This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa
File: 3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa (raw, json)
Hash identifier: PjxVW8ztcb043XkEbEdDF+il+qZlxHDz6dwBrA5hLBg=
Subject key identifier: BA:49:CA:BD:90:EC:1F:33:EA:99:CC:2E:7D:E5:1C:DC:59:1B:1F:30
Certificate issuer: /CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
Certificate serial: 576BD81C5D7D60641D14C3BAFB31C8D40F90C4E7
Authority key identifier: B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa
Signing time: Tue 06 Jan 2026 19:17:36 +0000
ROA not before: Tue 06 Jan 2026 19:12:36 +0000
ROA not after: Tue 05 Jan 2027 19:17:36 +0000
asID: 263700
IP address blocks: 138.121.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl
rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 23:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6b:d8:1c:5d:7d:60:64:1d:14:c3:ba:fb:31:c8:d4:0f:90:c4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
Validity
Not Before: Jan 6 19:12:36 2026 GMT
Not After : Jan 5 19:17:36 2027 GMT
Subject: CN=BA49CABD90EC1F33EA99CC2E7DE51CDC591B1F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:ee:67:fd:86:24:48:9f:eb:0d:50:ba:b1:
47:b9:cd:39:f4:9a:31:f2:ab:d6:34:5e:eb:90:0b:
a2:94:30:33:b7:39:cf:7c:5e:d8:b0:72:79:f5:00:
4b:58:ac:3f:ec:45:92:b3:d5:8f:ac:06:20:6b:0e:
3b:77:10:e7:42:7c:89:b3:c7:f4:15:a8:1f:22:93:
cb:d1:77:3d:14:60:a7:b9:b3:ed:61:98:c9:99:52:
de:cf:5d:7d:61:54:9a:e4:32:9c:cd:7a:32:51:7d:
b9:f3:49:52:94:62:83:4e:d2:12:56:55:d0:ee:44:
4f:17:0a:83:5f:f7:cc:19:3a:1d:61:58:55:5b:67:
20:36:aa:7f:2b:21:55:ef:d8:b2:c5:21:33:9c:ac:
0a:9e:0b:ed:2c:18:30:70:4a:04:d6:4c:73:06:32:
45:dd:00:3a:9a:72:dd:ca:6c:b6:12:0c:b9:4a:a5:
04:6a:e5:6e:c6:f1:03:46:4a:c7:f3:35:ad:a3:88:
68:5d:c5:64:ef:05:05:d5:cc:3c:90:e1:b4:ea:9d:
00:cb:de:89:92:b1:52:4c:db:e7:3e:86:3a:98:cb:
d6:44:7e:cc:00:82:98:d1:bd:75:0c:4a:93:ce:e4:
13:b6:57:ec:c5:d8:04:79:e3:4c:63:0f:9a:01:42:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:49:CA:BD:90:EC:1F:33:EA:99:CC:2E:7D:E5:1C:DC:59:1B:1F:30
X509v3 Authority Key Identifier:
keyid:B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:5b:99:dd:14:cc:cf:0f:37:bc:d2:63:c0:1b:72:9d:66:c1:
2b:c3:6e:98:35:e8:37:a2:d4:33:49:74:3d:27:10:58:71:e9:
85:ea:25:21:22:f7:03:37:97:cf:ee:b9:e0:54:ee:4c:20:d7:
ca:e7:2c:ae:cd:57:1e:4e:12:c9:da:94:51:79:3f:e6:57:91:
79:33:07:18:1c:83:6b:4c:a4:c3:e1:af:8d:1a:8b:be:a0:d3:
8f:1e:3b:26:b9:db:b4:8d:2f:35:11:0e:ea:d9:f3:58:b4:9d:
6c:30:d2:bb:c3:a4:01:d0:11:f6:04:e5:8c:f5:8e:4c:76:68:
60:a2:10:13:97:9a:27:59:a1:14:3a:d3:da:f1:e8:3a:4f:72:
36:58:49:92:4a:26:4c:39:50:2c:72:84:a7:21:52:fd:cd:aa:
2c:88:a4:79:d6:9b:47:42:72:5d:80:9b:d1:1b:39:51:1b:af:
3c:f6:a1:a6:35:a7:5e:bc:69:ea:32:c1:c4:ed:f1:a6:be:58:
5f:cc:c0:24:4e:b2:42:db:6b:df:e7:7a:92:76:3c:65:b6:a1:
d2:26:70:97:47:3f:af:8e:20:69:e2:97:bb:66:88:3f:8d:09:
13:84:60:01:84:8b:e9:6a:d1:36:0f:6f:b4:8d:53:4e:a3:e5:
72:a6:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:36 2026 by rpki-client