This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32342e302f32332d3234203d3e203237363738.roa
File: 3139302e3132342e32342e302f32332d3234203d3e203237363738.roa (raw, json)
Hash identifier: OHZbnOYCfNKY5Awi3g6GcQOi4N9Hb7SBY1tSSOZL1X8=
Subject key identifier: E2:DE:81:A3:EE:30:F8:02:C1:FC:27:BD:98:F0:ED:8D:5C:02:1E:2A
Certificate issuer: /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial: 40AB40AFFCB4ECADB0BD4DDE134225D4F4C06559
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32342e302f32332d3234203d3e203237363738.roa
Signing time: Tue 06 Jan 2026 20:56:31 +0000
ROA not before: Tue 06 Jan 2026 20:51:31 +0000
ROA not after: Tue 05 Jan 2027 20:56:31 +0000
asID: 27678
IP address blocks: 190.124.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 22:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ab:40:af:fc:b4:ec:ad:b0:bd:4d:de:13:42:25:d4:f4:c0:65:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Validity
Not Before: Jan 6 20:51:31 2026 GMT
Not After : Jan 5 20:56:31 2027 GMT
Subject: CN=E2DE81A3EE30F802C1FC27BD98F0ED8D5C021E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c5:03:ae:37:f6:4b:e2:30:55:e6:da:b5:6a:
35:6b:40:a8:14:e5:87:55:ef:b5:ad:ea:99:4e:7c:
87:b4:f6:9b:e5:99:db:8f:d1:1e:f9:86:8f:79:b5:
be:c6:55:12:4d:b7:a1:7b:69:99:e1:d4:94:ee:4e:
30:72:d8:9c:b1:27:de:6f:c9:2a:5a:d2:dd:d0:4f:
50:15:14:f7:7e:0e:b8:21:31:a5:f3:3c:f9:b5:29:
76:ac:2f:8c:9f:7e:0a:5b:ba:f4:5b:9b:b4:52:bc:
f9:a9:ad:0f:f3:7c:2a:34:63:1d:d7:b0:d3:03:3c:
83:7a:4c:0c:65:cc:77:aa:9f:20:ff:89:f5:41:e3:
4b:52:e0:fb:81:9e:29:4e:15:fe:c9:26:0b:d8:e2:
25:01:35:88:18:e2:68:05:94:1d:9d:8e:aa:0d:90:
c5:9f:fa:de:31:bb:39:bb:54:d9:fb:33:6f:e0:c6:
f0:85:74:25:68:67:27:ac:61:b0:96:98:f0:68:a1:
00:bc:07:ab:6e:00:5a:3c:85:62:75:96:f0:cc:4b:
ce:28:14:81:bc:de:6c:38:27:2d:36:e8:e7:f5:83:
cb:b2:d3:94:fa:cc:e8:4c:ec:5a:a6:98:29:24:7e:
27:4c:55:08:14:f1:e4:6a:90:ee:1c:4b:72:de:52:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:81:A3:EE:30:F8:02:C1:FC:27:BD:98:F0:ED:8D:5C:02:1E:2A
X509v3 Authority Key Identifier:
keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32342e302f32332d3234203d3e203237363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.24.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:6f:01:6c:b0:33:2f:36:de:96:f1:5f:f2:ab:ec:7f:6a:28:
c6:a4:4d:8f:64:92:78:3b:e2:f9:27:9d:58:c9:05:03:11:5b:
8b:18:56:d4:49:2c:56:49:e3:6a:2b:62:b7:99:ed:52:20:01:
b7:43:90:88:29:f2:a1:87:25:e8:a4:bf:5b:5e:35:d1:c9:80:
fc:1d:14:5e:f8:0d:a8:7e:55:79:67:68:8e:9c:55:0f:f3:be:
4c:ae:6b:b6:14:8d:e7:a9:ad:88:a5:f8:31:08:53:b5:ca:a5:
56:04:ab:8f:0d:88:a0:05:0b:28:98:21:c2:bc:89:27:60:25:
34:42:b5:39:0f:b6:68:ce:0d:64:18:00:ef:b8:37:db:da:fb:
b4:26:fa:5a:3b:3e:35:b4:af:72:9f:2e:34:c2:50:52:c2:8f:
04:3c:77:e7:0d:9f:a5:2d:1d:e1:ec:23:11:8a:bf:40:af:a6:
50:71:99:a5:4a:95:73:22:7d:9c:ea:62:07:fa:76:3d:42:81:
bf:9f:62:6f:be:3b:06:61:1b:5a:d8:7c:36:72:b9:16:5e:8f:
22:d6:4f:33:91:1a:23:da:fc:7f:6f:e5:96:41:15:2d:a8:18:
cb:1c:9e:c7:6d:02:cb:28:b9:5d:58:82:9a:06:eb:e5:d6:c3:
94:98:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:00 2026 by rpki-client