This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136382e302f32322d3234203d3e20323633383333.roa
File: 3133382e3235352e3136382e302f32322d3234203d3e20323633383333.roa (raw, json)
Hash identifier: myrQK87xvbalGLcH9Kbq0Ue015loV1blRjpTC04w6jg=
Subject key identifier: 73:3A:F4:06:0A:42:51:47:9D:6F:1A:22:5F:09:99:48:B3:E4:F9:EB
Certificate issuer: /CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
Certificate serial: 255F9C6351626CF81F6F51B2567FACEE9D4AE5E3
Authority key identifier: 8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136382e302f32322d3234203d3e20323633383333.roa
Signing time: Tue 06 Jan 2026 19:11:37 +0000
ROA not before: Tue 06 Jan 2026 19:06:37 +0000
ROA not after: Tue 05 Jan 2027 19:11:37 +0000
asID: 263833
IP address blocks: 138.255.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl
rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 08:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5f:9c:63:51:62:6c:f8:1f:6f:51:b2:56:7f:ac:ee:9d:4a:e5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
Validity
Not Before: Jan 6 19:06:37 2026 GMT
Not After : Jan 5 19:11:37 2027 GMT
Subject: CN=733AF4060A4251479D6F1A225F099948B3E4F9EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1f:8f:59:8c:c1:c9:38:95:44:44:11:cd:0c:
10:37:f9:3e:29:54:c8:d4:a3:63:31:50:16:70:9b:
a5:4f:ec:58:b5:7f:c5:4a:01:5e:c1:a8:d2:1b:0b:
f0:53:ed:24:05:f3:72:8c:65:a3:b9:0b:f4:52:d9:
a4:72:e1:65:da:f1:02:1b:65:85:15:49:14:a4:da:
3b:bc:b5:66:d8:e6:4e:f0:6a:46:79:f4:19:d9:ad:
3c:2f:96:79:4f:d2:9a:67:63:c4:af:d3:b6:19:81:
55:b3:d7:92:bb:bf:6a:66:60:79:6a:4d:27:cd:bb:
03:88:db:de:9c:a9:22:0e:46:2b:d6:8f:2e:60:7c:
5a:6c:c7:4e:42:24:01:6f:75:0e:eb:ec:40:8d:07:
b3:59:ae:45:6d:61:c2:ad:3c:0e:81:65:5b:1a:f3:
0a:03:72:8b:a3:57:48:50:de:06:05:9e:28:c9:9d:
87:a8:21:6e:ad:fb:00:21:ee:f0:8f:a6:1c:64:7f:
18:fc:4b:80:aa:bd:46:cc:d3:b6:28:df:47:70:9b:
dd:b8:bc:3a:52:04:25:28:63:a1:fa:f8:26:9f:88:
39:57:4a:92:e5:d3:cb:26:4e:48:d6:44:f6:7a:23:
25:cf:84:79:a1:d8:b0:3b:21:43:4b:5c:1f:a4:77:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3A:F4:06:0A:42:51:47:9D:6F:1A:22:5F:09:99:48:B3:E4:F9:EB
X509v3 Authority Key Identifier:
keyid:8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136382e302f32322d3234203d3e20323633383333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.168.0/22
Signature Algorithm: sha256WithRSAEncryption
18:d6:4f:b1:14:ef:d1:8a:0f:91:32:71:b3:c4:17:97:c3:cd:
e8:fb:7d:9e:b3:e6:26:81:84:52:d3:80:26:ed:e9:9a:c7:12:
03:e2:a5:bd:93:c4:e0:97:59:67:c1:0f:fc:ef:11:f6:5d:fa:
2a:7d:01:59:de:ec:95:49:2a:ea:bd:74:52:e0:9a:72:07:ff:
e5:b3:40:1b:37:3a:2f:d5:b1:d6:5d:4a:13:12:1a:cc:77:e8:
e2:1b:41:99:61:b4:6b:58:f8:b3:7d:c2:eb:fd:b0:b3:cd:be:
48:57:6f:9b:95:b7:cc:29:f8:c1:d4:80:a9:e6:cf:40:65:ea:
e6:30:3a:4e:53:07:7a:5f:50:64:ff:a4:c1:43:7d:6f:7b:5d:
53:08:16:2e:ad:05:f8:4d:76:89:31:90:e2:2d:e9:ca:67:4f:
58:61:26:ef:9c:15:a3:86:99:5f:03:d9:50:44:72:55:13:45:
5e:c4:ff:ca:2b:15:f1:b8:1c:3f:71:d2:4c:a0:66:13:cc:72:
4b:50:e1:7e:fc:3d:6a:ad:79:4d:eb:62:31:e3:19:28:fc:96:
67:75:11:1c:f3:49:c8:27:3a:9a:f8:64:c5:ce:59:63:8a:a4:
32:e8:d5:aa:cc:5f:80:74:50:85:63:b6:7c:f3:db:cb:df:3a:
10:e5:c7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:03:27 2026 by rpki-client