This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa
File: 3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa (raw, json)
Hash identifier: a3pGu/k3rl1mNp5EmSiCOY5KRcOcwxMpmMiyTxqIvs4=
Subject key identifier: CE:75:6A:1D:54:8A:24:B0:8E:21:2D:1F:BE:F7:F1:22:D6:F4:85:AB
Certificate issuer: /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial: 15040952F852B5CE19661DA8488C51F568BD5F3C
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa
Signing time: Tue 06 Jan 2026 19:39:53 +0000
ROA not before: Tue 06 Jan 2026 19:34:53 +0000
ROA not after: Tue 05 Jan 2027 19:39:53 +0000
asID: 28118
IP address blocks: 186.120.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:04:09:52:f8:52:b5:ce:19:66:1d:a8:48:8c:51:f5:68:bd:5f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Validity
Not Before: Jan 6 19:34:53 2026 GMT
Not After : Jan 5 19:39:53 2027 GMT
Subject: CN=CE756A1D548A24B08E212D1FBEF7F122D6F485AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:12:f4:69:b0:38:c2:c4:98:2b:d8:33:9e:
42:61:ed:ab:b2:0a:8a:46:8f:86:68:ac:08:fd:48:
5e:13:88:13:fd:c1:db:03:69:3f:9d:3c:90:91:ad:
3e:cd:3d:40:92:bc:78:8b:0b:7f:20:9d:f4:ef:df:
89:25:e5:2c:fb:3b:11:16:02:d0:1f:e5:71:10:1d:
03:8d:68:10:4d:2c:9d:53:ea:62:89:aa:85:78:7c:
94:db:77:90:5a:5a:50:98:fa:62:8d:69:76:be:c6:
85:7d:1e:a3:f9:0a:5e:9a:d3:12:a2:0a:21:f3:03:
93:a1:5d:77:16:2f:97:16:fc:0b:da:26:e2:16:35:
b4:1b:84:7c:1e:c7:40:81:d0:70:8c:76:ac:e9:b9:
d1:19:12:d0:8c:61:90:47:92:9e:55:ed:37:f8:5a:
6a:c3:2c:a7:d1:34:69:b2:20:7c:8f:57:25:a1:d3:
92:7d:73:94:a5:67:86:d0:ca:65:72:51:10:ab:d3:
0c:14:22:04:cb:64:cb:d9:bc:9c:02:ff:ea:00:10:
d9:1a:3b:19:8d:7b:b8:14:48:d7:e1:43:c7:f1:38:
16:86:9c:51:7c:31:26:2a:1b:fe:62:6c:a6:91:52:
66:19:53:40:ee:42:90:77:c7:4b:7f:da:f9:4c:c7:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:75:6A:1D:54:8A:24:B0:8E:21:2D:1F:BE:F7:F1:22:D6:F4:85:AB
X509v3 Authority Key Identifier:
keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.120.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7d:59:b6:42:83:14:74:1d:c4:c3:f4:05:d2:34:7f:9b:ea:ff:
91:b1:d7:f9:fc:32:88:6e:10:e3:be:b2:b1:d0:5f:cc:a3:dd:
89:65:55:e5:d1:bf:fb:1c:c5:b0:54:bb:29:f1:a1:49:0c:c5:
1f:0c:df:61:35:87:9a:8e:ec:d1:32:10:b2:8e:ea:07:25:e5:
56:dd:c8:f4:01:fc:69:af:b4:7a:16:42:b0:c4:0e:81:23:50:
41:fb:09:e6:41:66:0a:31:8a:77:c8:aa:34:d3:65:a5:f3:53:
88:73:71:9e:7d:8a:b5:7d:75:44:55:cf:a9:37:7d:18:9b:64:
2f:ae:3e:98:d4:45:ce:ad:0a:8e:d5:1d:c1:d2:44:92:b9:38:
71:ce:6c:ae:0a:cf:85:2e:5f:a1:06:d4:73:8a:36:f6:69:19:
dc:22:84:fc:b0:f1:81:88:2e:8f:fd:c6:55:e0:02:f6:e4:ae:
b2:90:a6:33:b7:c5:67:e3:2c:1b:58:c2:0a:a3:6c:5a:1c:09:
fb:a7:ba:4a:39:a0:9b:60:bf:2c:6d:5b:e5:2b:38:be:7c:f2:
15:db:8b:24:f1:7d:ad:34:b5:90:b2:6f:b6:c4:c6:ad:2e:d5:
b5:89:41:65:a9:ed:e8:0b:3e:f2:9f:14:31:ed:90:2a:4c:5f:
68:60:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:38 2026 by rpki-client