This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139382e31322e33362e302f32322d3234203d3e203237393838.roa
File: 3139382e31322e33362e302f32322d3234203d3e203237393838.roa (raw, json)
Hash identifier: ZZFAc/JYgY28pRNKadEijxvTlaEqUe7Jy859wfzHaY4=
Subject key identifier: 20:72:09:C3:6A:BF:46:D0:5E:47:C2:59:55:13:31:AD:01:A0:1C:6B
Certificate issuer: /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial: 3E237DAC322C372AD7030C26BF4379F224A000EC
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139382e31322e33362e302f32322d3234203d3e203237393838.roa
Signing time: Tue 06 Jan 2026 20:53:38 +0000
ROA not before: Tue 06 Jan 2026 20:48:38 +0000
ROA not after: Tue 05 Jan 2027 20:53:38 +0000
asID: 27988
IP address blocks: 198.12.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 04:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:23:7d:ac:32:2c:37:2a:d7:03:0c:26:bf:43:79:f2:24:a0:00:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Validity
Not Before: Jan 6 20:48:38 2026 GMT
Not After : Jan 5 20:53:38 2027 GMT
Subject: CN=207209C36ABF46D05E47C259551331AD01A01C6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:76:5d:f1:fb:66:8e:63:d7:be:f6:68:9d:
73:6b:43:17:e0:76:c4:ea:8e:2c:6a:37:4c:e7:d1:
f9:63:2a:b0:8e:4f:a3:9f:f9:35:78:02:63:dd:b0:
93:ea:fe:f2:f7:31:cd:06:73:74:96:ce:54:05:9d:
95:36:86:13:e4:e1:b4:e2:d4:1b:08:b8:5a:18:4f:
58:31:87:13:3b:9b:66:2e:0e:e4:27:9e:0a:a7:58:
7a:11:32:70:ee:6a:5f:af:c1:1b:a6:bd:10:99:a3:
f1:c8:9a:6f:13:af:a3:d2:16:93:d0:06:1e:df:8e:
cf:cc:83:06:ad:57:6a:cd:2b:6d:2c:12:bc:58:de:
9e:3d:f9:76:33:78:3f:11:1f:51:41:f3:c0:21:45:
c5:bb:fd:48:d2:da:44:6c:53:2e:8b:72:3f:f3:ea:
2e:d1:a4:46:79:39:ca:7b:e9:60:d5:84:ab:48:60:
ee:3e:62:ac:d3:91:fe:a1:b0:fc:11:04:1d:8d:38:
aa:23:af:42:b1:f6:d3:f8:1b:ce:5c:09:7f:57:16:
b5:7e:52:22:16:8a:d9:6d:1a:b0:7d:71:fc:b1:e2:
c8:33:f3:59:6d:28:a7:a4:2a:50:83:ed:b8:19:98:
3f:4f:a0:58:e2:27:e4:fa:41:58:fd:df:b0:af:49:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:72:09:C3:6A:BF:46:D0:5E:47:C2:59:55:13:31:AD:01:A0:1C:6B
X509v3 Authority Key Identifier:
keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139382e31322e33362e302f32322d3234203d3e203237393838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.12.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:8c:05:53:c5:e0:49:ac:27:b4:35:e3:d3:c1:de:cd:51:9d:
16:d5:89:9e:e4:2d:b8:17:0f:f3:96:d4:b9:81:f4:45:7f:f9:
8e:0d:48:c2:0c:51:8a:65:c3:7e:a2:21:10:33:5b:73:26:b3:
38:7f:41:4f:80:b3:c7:96:69:00:50:fd:39:cc:e7:0d:0d:de:
7b:37:fe:26:9a:67:20:fd:a1:d6:d8:9c:39:b6:b0:82:09:4d:
bf:65:c6:1c:c6:b8:d9:bb:44:80:8c:55:8b:17:e8:d5:3a:c6:
4f:03:3f:81:da:00:7c:17:fd:e0:d6:da:cb:92:dc:1b:8f:73:
64:bd:61:db:c9:9d:53:65:4e:5e:94:d5:bf:43:65:18:ca:84:
97:0e:8f:7d:9e:59:ff:7d:5e:54:ff:f0:b3:af:45:39:ef:c0:
65:3f:f5:0d:ce:c2:f9:17:4b:38:72:63:e3:b7:77:4f:00:47:
04:50:4c:9d:3d:6b:fa:ce:c5:a6:78:fd:96:a8:1e:9f:19:bc:
c5:29:50:c4:ba:34:ba:ea:bd:36:0f:17:54:5e:9b:22:da:65:
86:a5:18:d8:5b:b1:a0:41:d8:eb:2b:25:91:77:c5:5c:b6:16:
7d:45:03:96:75:e5:9f:70:fb:1b:aa:1e:36:80:e6:62:3a:a1:
f5:fb:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:48:13 2026 by rpki-client