 Jan 2027 19:00:26 +0000
asID: 52242
IP address blocks: 190.181.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl
rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7f:9b:78:74:68:cc:b1:c3:85:27:bf:c1:72:a7:27:bd:9c:0a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
Validity
Not Before: Jan 6 18:55:26 2026 GMT
Not After : Jan 5 19:00:26 2027 GMT
Subject: CN=D40C464B7DF4F38ABBBDBBF78D183A7F9E6FAABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:99:42:9a:37:85:35:53:c6:f6:f4:b3:6c:
a8:e5:6d:03:a5:93:af:35:58:18:1b:50:a2:07:47:
7f:bc:24:1c:12:36:da:35:94:bd:09:08:3f:77:b0:
77:5b:2a:e1:07:f5:6d:03:ad:03:7e:c4:8b:5d:60:
67:25:44:20:3e:27:b8:ab:80:5f:d6:cc:de:5c:f1:
73:7c:2b:0f:d4:70:99:c8:d9:78:4b:4b:b2:d1:48:
28:30:d2:d9:7d:28:4a:e0:1c:d9:f8:00:f3:70:67:
d9:fe:22:2e:52:a7:2b:21:8c:f3:8e:b3:98:c7:a4:
a7:6f:91:14:c5:14:69:df:39:f8:18:e5:79:eb:20:
94:d9:51:86:0d:11:05:06:59:40:85:5c:ae:26:c6:
51:e0:ad:c0:a2:e9:f5:ab:e4:34:89:45:44:60:e4:
c0:8f:02:83:23:f3:5f:d2:2c:25:5d:95:98:93:cd:
d7:d2:8b:9d:2e:e1:93:40:17:c5:9a:e8:0d:10:5d:
c2:44:cb:77:82:5d:c8:88:22:e6:0d:69:f8:6b:10:
3b:f8:07:a6:5c:d5:fe:aa:97:36:d3:bd:60:c0:82:
3a:85:ec:72:ac:a0:71:b2:04:c5:c9:65:32:1b:1b:
54:1e:9d:0d:2e:1d:73:bf:f1:f8:cc:fa:dd:b3:c7:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0C:46:4B:7D:F4:F3:8A:BB:BD:BB:F7:8D:18:3A:7F:9E:6F:AA:BE
X509v3 Authority Key Identifier:
keyid:16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3135332e302f32342d3234203d3e203532323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.181.153.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c9:28:7b:62:41:d3:c9:99:dc:b2:06:52:a6:b7:a1:20:4f:
00:c6:2b:c5:d7:8d:c1:ed:71:b9:5e:93:be:0b:e1:fb:32:b3:
3c:33:df:e6:bd:81:3b:2e:35:cc:b0:7f:66:ee:1b:21:da:be:
58:6c:a8:35:b2:96:8e:0d:ad:3c:94:df:11:a4:93:8b:c1:c4:
53:d5:1e:ac:bd:32:92:eb:1d:97:f7:25:c8:ab:4b:72:e5:4d:
2e:89:45:63:fd:41:9a:0b:98:06:e9:2b:fb:3e:09:fc:bf:2f:
56:23:c4:0d:95:0b:b2:a5:a5:3c:5e:96:09:1e:8c:fd:d8:2f:
8d:e6:e8:ad:9a:ec:04:ef:b1:c0:61:d5:8e:2b:3f:b1:c8:cc:
47:9a:87:7d:86:bd:26:67:96:df:5d:82:7a:69:74:f4:03:14:
9a:e6:f9:8a:0f:b0:2c:38:23:00:59:e4:48:fc:1e:1b:32:4f:
36:e9:3a:0a:4b:b7:aa:b2:60:67:7b:c2:23:dc:d0:9c:11:ff:
7d:33:1b:71:56:78:eb:fc:64:d9:7e:40:1e:39:e2:0e:18:ed:
d2:e0:b6:99:ee:fb:91:89:08:f6:6d:26:e4:b6:f2:ad:99:ed:
c1:da:18:de:d9:11:b8:ca:24:ca:0f:2c:32:35:f8:3b:22:89:
61:9d:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:43 2026 by rpki-client