This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32302e302e302f31362d3234203d3e203136363239.roa
File: 3139302e32302e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier: k1QOkI26jzTFQmg4UKSJekWvPwlg5EV2nv3EvJtzO/U=
Subject key identifier: 33:A5:40:B6:2F:E5:7B:28:FF:0D:25:6F:E2:C8:04:01:4E:B3:22:EA
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 77ABBF40BD31D5FAFF6F03A93F632CEA5BF4AC2C
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32302e302e302f31362d3234203d3e203136363239.roa
Signing time: Tue 06 Jan 2026 19:24:56 +0000
ROA not before: Tue 06 Jan 2026 19:19:56 +0000
ROA not after: Tue 05 Jan 2027 19:24:56 +0000
asID: 16629
IP address blocks: 190.20.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 14:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ab:bf:40:bd:31:d5:fa:ff:6f:03:a9:3f:63:2c:ea:5b:f4:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Jan 6 19:19:56 2026 GMT
Not After : Jan 5 19:24:56 2027 GMT
Subject: CN=33A540B62FE57B28FF0D256FE2C804014EB322EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:bb:9a:f8:f5:1e:7f:c4:a3:e0:98:e9:ca:
84:2f:6e:85:f2:0a:47:1c:71:bb:19:78:0d:0d:68:
b3:86:14:a0:cc:27:d5:60:87:2d:97:4d:74:ca:a6:
18:3b:a8:7e:84:1a:7f:71:71:46:27:65:5a:90:92:
88:95:95:f1:f4:46:8a:b5:ef:68:ba:35:61:04:2c:
aa:09:31:0d:79:a7:95:e9:1f:8d:2b:e8:cf:8b:a1:
9a:79:86:b7:ff:9c:17:c3:36:79:f0:72:80:d2:2e:
09:0a:55:e4:08:67:b6:93:40:cb:4e:28:94:f1:a9:
a9:29:66:eb:b0:ff:c9:5c:39:fb:9a:64:fa:e2:90:
9f:eb:d4:50:cb:11:e3:c6:6a:65:f9:ab:33:39:57:
3c:c7:f9:33:34:b5:35:68:12:df:e1:09:46:0d:a7:
7a:bd:4e:f1:81:c6:10:da:2f:d2:5b:4f:3d:3f:29:
aa:30:c4:81:28:a2:94:e5:6f:55:ea:49:e8:aa:38:
d0:fd:27:a1:fd:6d:e4:9a:e9:0c:41:bc:ad:a9:a8:
2b:4a:44:d2:36:7f:d2:b8:9c:95:9f:49:3c:bd:1f:
69:27:65:4e:43:c5:a1:25:b8:21:35:7e:84:77:60:
f4:3f:80:5a:a5:3c:20:64:42:a3:16:7d:a0:56:68:
c6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A5:40:B6:2F:E5:7B:28:FF:0D:25:6F:E2:C8:04:01:4E:B3:22:EA
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32302e302e302f31362d3234203d3e203136363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:cf:b4:c5:a5:cb:05:e9:71:77:68:03:69:af:1b:8f:cc:ad:
02:83:00:d5:1f:e4:de:69:97:5b:c9:5e:c1:82:dc:22:ea:ac:
7e:2c:30:ca:9b:ea:c6:09:8f:c6:35:1f:d5:5d:51:5b:3f:16:
b2:7a:4b:1a:2c:63:d1:13:48:ec:6d:11:1f:20:5c:98:db:c2:
ae:90:a5:15:0c:f5:80:80:94:f4:2c:58:cc:de:40:68:db:7d:
ce:b2:ae:16:f2:03:e9:7c:0f:be:56:4a:47:79:e8:35:22:30:
77:a8:92:46:93:c0:f2:a1:52:dd:00:6b:56:e8:e9:a0:40:e6:
55:4f:d4:49:11:06:90:9e:08:e3:aa:18:59:ef:df:ef:7e:5b:
ab:ed:cf:40:1b:f9:83:3f:7e:ed:30:08:2e:20:85:f3:41:62:
81:22:3b:f9:b1:9b:dc:6c:a0:04:2e:5b:11:30:3e:4e:c6:12:
35:24:7d:bc:ab:bd:b9:ef:fd:55:71:92:1f:63:52:15:fe:38:
8d:8b:0b:8d:c9:71:1c:d7:b6:90:20:a8:82:7a:14:22:eb:93:
0e:78:36:76:95:90:38:1d:1e:d9:09:c6:66:b0:2f:7c:94:2a:
32:c6:24:2f:2b:91:cf:bc:af:0a:31:5d:50:74:38:9d:9b:29:
83:8a:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:20 2026 by rpki-client