This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131322e302f32322d3234203d3e203231353735.roa
File: 3134382e3130322e3131322e302f32322d3234203d3e203231353735.roa (raw, json)
Hash identifier: M3QHgcTBJl/XPyKTGdq7JavE0buNFcyB9olzcT6vCjA=
Subject key identifier: C3:89:07:E2:AA:94:43:B0:24:BC:5E:98:6A:93:AA:2F:ED:D4:84:CF
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 7BED324928518496014F28DBCFDA40A993FCC88E
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131322e302f32322d3234203d3e203231353735.roa
Signing time: Tue 06 Jan 2026 19:36:01 +0000
ROA not before: Tue 06 Jan 2026 19:31:01 +0000
ROA not after: Tue 05 Jan 2027 19:36:01 +0000
asID: 21575
IP address blocks: 148.102.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ed:32:49:28:51:84:96:01:4f:28:db:cf:da:40:a9:93:fc:c8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Jan 6 19:31:01 2026 GMT
Not After : Jan 5 19:36:01 2027 GMT
Subject: CN=C38907E2AA9443B024BC5E986A93AA2FEDD484CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:6d:a7:da:4d:f6:dc:86:51:3c:ad:14:bc:
f2:d5:1b:4e:f7:12:1c:ee:25:28:db:f1:1e:77:1e:
e4:f7:70:31:20:7d:9c:53:e9:4c:e1:b3:09:f4:d5:
fd:92:3f:7d:6d:76:0b:ba:4b:bd:b3:9c:e0:3a:a4:
ea:29:c0:04:f5:fd:98:96:d2:6c:46:00:2f:dc:e0:
09:3b:d5:23:0d:ed:fe:c4:99:0c:a1:2a:c6:f9:a4:
59:09:2a:bf:6c:36:bd:0e:8e:64:4b:11:c9:5d:c8:
16:0f:30:cc:b6:06:3d:11:66:62:f4:5b:b0:2f:04:
6f:a6:74:78:91:7e:b0:31:f9:6f:cb:a1:3c:40:64:
6c:b3:19:e0:ce:f5:ac:60:cd:66:49:4b:49:cf:63:
37:77:93:34:cd:80:20:b9:20:39:e8:7d:a7:09:35:
fa:6d:bc:80:ac:de:17:14:71:37:ce:98:0c:e6:dc:
b9:ed:27:7e:4a:3f:24:1d:e2:a0:5b:2b:c7:21:b6:
37:b0:5a:2b:e5:a8:c2:22:d1:f9:b4:f9:1a:e2:13:
cc:f8:34:5a:fd:eb:03:14:7c:ab:24:e9:eb:00:e3:
03:47:af:eb:f2:da:9b:ac:22:af:c6:0b:48:ec:31:
1a:8c:b1:61:77:7c:ac:4a:97:fc:37:87:76:50:a3:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:07:E2:AA:94:43:B0:24:BC:5E:98:6A:93:AA:2F:ED:D4:84:CF
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131322e302f32322d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:02:5b:fb:08:ed:47:36:a1:d0:20:ef:e7:65:83:25:b4:cf:
1b:78:77:5f:23:96:72:a6:a2:f2:f5:94:34:20:4c:4f:0a:24:
5a:3f:2a:4e:71:ff:32:01:14:eb:df:2d:5f:7b:bd:5c:3e:e3:
98:20:7b:01:4e:86:36:d9:9c:e7:99:bd:9f:ea:0e:6c:31:1d:
72:1a:71:6d:ad:ac:59:89:90:60:23:7b:3c:55:eb:25:3a:d5:
bf:4d:36:29:24:f1:bc:c6:ef:fd:bb:4a:af:09:c8:f4:42:a9:
79:f4:11:1c:c9:21:f4:69:56:61:32:34:cd:ae:0a:87:6a:23:
ce:45:88:f0:f7:42:35:55:87:ae:b9:5b:3f:1d:d1:46:ce:6e:
00:49:18:98:6a:ef:1b:c5:af:a7:38:fb:80:45:18:12:ad:05:
42:32:32:81:cc:43:df:a8:da:b2:8c:33:11:4f:77:71:fd:d7:
9f:fd:6a:b2:d8:93:9a:9d:52:17:a8:68:79:64:eb:f5:40:72:
2f:70:b5:0e:33:69:3a:01:e3:e7:93:b7:f6:e4:46:3d:50:70:
26:0b:bf:1d:36:ce:58:27:d1:d2:ed:a5:59:91:67:ac:16:61:
20:bc:91:ba:2c:d6:45:3e:4f:61:b1:24:21:0f:cd:c1:bc:2d:
75:a3:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:23 2026 by rpki-client