This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa
File: 3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa (raw, json)
Hash identifier: jQefNXFa8HJkacEnYYFGNxbYxaFxu43mD0MIg9MW4QM=
Subject key identifier: 7A:D3:1E:78:B1:9E:BC:92:39:67:4E:05:4D:E5:FE:82:C2:19:A5:46
Certificate issuer: /CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
Certificate serial: 3612DF40A394065F631A62D56CC814C0E5EF7A5F
Authority key identifier: 82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa
Signing time: Tue 06 Jan 2026 19:42:55 +0000
ROA not before: Tue 06 Jan 2026 19:37:55 +0000
ROA not after: Tue 05 Jan 2027 19:42:55 +0000
asID: 271855
IP address blocks: 181.191.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl
rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:12:df:40:a3:94:06:5f:63:1a:62:d5:6c:c8:14:c0:e5:ef:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
Validity
Not Before: Jan 6 19:37:55 2026 GMT
Not After : Jan 5 19:42:55 2027 GMT
Subject: CN=7AD31E78B19EBC9239674E054DE5FE82C219A546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:f3:92:fa:75:de:74:8e:13:c9:4f:bf:39:
fa:47:99:62:7e:ae:25:88:95:01:90:fc:4a:47:84:
1f:a5:a4:a3:b6:ec:cf:8e:76:d3:7e:fe:16:0c:76:
96:87:7b:fa:4f:a6:31:db:ae:03:78:3d:b9:05:ad:
7a:fb:73:42:53:29:5b:6c:1b:3f:63:54:2e:08:36:
fa:4a:64:c7:c0:32:39:6a:4c:46:1c:bd:a4:07:18:
12:b5:1b:a4:21:de:91:7d:13:3b:6a:65:4d:95:83:
9b:9c:00:2d:36:13:c3:82:22:07:db:92:d6:70:27:
17:32:d9:dc:13:28:5e:39:02:41:d4:68:9e:01:37:
e2:cc:1d:4f:91:9a:cd:6e:6f:e9:6c:fb:6e:c7:8b:
e6:34:93:fd:5c:d9:cb:56:d6:6e:fb:4b:42:56:b2:
a8:b1:1c:e9:0a:5a:d6:cf:ce:d6:ce:87:2b:d2:86:
91:06:44:5b:4b:20:1d:b9:94:d6:fe:23:01:fb:09:
a1:df:62:ef:52:94:7e:b5:f9:6a:f9:5e:00:0f:5b:
09:4e:be:18:5f:d5:bb:e9:a8:82:6f:15:bd:2b:e1:
64:c8:ef:f6:24:9b:3e:40:03:57:73:1c:04:fc:be:
3c:18:db:06:42:7f:63:f2:9a:dc:c4:f4:dc:d8:64:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D3:1E:78:B1:9E:BC:92:39:67:4E:05:4D:E5:FE:82:C2:19:A5:46
X509v3 Authority Key Identifier:
keyid:82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.224.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:6e:40:5e:36:cf:0d:99:e9:59:e0:28:f5:cb:f7:55:e8:af:
23:8a:9e:37:9b:37:79:60:9a:f9:5a:22:05:e5:9d:ce:ec:68:
96:35:7b:6d:17:d1:43:05:5b:be:5a:8c:94:77:e8:23:72:fe:
5d:02:0b:37:e3:44:75:1c:48:38:e5:29:16:4c:6c:c6:d9:4b:
05:71:b8:4f:da:fb:cc:2e:d7:e1:33:54:97:a7:b0:14:0e:ac:
d7:6f:0e:73:4d:64:f2:0e:0b:fb:a2:f2:f8:3c:37:1c:7c:c8:
f9:e8:7e:d4:9d:f4:f6:17:f7:01:7d:57:39:5c:62:7e:b5:7c:
bf:d7:db:cb:44:12:2b:dd:72:f3:df:b9:ef:da:20:34:a2:8d:
bc:32:7b:d5:d9:ee:05:a3:51:0d:c6:f1:99:63:20:c7:46:b2:
0d:49:8a:2b:11:e1:76:16:53:36:0a:62:a7:22:f0:16:e9:d9:
f6:51:82:bd:50:e3:8a:33:0b:0f:36:d3:84:cf:bf:2a:c4:94:
b1:18:2d:62:7c:29:8c:41:f5:05:1b:c4:59:14:77:4d:0e:09:
69:e5:1b:8b:3d:41:1a:2f:1f:c9:d3:56:60:b2:9c:91:ab:55:
5f:89:94:c5:88:cc:69:ff:1b:bb:04:0e:06:04:6f:39:9b:20:
91:4e:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:52 2026 by rpki-client