This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37322e302f32342d3234203d3e203231353735.roa
File: 3134382e3130322e37322e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier: ez1oQ6hYeHNNJhRufhRxUQ4eHHKDuOiSc4j3sJhrBuA=
Subject key identifier: 3E:89:F2:5B:BB:37:0A:A1:BE:32:E3:0E:2E:5A:8A:11:7A:53:A0:48
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 7735789E1E440D89537356CCE05A6ED89340A12F
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37322e302f32342d3234203d3e203231353735.roa
Signing time: Tue 06 Jan 2026 19:36:05 +0000
ROA not before: Tue 06 Jan 2026 19:31:05 +0000
ROA not after: Tue 05 Jan 2027 19:36:05 +0000
asID: 21575
IP address blocks: 148.102.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:35:78:9e:1e:44:0d:89:53:73:56:cc:e0:5a:6e:d8:93:40:a1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Jan 6 19:31:05 2026 GMT
Not After : Jan 5 19:36:05 2027 GMT
Subject: CN=3E89F25BBB370AA1BE32E30E2E5A8A117A53A048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:60:54:ad:76:27:59:a1:18:12:cb:58:eb:
a4:a3:e1:e8:5a:e9:28:14:6b:93:3c:46:26:e2:9c:
68:25:9b:73:85:37:4b:2c:b8:9f:43:d7:80:3f:55:
d0:e2:b2:20:c8:1d:b9:56:25:38:13:29:be:c5:a9:
32:da:58:df:22:6f:4e:e1:74:d2:44:42:14:44:1e:
6d:3a:fa:f0:64:2c:c2:9a:8d:07:d9:9d:d0:71:33:
81:f8:06:69:f3:17:41:80:50:48:7c:68:d9:2d:40:
c1:33:f2:ce:5b:b0:74:8f:85:1e:3a:32:75:c6:73:
fe:e9:32:c1:d3:d5:8e:4b:05:e3:5e:d5:29:fd:05:
a6:45:58:38:04:f0:34:f3:e0:76:c2:64:68:fb:83:
f1:f0:8f:49:d6:33:5a:45:76:8b:b1:74:98:4e:6e:
9d:cc:7a:88:bb:e9:ea:9c:a9:2b:88:5c:8e:22:d8:
0a:48:6c:1b:5e:3d:ff:aa:59:92:ae:36:44:cf:4d:
93:a1:88:4e:76:f9:cb:77:14:6d:73:6a:8a:be:ea:
6d:c6:f4:7b:9b:a1:b5:f8:c0:3b:68:74:f0:07:e4:
9d:bc:73:27:a8:44:9f:8b:86:09:b5:a1:de:f8:0d:
3c:68:37:36:ff:6c:dc:c9:5f:7d:c9:e4:81:33:d7:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:89:F2:5B:BB:37:0A:A1:BE:32:E3:0E:2E:5A:8A:11:7A:53:A0:48
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37322e302f32342d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.72.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:8c:20:b9:d6:ba:2e:ee:fa:5f:8d:ef:02:c0:0d:e1:74:a7:
e5:42:04:60:ae:74:a8:40:7f:3b:06:68:2b:bf:cf:4d:08:05:
31:aa:79:ec:5b:84:a5:2c:fd:fb:59:36:c3:78:5e:09:c5:f1:
77:fe:2b:21:07:ab:0f:75:79:77:ec:de:79:c1:c6:7f:33:37:
3f:e2:0c:ed:45:2e:57:2d:8e:a9:0f:25:86:db:48:65:2f:44:
be:9c:10:7d:c8:fc:58:78:17:ad:ca:4f:10:46:e1:48:81:ac:
7e:fb:e0:e5:a6:b3:ef:8b:9c:67:fa:80:a7:25:16:1a:3a:88:
1f:fe:b1:fd:ae:e7:33:c9:4b:46:53:8f:8d:1f:26:cb:3c:9e:
03:d1:8f:18:93:54:68:03:6e:52:a2:f4:a4:04:ba:63:d9:58:
ba:78:4d:d6:4b:80:2d:a4:ba:94:b8:a4:49:df:fa:24:ea:ba:
78:2f:75:f7:19:c4:c5:33:6e:bb:ae:3c:5a:d1:df:f4:3c:16:
cf:1e:b0:3c:f2:e9:06:df:dc:56:9e:dd:28:28:02:d6:11:b3:
26:ca:e8:dd:8d:37:8a:4f:8b:44:26:0f:a5:90:ca:33:27:ef:
58:bb:54:54:9f:9a:01:fd:c0:3e:32:c1:a3:4f:07:8e:3f:75:
2a:0f:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:36 2026 by rpki-client