This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e302e302f32302d3234203d3e203532323333.roa
File: 3139302e38382e302e302f32302d3234203d3e203532323333.roa (raw, json)
Hash identifier: ruO6hcgtWwyp9jaueVVysqzZChUjPLH5xXeuxMjFUpU=
Subject key identifier: 09:36:62:90:40:4C:DD:90:1A:86:A5:85:30:6B:4F:CE:89:EC:1A:3F
Certificate issuer: /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial: 3AABEB6168DE2C556536BBABB4DE5F236D8F4CCF
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e302e302f32302d3234203d3e203532323333.roa
Signing time: Tue 06 Jan 2026 19:43:14 +0000
ROA not before: Tue 06 Jan 2026 19:38:14 +0000
ROA not after: Tue 05 Jan 2027 19:43:14 +0000
asID: 52233
IP address blocks: 190.88.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ab:eb:61:68:de:2c:55:65:36:bb:ab:b4:de:5f:23:6d:8f:4c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Validity
Not Before: Jan 6 19:38:14 2026 GMT
Not After : Jan 5 19:43:14 2027 GMT
Subject: CN=09366290404CDD901A86A585306B4FCE89EC1A3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:58:d6:ae:0c:ab:a0:ad:fd:f0:0a:e3:a6:
fe:00:9a:d9:8e:77:aa:15:c6:9d:ba:ac:bf:ca:4c:
7a:02:b2:79:b5:38:3c:d5:c4:1f:25:9e:a8:62:aa:
97:5d:d7:c9:41:97:37:91:f6:69:3a:f4:e7:5b:03:
af:3d:7e:49:09:30:4e:7b:b4:50:82:38:b8:24:8f:
04:39:5b:31:91:99:7c:fa:80:1c:5d:e6:73:49:77:
63:8c:83:4e:0d:09:c0:29:c4:eb:32:43:d2:cb:12:
00:69:f6:49:24:4a:74:3b:02:84:0e:3f:95:6b:d0:
56:90:48:f2:da:e5:ff:03:88:69:ee:48:8f:ff:9a:
70:3c:e0:9f:e3:3d:f5:4b:2b:70:fa:f8:19:7c:50:
3c:f2:46:3e:bc:72:7b:02:5c:f2:dd:c5:d7:81:ec:
00:3d:c7:51:13:c5:1e:01:90:b4:c6:d1:e9:b1:b3:
ab:fc:30:5c:35:cd:52:20:c7:5d:f8:ee:39:26:e4:
6d:02:11:89:fe:27:0c:0b:57:33:3e:17:e8:28:f2:
3f:72:74:81:50:6f:87:34:22:5c:2a:72:da:45:aa:
5b:d5:08:e9:6b:aa:2b:8c:c3:26:8b:37:4f:9a:92:
ec:17:00:02:34:f1:09:eb:f5:1c:68:0b:95:10:28:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:36:62:90:40:4C:DD:90:1A:86:A5:85:30:6B:4F:CE:89:EC:1A:3F
X509v3 Authority Key Identifier:
keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e302e302f32302d3234203d3e203532323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.88.0.0/20
Signature Algorithm: sha256WithRSAEncryption
61:26:d8:76:83:e9:61:d5:4f:ef:8e:a3:1a:4e:b6:24:bb:dc:
c0:eb:43:f2:33:86:b5:0a:c4:72:54:9c:28:86:dd:13:71:77:
15:64:c1:74:a4:03:5b:26:3c:c8:a9:54:6d:47:52:76:e6:34:
ed:18:f7:f8:f6:be:98:c9:d6:b9:e1:7c:7c:45:93:79:0f:8a:
6b:20:e5:e7:c0:3f:e1:d0:09:ed:c3:f0:03:c0:67:18:3d:53:
4c:06:dc:8d:0b:8d:98:0c:52:30:38:88:59:f5:5e:b2:8a:18:
ed:ed:8a:38:69:c8:54:f7:ea:49:9e:31:ca:a8:04:a6:1c:ff:
b5:3e:6c:50:11:73:e8:0d:2e:6a:58:c9:74:f2:22:8f:ef:13:
64:ce:4f:23:c6:8d:60:c7:87:04:20:dd:00:46:3e:91:6e:d5:
65:a3:53:a3:28:ce:76:6d:ee:0d:ae:6c:a2:fa:6d:55:53:f7:
39:ad:9f:e6:8b:bd:2c:13:89:d7:1f:88:5d:e0:08:5e:ff:ff:
2b:83:f4:fb:f0:d1:2b:b6:c1:72:6c:ff:20:cc:66:78:60:4c:
4f:96:36:97:a0:8d:fa:59:d4:85:30:4c:43:f4:a9:ad:7b:cc:
61:df:31:f5:92:af:27:bd:af:0a:e7:49:36:68:10:ad:4c:01:
45:df:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:38:40 2026 by rpki-client