This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3139302e35372e34382e302f32312d3234203d3e20323632323032.roa
File: 3139302e35372e34382e302f32312d3234203d3e20323632323032.roa (raw, json)
Hash identifier: At0mJx7nqe6Yv9+8/GSsuYoB58b8Yc+fVAJdSrHDh2Y=
Subject key identifier: 3B:68:B6:18:E5:4A:2F:DA:DA:FC:8F:B1:E1:8B:4B:97:DF:49:34:56
Certificate issuer: /CN=C3A4C72D613B89220886ECA00755498ABF1F663F
Certificate serial: 2005DB740D4EA4142AE847044FD238C79017FA2E
Authority key identifier: C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3139302e35372e34382e302f32312d3234203d3e20323632323032.roa
Signing time: Tue 06 Jan 2026 19:33:41 +0000
ROA not before: Tue 06 Jan 2026 19:28:41 +0000
ROA not after: Tue 05 Jan 2027 19:33:41 +0000
asID: 262202
IP address blocks: 190.57.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl
rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 17:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:05:db:74:0d:4e:a4:14:2a:e8:47:04:4f:d2:38:c7:90:17:fa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3A4C72D613B89220886ECA00755498ABF1F663F
Validity
Not Before: Jan 6 19:28:41 2026 GMT
Not After : Jan 5 19:33:41 2027 GMT
Subject: CN=3B68B618E54A2FDADAFC8FB1E18B4B97DF493456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:11:85:59:06:b7:c9:5c:23:25:45:7f:0b:
d2:f7:9c:64:eb:dd:44:45:68:9e:b3:d5:ee:1a:58:
d7:46:32:73:7e:e1:06:44:53:a5:77:48:64:08:52:
69:ca:92:08:b0:01:09:fb:f0:03:83:6f:e1:72:e1:
c0:66:eb:f5:7c:c4:54:51:8f:20:04:4e:01:52:23:
67:aa:5d:18:a1:a0:e0:c9:a8:14:92:23:a6:b6:87:
6f:65:38:9d:85:80:65:88:d2:67:f9:1a:34:55:10:
17:13:93:2f:bc:bb:f1:40:5a:20:f7:e2:bb:e5:64:
8c:17:d2:31:79:ae:f2:65:b2:3d:97:fd:b5:86:57:
ab:8a:7d:43:8a:51:19:f5:94:be:67:d8:89:ad:85:
37:66:d0:03:21:e5:0b:24:6d:4f:93:1b:46:29:27:
6f:2b:f9:b9:0e:30:5a:0a:5d:00:29:f0:d1:5c:78:
58:4f:3a:54:89:03:f1:ad:7e:3a:59:e2:1c:3c:f0:
c8:60:01:64:9d:51:15:dd:af:31:7d:3f:95:b6:a5:
b1:73:3b:03:8c:63:8c:0b:db:04:18:27:d4:94:88:
a8:71:44:97:2d:90:2c:74:af:a8:15:0c:ec:83:a7:
39:1e:ae:41:1f:c3:e6:61:a3:8f:25:c8:b1:cb:88:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:68:B6:18:E5:4A:2F:DA:DA:FC:8F:B1:E1:8B:4B:97:DF:49:34:56
X509v3 Authority Key Identifier:
keyid:C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3139302e35372e34382e302f32312d3234203d3e20323632323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.57.48.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:51:f8:80:d7:39:96:ca:c3:27:54:76:58:3b:e1:79:0a:da:
2f:3a:57:08:96:e3:6d:83:7f:fe:b4:a6:07:63:ce:13:7e:fc:
bb:53:f2:90:67:17:e0:69:8e:19:f4:3b:fb:29:cd:69:05:4a:
2e:1c:4e:e2:e6:e4:13:95:5c:cb:64:a8:05:c5:f2:92:10:3e:
17:ac:9e:91:07:67:e2:f6:eb:38:1f:8b:a1:1c:c1:f4:dc:9d:
ad:00:b6:c5:23:0a:5f:90:fd:36:b1:a9:37:19:cf:1b:7e:28:
f4:dd:6b:98:59:91:d2:12:c4:c5:f8:14:77:6b:e1:a3:b3:6b:
95:45:c4:df:bf:b8:68:b7:11:c3:0f:dd:c8:fe:02:ef:96:d4:
0a:5e:a5:a0:ed:4b:34:61:eb:fc:99:6d:fa:4a:87:4f:0e:5b:
3e:79:13:ec:90:f3:ce:cb:c3:e5:36:f3:11:be:49:55:dd:72:
58:0a:ee:c3:c1:16:bf:d1:74:11:49:c6:60:7c:74:17:c4:40:
5e:57:d9:e1:31:f9:bf:38:10:0c:3b:fb:25:61:fa:45:20:69:
99:a3:f6:1d:46:4e:c0:ea:9b:2f:96:97:dd:55:89:f2:1a:eb:
ff:ea:01:44:f4:78:1e:ba:dc:9e:f1:cb:75:6c:a3:c5:a4:a6:
ab:23:62:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:46 2026 by rpki-client