This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3133382e3132312e3130382e302f32322d3234203d3e20323639393933.roa
File: 3133382e3132312e3130382e302f32322d3234203d3e20323639393933.roa (raw, json)
Hash identifier: rCClAFnI3dAuc3+nj2ZNhE8F1nVSEBTgwvNABpcEVqg=
Subject key identifier: 35:AF:DE:85:87:35:44:61:E1:FC:D2:86:39:B5:88:71:75:2A:E5:C8
Certificate issuer: /CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Certificate serial: 3CCBE21A6EBB54C8C1AA73D82D76BCBBFFE75E34
Authority key identifier: A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3133382e3132312e3130382e302f32322d3234203d3e20323639393933.roa
Signing time: Tue 06 Jan 2026 20:51:22 +0000
ROA not before: Tue 06 Jan 2026 20:46:22 +0000
ROA not after: Tue 05 Jan 2027 20:51:22 +0000
asID: 269993
IP address blocks: 138.121.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl
rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:cb:e2:1a:6e:bb:54:c8:c1:aa:73:d8:2d:76:bc:bb:ff:e7:5e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Validity
Not Before: Jan 6 20:46:22 2026 GMT
Not After : Jan 5 20:51:22 2027 GMT
Subject: CN=35AFDE8587354461E1FCD28639B58871752AE5C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:36:f7:59:f5:1d:de:3e:f3:00:33:45:01:
19:4c:66:4b:a6:8d:a8:20:c9:6a:28:68:5e:b7:54:
f3:de:5a:10:d0:ea:a5:2f:99:44:4f:ff:cf:2a:f7:
9d:73:d7:2f:53:50:91:27:f3:b8:4d:15:f4:b2:e8:
d0:1f:ac:9b:aa:f6:a9:46:5e:d6:53:84:7c:c0:67:
fa:79:2c:04:6a:61:43:e1:72:aa:b2:1a:19:51:7a:
4d:66:68:dc:0b:c3:75:35:bc:07:37:bb:05:11:87:
e7:3b:2b:38:41:9e:bb:b5:91:6a:e2:ae:a3:55:66:
b2:45:97:44:9c:47:ae:7f:f1:f9:40:f1:8a:ee:f1:
77:a4:0b:27:0e:61:f7:93:45:f1:88:e0:95:93:b9:
72:72:e0:9c:5a:cc:e4:d1:a6:54:34:8d:68:b5:3b:
77:21:24:fa:16:58:1d:ee:b3:1a:6d:c4:cb:c3:a2:
61:f9:7b:02:9d:96:2b:96:3c:96:f6:5b:2f:31:2e:
5f:bd:84:ab:d0:f7:52:78:26:96:d0:dd:dd:9c:5c:
90:e0:c6:5c:96:b4:29:31:9c:f4:a2:5d:a2:9a:a6:
1f:08:78:98:9f:3c:2f:f0:f7:dd:de:fc:5b:74:67:
d7:03:58:52:01:9c:3e:2f:b8:4f:7a:49:43:2f:5a:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AF:DE:85:87:35:44:61:E1:FC:D2:86:39:B5:88:71:75:2A:E5:C8
X509v3 Authority Key Identifier:
keyid:A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3133382e3132312e3130382e302f32322d3234203d3e20323639393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.108.0/22
Signature Algorithm: sha256WithRSAEncryption
95:1c:6d:33:6c:3e:34:e1:d2:50:a5:88:d3:1e:f9:c9:28:6a:
23:9c:67:b3:5a:cd:05:58:9a:9a:8c:6d:17:a8:60:b0:ab:1a:
6c:74:3e:3c:84:53:9b:20:cd:9d:a4:ed:38:4d:72:36:cc:4f:
70:65:a3:a6:75:d6:5a:fc:8d:a7:b7:e9:2a:80:e7:22:d6:4c:
c6:4c:2d:03:c8:48:f8:7d:83:3e:35:e4:a2:61:5e:c2:22:9a:
00:15:3d:f2:c6:56:79:00:37:cb:b3:7e:6b:24:b4:36:48:08:
86:fb:12:bb:fb:0c:10:62:5f:8d:b6:ef:6d:a8:7d:6c:e9:c1:
11:78:d8:c8:63:ef:a8:4f:63:22:86:ae:73:83:e9:20:27:e3:
e3:d9:6a:7c:3c:99:f6:a9:7b:fa:dc:9b:01:2d:7b:49:d3:d3:
bf:d0:a1:af:53:91:e2:9d:f8:8d:aa:90:bf:ed:64:56:04:85:
4d:7a:04:7d:97:0e:ad:9d:71:37:6a:05:d4:6a:55:ab:a4:64:
41:b3:78:3f:10:06:a4:3d:3e:20:ba:ef:3c:dd:7d:d9:78:3f:
b3:9b:e8:de:a9:49:58:1b:f6:e8:b9:ca:e3:bb:d0:00:ab:0d:
19:cd:c2:81:a1:81:e1:3b:e6:b1:6e:07:cc:99:0b:25:de:b3:
4b:df:e2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:21 2026 by rpki-client