This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3133312e3130382e3136382e302f32322d3234203d3e203130323939.roa
File: 3133312e3130382e3136382e302f32322d3234203d3e203130323939.roa (raw, json)
Hash identifier: zaLkgT+I8b+p0C2VT2Qttd/tRj75zLWdHZNfuuQLVUQ=
Subject key identifier: 99:76:0E:03:52:C8:FE:89:72:34:07:63:CD:CA:6D:13:AA:5F:E3:CD
Certificate issuer: /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial: 2872C3F6373A183FFA73D1D6690B4ECC36BAC76A
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3133312e3130382e3136382e302f32322d3234203d3e203130323939.roa
Signing time: Tue 06 Jan 2026 19:01:16 +0000
ROA not before: Tue 06 Jan 2026 18:56:16 +0000
ROA not after: Tue 05 Jan 2027 19:01:16 +0000
asID: 10299
IP address blocks: 131.108.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl
rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:72:c3:f6:37:3a:18:3f:fa:73:d1:d6:69:0b:4e:cc:36:ba:c7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Validity
Not Before: Jan 6 18:56:16 2026 GMT
Not After : Jan 5 19:01:16 2027 GMT
Subject: CN=99760E0352C8FE8972340763CDCA6D13AA5FE3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:a0:25:4b:0e:d9:e5:9a:b2:ce:54:74:9b:
ff:67:25:7a:55:02:88:95:64:36:f6:9f:54:32:25:
db:16:e5:e8:60:6a:ac:ca:e7:72:e3:e0:b9:d9:bd:
60:88:c8:8b:d8:9b:3b:87:c6:5a:7f:16:bc:19:f3:
06:66:4e:1c:d2:77:57:1b:63:07:0d:fc:71:a4:09:
0b:aa:20:9d:f0:2e:73:7f:6d:2a:ae:c3:5d:2b:4a:
a5:a8:62:22:a1:17:23:8a:47:f8:a8:bc:9b:1a:f5:
58:9a:61:1d:5e:12:70:b9:14:f4:94:70:78:78:f5:
47:c9:df:55:83:ee:62:b8:5b:a5:15:f3:8f:b0:1a:
27:2f:90:8d:62:22:d8:d9:48:f2:6d:0f:c1:29:8a:
8e:bc:4c:46:c4:59:19:2d:8b:4e:b2:d4:fd:15:37:
1d:a7:3b:88:17:ae:65:44:8a:87:b0:44:40:95:5a:
fa:10:4d:de:6d:59:ec:9a:e4:fd:7b:34:6e:a3:8b:
ea:90:9f:d6:0a:a7:bf:de:bc:1e:07:24:ac:03:ef:
ef:df:a8:b3:fb:ce:44:34:0f:6b:20:cf:7f:59:66:
12:65:ea:52:22:c8:87:8d:f5:b8:38:7e:6e:6c:7a:
8e:1b:55:b0:0e:c2:7b:ae:2e:df:69:66:2a:19:0e:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:76:0E:03:52:C8:FE:89:72:34:07:63:CD:CA:6D:13:AA:5F:E3:CD
X509v3 Authority Key Identifier:
keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3133312e3130382e3136382e302f32322d3234203d3e203130323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:9b:10:c3:bb:5f:5d:de:d1:06:1e:cb:93:69:62:51:56:78:
e7:c7:48:be:af:ed:e1:78:79:b6:b4:94:7b:a1:71:0b:23:f4:
b0:b9:18:20:c6:00:d5:7f:e2:18:33:12:eb:21:49:b9:df:66:
36:71:27:59:87:d5:e2:43:bd:b7:09:d3:fc:ca:b3:94:91:a4:
26:a1:59:e5:ed:cc:5d:ee:4a:3a:87:f0:91:39:6e:e1:ed:f6:
8c:ca:02:4c:35:cc:61:91:5f:0a:38:35:ed:0d:67:88:ee:5a:
74:30:b3:ca:09:e0:71:cd:58:ca:db:2c:e8:2e:46:6c:6e:d7:
32:24:d1:71:58:e0:6c:a7:03:41:6e:56:28:df:10:eb:d3:69:
f9:fc:87:4d:82:85:af:54:7c:8a:31:49:4b:04:7e:1e:95:94:
f5:a5:96:b2:d5:21:64:15:7f:42:8f:30:81:9e:30:bc:b5:ad:
10:37:e3:11:c9:c3:9e:e9:f8:42:ed:21:00:86:30:ba:d6:bc:
dd:54:0a:1e:ae:d8:d6:dd:ef:ce:51:f5:de:e3:c1:98:d5:ff:
32:62:87:ea:0f:46:d4:26:c2:ff:6c:93:36:ff:e3:26:e0:1c:
b8:e4:ad:60:d7:67:57:dc:71:74:e3:50:a5:73:82:fb:ff:ed:
b1:85:16:6f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKHLD9jc6GD/6c9HWaQtOzDa6x2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU1NTJFREEzQkY4QTVCNkNBREM1MzNFNDAzNTM3QjZE
QzcyOTkzODAeFw0yNjAxMDYxODU2MTZaFw0yNzAxMDUxOTAxMTZaMDMxMTAvBgNV
BAMTKDk5NzYwRTAzNTJDOEZFODk3MjM0MDc2M0NEQ0E2RDEzQUE1RkUzQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HKAlSw7Z5ZqyzlR0m/9nJXpV
AoiVZDb2n1QyJdsW5ehgaqzK53Lj4LnZvWCIyIvYmzuHxlp/FrwZ8wZmThzSd1cb
YwcN/HGkCQuqIJ3wLnN/bSquw10rSqWoYiKhFyOKR/iovJsa9ViaYR1eEnC5FPSU
cHh49UfJ31WD7mK4W6UV84+wGicvkI1iItjZSPJtD8Epio68TEbEWRkti06y1P0V
Nx2nO4gXrmVEioewRECVWvoQTd5tWeya5P17NG6ji+qQn9YKp7/evB4HJKwD7+/f
qLP7zkQ0D2sgz39ZZhJl6lIiyIeN9bg4fm5seo4bVbAOwnuuLt9pZioZDlaxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmXYOA1LI/olyNAdjzcptE6pf480wHwYDVR0j
BBgwFoAUnlUu2jv4pbbK3FM+QDU3ttxymTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUMzNzk4MzFEMkFFN0E1RDU2QUY2QTkwRDlBRjkxNUZC
NjM3N0VFOUZGOUIyQTI1RkU5MDk3MDBFOEEzQzdGLzAvOUU1NTJFREEzQkY4QTVC
NkNBREM1MzNFNDAzNTM3QjZEQzcyOTkzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTU1MkVEQTNCRjhBNUI2Q0FE
QzUzM0U0MDM1MzdCNkRDNzI5OTM4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVDMzc5ODMxRDJBRTdBNUQ1NkFGNkE5MEQ5QUY5MTVGQjYzNzdFRTlG
RjlCMkEyNUZFOTA5NzAwRThBM0M3Ri8wLzMxMzMzMTJlMzEzMDM4MmUzMTM2Mzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMwMzIzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg2yo
MA0GCSqGSIb3DQEBCwUAA4IBAQAKmxDDu19d3tEGHsuTaWJRVnjnx0i+r+3heHm2
tJR7oXELI/SwuRggxgDVf+IYMxLrIUm532Y2cSdZh9XiQ723CdP8yrOUkaQmoVnl
7cxd7ko6h/CROW7h7faMygJMNcxhkV8KODXtDWeI7lp0MLPKCeBxzVjK2yzoLkZs
btcyJNFxWOBspwNBblYo3xDr02n5/IdNgoWvVHyKMUlLBH4elZT1pZay1SFkFX9C
jzCBnjC8ta0QN+MRycOe6fhC7SEAhjC61rzdVAoertjW3e/OUfXe48GY1f8yYofq
D0bUJsL/bJM2/+Mm4By45K1g12dX3HF041Clc4L7/+2xhRZv
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:57:40 2026 by rpki-client