This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/3139302e3137312e37362e302f32322d3234203d3e20323731373932.roa
File: 3139302e3137312e37362e302f32322d3234203d3e20323731373932.roa (raw, json)
Hash identifier: 2sQRkT8irIUEQryd4rdNExi1Dc9fHXdA0ynWGAu1BWU=
Subject key identifier: C0:6A:CF:31:AA:AD:DF:6F:AB:45:AE:FD:71:91:FA:8C:2A:40:E7:DB
Certificate issuer: /CN=0A72DC25D420B15DD00FF3323CB446E7A055F3BE
Certificate serial: 58CDBCC19CCB1D9AAC6C57B505182338D9C0830B
Authority key identifier: 0A:72:DC:25:D4:20:B1:5D:D0:0F:F3:32:3C:B4:46:E7:A0:55:F3:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/3139302e3137312e37362e302f32322d3234203d3e20323731373932.roa
Signing time: Tue 06 Jan 2026 19:14:38 +0000
ROA not before: Tue 06 Jan 2026 19:09:38 +0000
ROA not after: Tue 05 Jan 2027 19:14:38 +0000
asID: 271792
IP address blocks: 190.171.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.crl
rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:cd:bc:c1:9c:cb:1d:9a:ac:6c:57:b5:05:18:23:38:d9:c0:83:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A72DC25D420B15DD00FF3323CB446E7A055F3BE
Validity
Not Before: Jan 6 19:09:38 2026 GMT
Not After : Jan 5 19:14:38 2027 GMT
Subject: CN=C06ACF31AAADDF6FAB45AEFD7191FA8C2A40E7DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:98:a3:0a:8d:5d:74:a9:59:4f:71:f6:c1:
c3:d7:8c:c3:6f:9b:72:9d:ee:b6:e9:79:b5:df:03:
5f:bc:fe:13:c5:66:d4:50:50:5e:5d:35:db:be:b1:
6f:33:aa:e4:43:c3:d1:6c:2e:6c:e1:b8:06:3d:7e:
9b:54:a5:64:f9:4c:b3:73:4a:59:76:5a:d9:cd:df:
43:62:5e:f3:8f:bf:bc:dc:a1:a7:05:56:30:d0:61:
08:bd:71:85:9b:21:0d:a9:de:19:e0:09:ef:d6:c5:
b4:2a:f0:43:2e:4e:9b:fe:30:cc:0a:f9:03:bd:62:
eb:a6:f7:c4:53:04:57:d4:53:02:de:12:0b:a1:78:
76:1a:70:36:e8:68:61:1a:db:fa:32:4d:82:b6:96:
d1:30:ad:fa:17:c9:0b:5d:25:14:d7:9e:52:62:1b:
45:fa:88:53:50:08:50:b8:34:e6:d8:95:59:03:9b:
5a:64:53:b7:5d:20:80:4d:f2:e1:67:10:30:0b:6c:
af:9b:af:dc:f5:9c:49:ee:28:32:09:0d:13:fe:d7:
47:01:09:02:08:bc:43:c4:8f:8e:f9:1a:2d:3d:f8:
48:00:db:fa:49:0c:f5:07:2b:64:97:fe:4c:26:2a:
43:79:bc:7a:a0:99:74:18:38:d7:75:a3:c9:d4:54:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6A:CF:31:AA:AD:DF:6F:AB:45:AE:FD:71:91:FA:8C:2A:40:E7:DB
X509v3 Authority Key Identifier:
keyid:0A:72:DC:25:D4:20:B1:5D:D0:0F:F3:32:3C:B4:46:E7:A0:55:F3:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/3139302e3137312e37362e302f32322d3234203d3e20323731373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.171.76.0/22
Signature Algorithm: sha256WithRSAEncryption
74:a3:44:25:73:01:14:c6:e8:75:37:ac:6d:c3:f1:83:9f:4a:
09:e6:d7:48:2a:42:e9:29:29:6b:06:41:a6:e1:e6:2e:dd:54:
62:91:78:12:e8:1a:c8:8f:38:27:ef:42:39:bf:60:63:4e:41:
76:df:ac:78:96:d5:60:79:e6:bd:88:bd:b1:39:ac:6d:53:d0:
a7:dc:84:ea:3e:6a:93:9d:16:b0:6f:ec:d0:2f:45:77:e4:77:
21:81:0f:30:98:a6:13:18:3f:77:cf:a0:ec:23:0d:66:94:5c:
41:10:88:40:08:49:86:d8:69:49:6a:97:44:3d:89:ef:51:a9:
27:20:c7:3b:9e:82:30:1f:21:f3:54:81:39:15:54:fe:bd:29:
45:3a:44:75:fa:b8:93:32:70:bc:c6:a3:49:d1:b1:e7:10:e5:
50:15:61:1d:c6:f3:e0:4a:c4:66:74:3d:5c:92:ff:86:aa:bc:
72:bb:31:59:5e:3e:7c:f2:e0:bd:45:c2:14:9d:b2:26:cb:14:
8e:03:c3:57:cc:1e:44:42:f1:a6:c9:c2:4e:a4:b8:7b:6a:66:
dc:3a:8c:02:9f:a6:94:e6:6e:a7:b8:1c:d0:0a:d1:4e:89:36:
88:24:a8:9c:46:f0:3b:57:96:c2:a2:7c:a7:f3:c7:bd:86:e5:
23:b7:ff:2a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWM28wZzLHZqsbFe1BRgjONnAgwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE3MkRDMjVENDIwQjE1REQwMEZGMzMyM0NCNDQ2RTdB
MDU1RjNCRTAeFw0yNjAxMDYxOTA5MzhaFw0yNzAxMDUxOTE0MzhaMDMxMTAvBgNV
BAMTKEMwNkFDRjMxQUFBRERGNkZBQjQ1QUVGRDcxOTFGQThDMkE0MEU3REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+ZijCo1ddKlZT3H2wcPXjMNv
m3Kd7rbpebXfA1+8/hPFZtRQUF5dNdu+sW8zquRDw9FsLmzhuAY9fptUpWT5TLNz
Sll2WtnN30NiXvOPv7zcoacFVjDQYQi9cYWbIQ2p3hngCe/WxbQq8EMuTpv+MMwK
+QO9Yuum98RTBFfUUwLeEguheHYacDboaGEa2/oyTYK2ltEwrfoXyQtdJRTXnlJi
G0X6iFNQCFC4NObYlVkDm1pkU7ddIIBN8uFnEDALbK+br9z1nEnuKDIJDRP+10cB
CQIIvEPEj475Gi09+EgA2/pJDPUHK2SX/kwmKkN5vHqgmXQYONd1o8nUVMIRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwGrPMaqt32+rRa79cZH6jCpA59swHwYDVR0j
BBgwFoAUCnLcJdQgsV3QD/MyPLRG56BV874wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTg2RkY3MTk0RkIyMDAwQTY0QzIzQzkzRTA0OEE2MUYx
NjcyQzFDRDZDNUZCMjlFQUQzNzk4MDY0MUFGQ0E3LzAvMEE3MkRDMjVENDIwQjE1
REQwMEZGMzMyM0NCNDQ2RTdBMDU1RjNCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTcyREMyNUQ0MjBCMTVERDAw
RkYzMzIzQ0I0NDZFN0EwNTVGM0JFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk4NkZGNzE5NEZCMjAwMEE2NEMyM0M5M0UwNDhBNjFGMTY3MkMxQ0Q2
QzVGQjI5RUFEMzc5ODA2NDFBRkNBNy8wLzMxMzkzMDJlMzEzNzMxMmUzNzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzczOTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvqtM
MA0GCSqGSIb3DQEBCwUAA4IBAQB0o0QlcwEUxuh1N6xtw/GDn0oJ5tdIKkLpKSlr
BkGm4eYu3VRikXgS6BrIjzgn70I5v2BjTkF236x4ltVgeea9iL2xOaxtU9Cn3ITq
PmqTnRawb+zQL0V35HchgQ8wmKYTGD93z6DsIw1mlFxBEIhACEmG2GlJapdEPYnv
UaknIMc7noIwHyHzVIE5FVT+vSlFOkR1+riTMnC8xqNJ0bHnEOVQFWEdxvPgSsRm
dD1ckv+GqrxyuzFZXj588uC9RcIUnbImyxSOA8NXzB5EQvGmycJOpLh7ambcOowC
n6aU5m6nuBzQCtFOiTaIJKicRvA7V5bConyn88e9huUjt/8q
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:31 2026 by rpki-client