This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa
File: 3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier: Q+TkplyWgHoz944E3xPfIhoTS1oH725VchvMYxlB1eo=
Subject key identifier: 43:01:94:E9:71:30:74:19:9B:D5:B4:5A:A4:BA:5C:5E:F6:4B:79:CB
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 719A05262751D0F89AD8738928CCA0DF75C8D740
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa
Signing time: Tue 06 Jan 2026 19:35:59 +0000
ROA not before: Tue 06 Jan 2026 19:30:59 +0000
ROA not after: Tue 05 Jan 2027 19:35:59 +0000
asID: 21575
IP address blocks: 148.102.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9a:05:26:27:51:d0:f8:9a:d8:73:89:28:cc:a0:df:75:c8:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Jan 6 19:30:59 2026 GMT
Not After : Jan 5 19:35:59 2027 GMT
Subject: CN=430194E9713074199BD5B45AA4BA5C5EF64B79CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:4b:e3:37:bf:65:cb:03:56:9a:67:02:2a:
79:84:74:30:b6:75:c0:b3:30:3d:e1:50:b8:82:db:
79:11:a1:00:06:e2:1c:64:2c:3a:4c:ca:f2:66:a0:
79:91:87:ce:2c:e7:3c:9a:4b:31:89:a1:e5:f4:82:
37:b1:e1:de:c2:e8:4d:ca:ff:53:07:18:0d:cc:09:
cf:ce:91:7c:53:e5:25:5c:7a:57:74:80:63:41:9b:
06:71:6c:a3:c2:9e:5e:d8:34:42:bf:c4:fd:d2:71:
2b:57:f5:cc:83:5f:b2:55:c3:3d:cb:0b:d8:31:44:
68:5d:cb:a4:3a:22:35:ab:a2:ea:8c:26:0b:95:06:
94:36:43:cc:da:82:4a:9e:c0:12:4f:2e:ba:c4:5a:
d1:6a:c0:d4:c0:a5:ca:4d:61:34:a9:1a:3d:7e:e8:
dc:7a:7b:d4:17:58:e8:dd:69:f3:1f:88:c2:bd:ce:
c8:52:ef:92:b8:c7:63:79:41:aa:2a:a0:5a:d5:6a:
55:1c:81:4e:fb:fa:f8:b6:66:94:dc:ff:1e:93:3f:
89:65:9e:3a:0a:ca:3c:b1:39:77:2b:64:97:7d:62:
59:af:7e:d1:62:ae:af:28:7a:83:7e:71:18:9f:78:
13:ed:7a:df:1b:f2:90:b4:0b:f8:40:f1:7d:9f:9d:
eb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:94:E9:71:30:74:19:9B:D5:B4:5A:A4:BA:5C:5E:F6:4B:79:CB
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.104.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b5:f0:ab:b0:07:13:81:39:3c:51:46:ae:32:6d:45:11:4c:
fe:23:57:80:52:58:c7:94:02:de:d4:1e:e2:fd:fa:43:31:4b:
31:81:61:12:81:5e:75:82:5d:5a:96:db:e7:60:a9:57:3a:be:
d7:34:36:3b:12:9e:cd:88:d3:ea:cc:5c:0b:1a:ac:49:ac:0f:
56:fa:e2:4e:d5:68:b2:da:35:f7:ff:5a:84:32:2d:90:f3:3c:
be:a5:88:b1:a6:d9:53:3c:fe:1b:fe:90:3e:af:fe:07:40:6c:
85:bc:75:e5:9c:f4:9c:a6:a8:d4:5e:48:e0:5a:5b:4b:14:ce:
5b:ef:ec:eb:e3:de:e9:01:fd:ba:70:93:20:51:cc:78:7a:1f:
2d:69:5f:9f:66:9e:c9:98:45:38:d4:b2:82:ba:83:56:a5:f8:
14:39:f9:6c:a6:23:6c:2b:be:b4:f5:ec:c6:a0:c2:32:d7:19:
99:62:8a:d3:53:59:54:a1:41:98:1b:a1:28:f0:5a:cc:1f:ed:
05:95:a6:bd:1b:21:eb:4b:16:68:da:0c:5d:9d:7e:c7:e3:cf:
6f:6c:c2:3e:b1:68:0a:66:df:11:45:42:4c:36:bc:7d:ab:aa:
11:80:4b:62:57:54:c2:f9:73:1d:66:5e:96:a8:8c:39:8c:c1:
61:ef:fa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:33 2026 by rpki-client