This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C627A8492D0F6162F2D56DF55C5632C720E787C5C6BC995A761DBC5C9000903/0/3133382e3131382e3230382e302f32322d3234203d3e203532333233.roa
File: 3133382e3131382e3230382e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier: c9b9lk4Xu3zXGLCYK6y2DQxch9zW6OJsy5Ow+s8oZTw=
Subject key identifier: DA:2A:19:2B:4A:26:22:5A:F2:C1:F5:0B:13:9F:80:4A:FD:DE:C7:91
Certificate issuer: /CN=76A0230D67817D92BA5DB107F27A059EBFFAF282
Certificate serial: 1021E2FDF14AF6FD6A7A52054164A622297C873A
Authority key identifier: 76:A0:23:0D:67:81:7D:92:BA:5D:B1:07:F2:7A:05:9E:BF:FA:F2:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76A0230D67817D92BA5DB107F27A059EBFFAF282.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8C627A8492D0F6162F2D56DF55C5632C720E787C5C6BC995A761DBC5C9000903/0/3133382e3131382e3230382e302f32322d3234203d3e203532333233.roa
Signing time: Tue 06 Jan 2026 18:58:51 +0000
ROA not before: Tue 06 Jan 2026 18:53:51 +0000
ROA not after: Tue 05 Jan 2027 18:58:51 +0000
asID: 52323
IP address blocks: 138.118.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8C627A8492D0F6162F2D56DF55C5632C720E787C5C6BC995A761DBC5C9000903/0/76A0230D67817D92BA5DB107F27A059EBFFAF282.crl
rsync://repository.lacnic.net/rpki/lacnic/8C627A8492D0F6162F2D56DF55C5632C720E787C5C6BC995A761DBC5C9000903/0/76A0230D67817D92BA5DB107F27A059EBFFAF282.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76A0230D67817D92BA5DB107F27A059EBFFAF282.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:21:e2:fd:f1:4a:f6:fd:6a:7a:52:05:41:64:a6:22:29:7c:87:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76A0230D67817D92BA5DB107F27A059EBFFAF282
Validity
Not Before: Jan 6 18:53:51 2026 GMT
Not After : Jan 5 18:58:51 2027 GMT
Subject: CN=DA2A192B4A26225AF2C1F50B139F804AFDDEC791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:68:f7:72:22:f0:7b:5d:28:c4:f2:d9:50:
85:60:ee:18:f4:f3:c4:c8:49:66:46:4d:3a:cb:92:
00:1c:8d:78:36:d4:ed:a1:6c:a6:58:52:cf:22:bd:
91:85:15:db:b3:0b:ac:7c:51:cd:99:c9:70:20:d6:
6f:ca:b7:5f:a9:60:d2:f4:ab:13:f6:b1:64:f8:3a:
bc:15:49:2d:47:d0:a1:19:ca:b2:0a:58:69:d1:72:
11:fb:43:ed:9a:07:3c:80:92:a0:eb:1d:e3:7b:59:
09:47:4e:88:55:56:47:4d:7b:5f:43:df:6e:6e:48:
24:22:cf:35:a3:69:49:ab:39:9a:1f:49:8f:7e:75:
8e:70:16:96:01:24:22:28:66:62:f3:f8:54:cb:0c:
79:41:10:d5:ab:1a:0c:b1:11:26:59:61:bd:73:95:
c5:43:b0:2b:2a:ed:b7:ae:e5:f9:78:95:e2:f3:21:
1e:3b:da:e0:63:c6:74:d6:3a:7f:8b:77:b3:c4:c1:
80:b7:a5:56:c0:7a:8f:b0:c9:9e:73:e5:a3:cb:c9:
d2:49:fc:e0:6f:ec:5e:cf:f0:26:b7:0b:f9:11:23:
1e:61:03:8a:db:39:81:9e:25:79:83:03:b6:2f:4c:
78:13:ae:a8:ca:ec:97:14:a7:72:b3:c9:fb:dd:64:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2A:19:2B:4A:26:22:5A:F2:C1:F5:0B:13:9F:80:4A:FD:DE:C7:91
X509v3 Authority Key Identifier:
keyid:76:A0:23:0D:67:81:7D:92:BA:5D:B1:07:F2:7A:05:9E:BF:FA:F2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8C627A8492D0F6162F2D56DF55C5632C720E787C5C6BC995A761DBC5C9000903/0/76A0230D67817D92BA5DB107F27A059EBFFAF282.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76A0230D67817D92BA5DB107F27A059EBFFAF282.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C627A8492D0F6162F2D56DF55C5632C720E787C5C6BC995A761DBC5C9000903/0/3133382e3131382e3230382e302f32322d3234203d3e203532333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.208.0/22
Signature Algorithm: sha256WithRSAEncryption
71:46:9f:64:f2:2f:2e:1d:de:01:b7:a1:df:63:43:9b:bb:65:
97:44:b0:63:c4:29:99:29:7c:f5:fb:e1:b9:35:a2:72:f1:1b:
32:3d:45:28:b5:0b:d8:b4:6b:90:bb:38:1f:d6:ad:88:3a:26:
2f:ed:8a:6f:3b:b3:f8:f6:4d:7a:1d:a8:63:65:19:cf:b0:37:
9c:75:e8:6f:9b:7d:24:fa:d4:4b:cd:d8:9b:7e:cc:f0:6a:83:
88:bb:3c:a1:6f:49:35:2f:17:dd:81:6d:81:77:0d:50:43:bd:
23:2e:11:b1:e7:fe:3a:dc:f9:1b:d7:34:8b:69:b5:f3:20:c9:
d3:47:7f:e0:f4:13:e8:6b:ff:79:a2:ee:46:8e:89:af:b5:bf:
d5:12:ad:ef:c4:00:34:9f:46:51:f4:29:b8:eb:22:e4:e8:94:
cd:ab:80:f5:fa:06:da:54:46:bd:b2:95:c3:67:6d:90:84:22:
9b:fb:9d:36:f0:32:e1:37:f3:6d:7f:83:9c:51:4d:3f:e2:55:
61:a7:ba:75:c9:4f:32:4e:49:ee:a2:15:eb:3d:c8:87:b6:a5:
1a:30:0f:8d:76:c7:8b:d8:3e:3f:20:74:b2:2a:61:c7:21:81:
6e:fa:4c:9d:37:6e:35:6c:5d:b8:fc:41:b3:0e:43:91:da:6c:
83:7e:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:06 2026 by rpki-client