This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/3136312e302e37322e302f32312d3234203d3e203532343635.roa
File: 3136312e302e37322e302f32312d3234203d3e203532343635.roa (raw, json)
Hash identifier: Nv4fvi8rbBsdfB5IgahvBNQaJQpfoiCQfbZbIbdgS/c=
Subject key identifier: 41:41:97:8B:B8:38:F4:67:30:A3:EC:91:20:8A:5C:89:28:1E:E1:03
Certificate issuer: /CN=653BCCC8DAB0459A5D23BCB1437938AC615D5023
Certificate serial: 51DFD7EC7176E5BEB8EF81CC9CB1BFD2429CF5E8
Authority key identifier: 65:3B:CC:C8:DA:B0:45:9A:5D:23:BC:B1:43:79:38:AC:61:5D:50:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/3136312e302e37322e302f32312d3234203d3e203532343635.roa
Signing time: Tue 06 Jan 2026 20:51:43 +0000
ROA not before: Tue 06 Jan 2026 20:46:43 +0000
ROA not after: Tue 05 Jan 2027 20:51:43 +0000
asID: 52465
IP address blocks: 161.0.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.crl
rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:df:d7:ec:71:76:e5:be:b8:ef:81:cc:9c:b1:bf:d2:42:9c:f5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653BCCC8DAB0459A5D23BCB1437938AC615D5023
Validity
Not Before: Jan 6 20:46:43 2026 GMT
Not After : Jan 5 20:51:43 2027 GMT
Subject: CN=4141978BB838F46730A3EC91208A5C89281EE103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:50:c3:fa:1b:05:57:7b:ab:94:69:e6:75:
ed:d6:8d:48:a6:61:81:21:b1:70:11:a2:e2:33:4d:
fa:bc:1a:61:ce:82:a0:24:c8:38:59:8e:98:eb:10:
fb:00:71:73:58:7d:45:99:d8:f5:2e:1e:50:d1:d9:
91:b9:a2:8a:e3:0b:fc:6f:d2:6a:0d:3d:f4:c1:fe:
45:e2:dc:b1:ac:26:76:a9:19:1d:b7:0a:6f:85:2b:
f1:6b:2f:a7:e4:87:cf:79:61:41:8e:89:4b:e5:db:
7f:f4:5a:a6:e4:a0:d3:2b:f0:94:9d:11:d2:cd:d4:
8f:0b:c5:27:dc:01:ea:56:a6:c4:c6:dd:3f:c3:41:
29:7d:bf:75:7b:d3:e3:09:b1:b2:42:96:7a:71:b1:
1d:11:fa:46:ba:dc:3d:3d:f6:29:e1:35:bb:a1:95:
b8:92:e5:14:92:5c:cb:39:41:a1:22:eb:f0:e9:df:
50:dd:fa:00:b5:04:16:b7:1a:28:8f:46:9b:aa:65:
fd:9d:54:36:f0:32:0b:2c:ab:1a:76:58:a7:b4:ce:
71:29:ae:fc:82:73:98:ab:bf:c5:54:e1:33:5a:32:
5f:42:2a:93:ce:60:3a:84:d2:bc:6f:4e:a9:75:5f:
ee:8f:00:19:06:b5:1b:48:a2:fe:02:e4:cb:20:54:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:97:8B:B8:38:F4:67:30:A3:EC:91:20:8A:5C:89:28:1E:E1:03
X509v3 Authority Key Identifier:
keyid:65:3B:CC:C8:DA:B0:45:9A:5D:23:BC:B1:43:79:38:AC:61:5D:50:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/653BCCC8DAB0459A5D23BCB1437938AC615D5023.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A5944611FDF2B2CCAD036390658D37A8CC89EED4D1E36DD6EAA5B4272384D81/0/3136312e302e37322e302f32312d3234203d3e203532343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.0.72.0/21
Signature Algorithm: sha256WithRSAEncryption
14:ea:88:95:30:fb:49:e9:9e:58:cd:cf:28:30:32:59:d5:06:
b8:e1:b2:e9:8f:d5:57:2a:a6:b8:b1:5d:e8:f7:cb:e6:f2:39:
00:3e:2c:60:40:ce:df:f8:66:de:ef:77:78:57:3f:27:bc:b9:
d2:03:bb:bf:cd:c6:a4:f9:a2:76:86:24:1f:8b:62:8e:c1:60:
67:6c:16:03:dd:a1:b7:47:62:b4:72:15:ba:fe:bd:36:75:39:
55:96:68:25:ad:08:f2:43:99:08:7d:b3:3a:37:92:f8:e0:62:
fd:c5:0a:0e:41:ba:16:ac:70:ef:4e:fd:a1:b2:28:30:94:b2:
f7:b9:80:82:a7:6a:75:7c:64:f3:4f:24:92:68:e5:15:ed:d5:
89:61:55:78:4e:4e:7d:e5:00:55:b0:31:fb:ea:ce:c8:00:c7:
69:67:a8:9c:e5:11:23:4f:c9:1f:8f:21:55:5c:db:cc:39:1c:
e0:08:63:28:26:38:e1:fe:bb:6a:74:a8:0f:58:cb:1a:97:d0:
d8:6a:94:cc:a7:e0:37:d1:01:48:32:e5:27:78:17:ad:85:d1:
7c:d5:d9:ab:10:bf:da:b6:b4:34:31:9a:e9:e3:a4:9a:68:67:
16:97:b3:c5:b3:e4:65:44:38:73:b6:0f:f3:04:c9:0f:5e:78:
1e:81:41:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:20 2026 by rpki-client