This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa
File: 3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa (raw, json)
Hash identifier: iWLw/qeVAVuU41XJvWnWFNrav4riJknndUkPhK4QVyg=
Subject key identifier: E0:DD:58:17:01:BB:5F:62:37:C8:13:8B:24:26:2B:E4:09:1A:E4:4D
Certificate issuer: /CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Certificate serial: 424FA0BCF633E64E5A963DC1A700427E4357AE94
Authority key identifier: 15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa
Signing time: Tue 06 Jan 2026 19:05:32 +0000
ROA not before: Tue 06 Jan 2026 19:00:32 +0000
ROA not after: Tue 05 Jan 2027 19:05:32 +0000
asID: 263686
IP address blocks: 131.161.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl
rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 14:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4f:a0:bc:f6:33:e6:4e:5a:96:3d:c1:a7:00:42:7e:43:57:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Validity
Not Before: Jan 6 19:00:32 2026 GMT
Not After : Jan 5 19:05:32 2027 GMT
Subject: CN=E0DD581701BB5F6237C8138B24262BE4091AE44D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:a2:74:50:7e:ce:ee:45:d4:38:bc:b1:69:
50:7e:dd:ae:5b:cf:7f:bb:84:7e:b1:b5:a1:74:97:
4f:94:24:36:2b:dd:86:2a:5f:5f:d0:7f:1a:b9:72:
54:8f:f5:d4:a6:ba:d6:df:c9:1a:3e:6e:28:07:0a:
5a:a4:f4:a9:fe:00:60:d7:e4:87:c6:be:14:e7:56:
b3:13:82:05:4a:dc:d4:cf:b3:e8:99:b3:21:6d:02:
b6:f1:a3:3b:30:fa:83:e8:ce:ae:ce:ef:01:0d:f8:
a7:7b:41:25:5d:89:eb:60:84:a6:1b:77:ff:28:2a:
31:58:b0:71:2f:f3:c7:99:93:73:c6:cb:9f:da:c7:
ae:23:d6:73:05:8c:5e:bc:3e:48:2d:50:75:06:ea:
db:41:83:b0:8c:cb:ca:46:9c:e8:c0:b9:57:e7:b1:
ee:74:80:f4:66:62:83:6e:1e:bd:94:06:13:2e:a5:
d9:91:31:b8:29:31:b7:06:e5:34:8e:98:02:16:35:
98:dc:4a:fb:51:60:ad:ce:93:1d:b8:61:23:63:b6:
fc:e1:f2:ae:7d:f2:f8:57:45:39:2a:b6:c7:55:04:
dd:f5:3f:3a:de:d0:1b:32:6a:c9:0a:87:ac:81:49:
8d:16:13:88:47:5a:ee:ae:c7:c0:60:d7:2e:08:95:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DD:58:17:01:BB:5F:62:37:C8:13:8B:24:26:2B:E4:09:1A:E4:4D
X509v3 Authority Key Identifier:
keyid:15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:3a:e5:c5:e6:00:ba:cd:b7:59:20:bb:7e:9e:a7:23:aa:51:
87:65:2e:ae:23:b3:0d:1e:0a:fd:71:95:1b:c9:79:02:59:97:
ff:07:e9:39:f8:49:aa:6f:d2:8a:66:7a:ae:d2:81:21:22:fc:
fe:90:87:cf:d2:e0:55:e6:41:14:09:d3:3c:18:9c:04:3e:48:
94:10:b6:4b:4d:17:c4:d3:24:c2:e2:b9:d3:91:d8:bf:31:74:
4e:1c:eb:1a:fd:8e:0c:e0:91:76:08:21:52:79:26:8b:22:22:
63:ba:3c:4f:8e:6a:67:10:4c:e8:40:87:c1:6e:1c:f0:cd:38:
ab:87:c2:3e:cd:2d:fd:a0:0b:05:65:34:ca:d6:4e:09:3f:7b:
9b:6d:a9:ec:84:38:ef:27:be:67:39:84:b0:43:03:e4:54:64:
4c:d5:5f:ae:ae:b4:88:dc:a5:fd:ea:6f:54:f4:5e:82:a7:60:
19:29:b3:87:66:e5:61:3d:4d:e7:41:d2:5e:f3:47:be:20:c8:
24:1d:39:82:24:03:04:5c:21:33:eb:3e:62:f8:0a:74:18:d5:
43:e1:c3:c3:60:a1:6f:59:a5:a9:e5:c3:f3:53:e1:2f:74:f3:
b0:49:6e:22:53:f8:77:00:2d:58:e4:3a:ca:3c:96:41:b9:46:
ac:89:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:19 2026 by rpki-client