This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa
File: 3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa (raw, json)
Hash identifier: y1VGpogAL2Zlgb/QpAMGwO1CWeBeNuaBt742l2hTWNQ=
Subject key identifier: 36:F0:C0:4B:A7:4F:B7:0C:00:63:E0:4B:B9:CD:C2:36:E2:A8:F4:C7
Certificate issuer: /CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
Certificate serial: FD25B286F362FED017DB0AA966721620A343BF
Authority key identifier: C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa
Signing time: Tue 06 Jan 2026 19:42:03 +0000
ROA not before: Tue 06 Jan 2026 19:37:03 +0000
ROA not after: Tue 05 Jan 2027 19:42:03 +0000
asID: 263775
IP address blocks: 138.121.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl
rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fd:25:b2:86:f3:62:fe:d0:17:db:0a:a9:66:72:16:20:a3:43:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
Validity
Not Before: Jan 6 19:37:03 2026 GMT
Not After : Jan 5 19:42:03 2027 GMT
Subject: CN=36F0C04BA74FB70C0063E04BB9CDC236E2A8F4C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:fd:da:f1:40:bb:ef:26:69:7c:05:00:3a:
3b:5e:74:50:61:d1:1f:ac:e5:c3:0c:93:43:6f:e1:
7b:ae:ce:c3:aa:87:7a:c1:90:48:a9:7d:f1:9f:1b:
de:5c:1c:80:50:3b:91:da:4f:f1:e3:7f:93:38:4a:
01:eb:66:29:1a:0c:9c:ff:cc:21:3f:bd:41:f6:8a:
9e:b1:f6:e2:78:86:b7:78:52:19:f8:5e:a2:62:10:
a9:12:9c:49:ca:8e:5b:31:27:6b:25:bf:2d:b7:1b:
15:0f:fd:73:8a:2d:32:20:de:1f:2f:e1:3a:c2:20:
84:ee:a8:06:79:c8:27:4a:2a:af:e3:be:80:c8:bf:
20:c9:df:dc:61:b3:d0:51:72:e2:48:87:e4:5f:7c:
0e:7d:05:d9:f7:47:1c:cc:d9:3d:06:d5:11:24:40:
73:86:78:59:9a:79:57:64:b6:e9:66:1e:b7:35:e5:
67:77:ff:c2:8f:f6:82:98:0e:01:16:95:bd:ec:80:
80:f4:31:2e:2c:15:08:94:2c:0f:db:dd:37:0a:de:
51:6b:98:f1:b1:62:5e:5b:b1:12:5e:cc:43:7e:68:
a7:66:0f:3a:9d:17:f0:7e:34:e7:dd:c3:66:25:0b:
d4:7a:0e:96:c9:99:2b:4e:a7:2c:ef:cb:2a:24:76:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F0:C0:4B:A7:4F:B7:0C:00:63:E0:4B:B9:CD:C2:36:E2:A8:F4:C7
X509v3 Authority Key Identifier:
keyid:C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.100.0/22
Signature Algorithm: sha256WithRSAEncryption
63:1e:d3:8a:7d:e7:eb:87:32:24:8f:5e:9a:fa:c2:d1:3f:28:
55:8f:79:ad:17:e7:cc:b5:ff:c3:76:c2:ed:f8:f7:47:db:04:
31:f4:8b:cd:b5:6a:ea:39:85:f1:56:c4:36:f2:0b:60:07:8c:
95:fb:3f:e9:dc:39:31:d1:f7:1d:63:d2:9a:2e:61:ef:c2:68:
7b:80:11:81:fe:79:8b:49:44:37:f5:71:d1:89:95:1c:fa:d4:
5b:cb:8f:f0:73:47:55:76:6c:15:f6:ed:ee:4b:14:d9:bd:9d:
dd:6f:3a:86:a7:ac:a6:0a:f0:f3:b8:09:be:8b:d3:8c:a8:b8:
8c:bd:ce:02:37:65:fe:fa:da:02:e7:8e:74:86:7e:ce:e0:c3:
91:b7:06:b6:0f:3e:a3:b8:1f:ad:d2:a0:7c:7c:cd:eb:d2:ac:
6a:39:fc:d8:cb:85:70:23:59:27:ad:38:dc:33:48:bc:e1:66:
3b:d2:ed:de:81:dd:05:7c:81:93:9f:d0:cb:7d:af:0e:ac:ac:
5f:63:36:f9:7a:e8:d6:09:4e:ba:ac:cc:1d:fa:d4:08:09:2e:
79:1c:8e:c7:cc:59:05:1a:a7:40:66:65:79:23:82:74:f7:7e:
43:67:28:2f:34:d8:75:dc:0b:60:64:af:bd:a4:fd:2b:a3:82:
70:85:32:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:53:53 2026 by rpki-client