This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e302e302f31372d3234203d3e203238313138.roa
File: 3138362e3132302e302e302f31372d3234203d3e203238313138.roa (raw, json)
Hash identifier: 7sNwjo4rn9Xkd1bRnHkWTn31nYtJuWhF805g8uZOrh4=
Subject key identifier: 9E:AE:2E:D2:84:CD:70:8E:43:72:29:37:4A:5B:D0:47:F8:EB:FC:8C
Certificate issuer: /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial: 5284DA00D24AE0A0E9A3336402B57E407E341E1A
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e302e302f31372d3234203d3e203238313138.roa
Signing time: Tue 06 Jan 2026 19:39:50 +0000
ROA not before: Tue 06 Jan 2026 19:34:50 +0000
ROA not after: Tue 05 Jan 2027 19:39:50 +0000
asID: 28118
IP address blocks: 186.120.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:84:da:00:d2:4a:e0:a0:e9:a3:33:64:02:b5:7e:40:7e:34:1e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Validity
Not Before: Jan 6 19:34:50 2026 GMT
Not After : Jan 5 19:39:50 2027 GMT
Subject: CN=9EAE2ED284CD708E437229374A5BD047F8EBFC8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:87:db:8a:57:d3:77:b1:17:8c:d0:9d:83:
97:6d:bb:65:50:3e:db:6a:7a:38:66:fa:5c:6e:66:
4a:c2:48:aa:19:d8:73:60:80:89:a2:1e:fd:23:54:
a6:e2:7b:9d:31:62:35:53:1e:a4:1d:d0:7d:05:2e:
33:c1:1f:62:01:81:9d:f3:c6:c9:af:e4:6d:e9:34:
82:ea:55:5d:77:8a:ac:5f:b9:70:3c:0e:30:55:3a:
31:47:e7:62:54:c4:a2:00:74:c6:58:31:d2:96:9b:
4f:5a:ed:b7:01:d5:be:4a:16:4b:58:60:35:2b:db:
95:43:33:07:10:64:fd:09:82:18:ab:ff:7f:7b:f5:
55:56:15:5d:6a:4c:48:5b:e0:9d:bf:bd:32:b0:18:
34:7f:2d:fc:5d:fa:e0:4f:bd:8b:6e:07:c2:85:5d:
0a:8e:1c:d4:3d:67:3d:0c:e4:f6:8d:ac:5c:90:ed:
ba:31:42:95:fe:19:35:33:b3:20:48:27:7f:01:ee:
7e:82:30:96:1b:41:da:15:e3:8d:f7:f0:46:00:00:
41:9b:90:ee:1b:0c:f0:f6:14:b8:91:e6:81:24:89:
56:39:13:9e:a5:5d:72:67:83:60:0b:87:44:f0:6f:
a9:cc:a4:6b:21:fb:fd:de:23:69:39:ad:cf:fd:3f:
8a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AE:2E:D2:84:CD:70:8E:43:72:29:37:4A:5B:D0:47:F8:EB:FC:8C
X509v3 Authority Key Identifier:
keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e302e302f31372d3234203d3e203238313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.120.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5b:dd:c8:3d:16:ee:c4:81:6e:45:86:23:80:5a:8d:a0:e7:0d:
51:24:a5:ce:bb:83:a0:07:13:07:a6:2b:b1:31:58:2d:89:79:
e5:3d:36:ce:c1:dd:50:09:33:93:0c:5e:39:d7:ed:6a:21:35:
2d:e0:5d:e4:0f:d5:09:bb:7f:df:6e:cc:36:28:ee:67:e3:af:
f6:b8:f4:7a:37:cf:10:9d:81:08:42:79:aa:c7:fe:3a:9e:bf:
f4:e7:16:ed:a1:28:1a:88:53:39:ec:ff:96:cc:9f:bb:6b:01:
67:7d:7e:ec:b4:e8:38:c8:a5:5a:b7:c1:e1:00:0d:aa:96:49:
82:66:d6:1e:d3:d4:38:54:f3:28:8b:39:69:89:0d:f1:08:cb:
30:54:58:1f:30:46:3c:77:79:f5:58:7d:3d:08:dc:de:3c:96:
4f:26:a1:40:f0:cf:4f:d2:c1:4c:a5:53:ff:fc:45:75:d6:ed:
fd:7f:5f:9e:55:b0:f4:5d:76:34:4e:69:d7:4c:ce:ee:b7:94:
2e:53:28:83:ee:ca:52:8b:63:82:5c:27:6d:71:0d:72:69:cb:
f3:d6:92:ee:2b:0c:da:82:c6:5f:da:d8:ea:81:54:52:53:65:
fd:a4:ec:45:68:95:ff:fc:fa:a8:d6:5b:23:23:0b:6f:ba:b0:
dc:b9:be:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:23 2026 by rpki-client