This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa
File: 3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier: RvghKsWnlJ+WrN8aoau6dwA9xqz7Qxr7kJUfoLckwuI=
Subject key identifier: 09:8B:D2:43:AC:1B:41:17:99:A2:23:F4:B4:95:0A:11:27:77:00:15
Certificate issuer: /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial: 2C6D145642506E4757761A3443B0B89E40BB559C
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa
Signing time: Mon 12 Jan 2026 19:59:59 +0000
ROA not before: Mon 12 Jan 2026 19:54:59 +0000
ROA not after: Mon 11 Jan 2027 19:59:59 +0000
asID: 265524
IP address blocks: 181.191.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:6d:14:56:42:50:6e:47:57:76:1a:34:43:b0:b8:9e:40:bb:55:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Validity
Not Before: Jan 12 19:54:59 2026 GMT
Not After : Jan 11 19:59:59 2027 GMT
Subject: CN=098BD243AC1B411799A223F4B4950A1127770015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:2b:0e:71:e7:38:4b:29:47:ad:b3:9b:11:
8c:c4:6a:f6:6d:6a:17:32:ac:81:31:f3:85:32:bb:
46:7f:cc:f0:07:64:9c:6a:b6:e0:d5:79:fb:f3:0f:
b9:91:17:c3:34:d0:8f:29:05:8b:44:ab:74:f7:06:
f4:fa:96:e6:da:79:f0:65:a7:62:b3:38:f3:60:79:
9b:2a:85:e5:8c:4c:76:f3:2b:4c:4e:3b:bf:7e:ac:
79:38:43:4d:45:e0:f2:91:a7:7b:7f:34:7b:eb:1f:
08:ed:6f:c5:25:d7:a3:5e:67:73:5b:1d:60:9a:4a:
9e:40:2c:04:12:e9:5d:bd:95:46:8a:d3:4f:ed:91:
6a:62:42:6f:d4:72:d7:a7:bd:e7:df:7d:a5:31:2b:
de:b1:cb:ea:35:ae:a2:63:bb:af:e1:57:2d:32:65:
00:e4:43:54:a5:0a:96:65:82:2d:fe:2d:ff:f5:bd:
2e:5e:60:12:49:26:76:5d:2f:23:90:d8:c1:22:ce:
9b:30:ee:be:07:af:40:2a:40:fd:35:51:9e:ff:90:
5d:fe:5c:20:77:e5:74:0a:ed:b6:1e:6b:ae:a8:04:
2f:2a:5b:c1:d7:4b:1e:3a:4a:b1:d3:f2:56:e9:61:
fd:e9:9c:cc:44:fe:91:30:07:28:17:d0:f6:db:38:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8B:D2:43:AC:1B:41:17:99:A2:23:F4:B4:95:0A:11:27:77:00:15
X509v3 Authority Key Identifier:
keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.252.0/22
Signature Algorithm: sha256WithRSAEncryption
65:cf:67:7f:33:c5:e6:2f:4f:e7:1c:20:09:b8:50:a0:17:75:
ed:22:e0:a3:a4:27:13:0c:fd:2f:de:7b:2a:e1:d0:36:ac:32:
7a:1b:bd:bb:d4:c1:fd:da:9f:90:0d:78:a5:e1:80:2c:aa:af:
ec:8f:d8:a8:70:5d:ec:3c:57:91:6a:7f:b9:3d:06:e2:2a:29:
0f:1a:e6:c5:61:7a:96:bf:15:2b:21:09:c1:8b:56:7e:96:b5:
d8:4a:f6:32:0f:7d:0d:80:1b:95:6f:1b:84:2e:f6:31:74:b4:
b1:4d:7a:9c:b9:98:0c:3f:9e:df:46:0c:a8:07:d2:51:be:67:
18:b5:d0:28:8b:ad:5d:85:58:bc:84:1d:f6:da:f8:dc:4f:3d:
fb:4d:e8:d7:8d:31:9b:68:99:0e:7b:e5:0b:8c:ed:33:a7:aa:
d2:ad:f7:78:9c:a1:30:ea:89:d0:04:4f:91:45:9f:43:61:4e:
fe:b6:0d:ae:ff:71:42:b6:65:b2:1d:9c:17:4c:5c:83:0a:a5:
af:b1:4f:80:28:5f:4d:b7:24:55:10:d6:66:59:04:d1:f5:af:
02:be:11:35:68:73:e8:d6:28:5b:7f:5e:45:7c:ee:a5:16:15:
fd:bc:d9:1e:d5:a5:78:85:91:6f:46:18:56:f8:3b:72:69:b2:
ff:15:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:57:32 2026 by rpki-client