This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134342e302f32342d3234203d3e203332303334.roa
File: 3133382e33362e3134342e302f32342d3234203d3e203332303334.roa (raw, json)
Hash identifier: M+DQ0r/uKzwqqvchXTrYFo02SS0CULfxfShAbwQfD3k=
Subject key identifier: FE:7B:F7:38:40:7A:F0:98:79:C6:47:CE:6C:E6:72:A5:F7:3B:77:C3
Certificate issuer: /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial: 6BD56D079D9FAE9CC5C0C6E963549A83DF3D2BCE
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134342e302f32342d3234203d3e203332303334.roa
Signing time: Tue 06 Jan 2026 19:15:39 +0000
ROA not before: Tue 06 Jan 2026 19:10:39 +0000
ROA not after: Tue 05 Jan 2027 19:15:39 +0000
asID: 32034
IP address blocks: 138.36.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d5:6d:07:9d:9f:ae:9c:c5:c0:c6:e9:63:54:9a:83:df:3d:2b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
Validity
Not Before: Jan 6 19:10:39 2026 GMT
Not After : Jan 5 19:15:39 2027 GMT
Subject: CN=FE7BF738407AF09879C647CE6CE672A5F73B77C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:12:76:45:69:74:55:1e:64:9f:6c:ba:8d:
02:b9:03:3a:21:b6:8b:13:ef:8b:03:89:8b:79:6a:
05:9c:3a:ad:d9:e8:2e:ba:8c:32:9c:e1:3c:0d:d9:
72:6a:a0:c7:4d:3e:71:77:1f:13:e0:79:06:7d:cb:
d3:64:a2:1d:2f:9d:e9:a8:c6:16:33:e2:4a:0d:0a:
24:00:a7:41:de:f6:bb:e8:5e:06:8e:23:32:78:8c:
64:ae:e9:5d:63:b0:7c:25:70:66:89:61:21:e1:f8:
ea:04:f6:ea:40:b7:06:9a:ae:6f:56:a2:88:1f:b8:
cd:cd:2a:ff:36:d8:ec:44:55:89:51:53:c3:19:fc:
17:1f:f4:f6:39:6d:65:1f:89:e2:2e:4a:fb:c2:82:
60:da:72:9a:97:f1:41:52:7c:a2:4d:43:af:ef:61:
cb:15:62:1c:74:98:72:26:9c:31:41:10:d4:fc:b0:
5b:3d:e1:da:ab:e5:7c:61:c0:f9:fb:86:bc:a5:b2:
2e:2a:26:1f:0c:e7:9b:c9:4f:c6:fd:40:39:08:41:
0a:1b:c0:0d:e7:01:93:bb:fe:b5:21:90:e1:0b:ca:
2f:8f:c9:ad:08:1d:87:a0:7d:99:53:fe:07:7b:94:
6f:6d:51:ea:df:13:7d:16:0f:3a:ba:4a:ba:90:8f:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:F7:38:40:7A:F0:98:79:C6:47:CE:6C:E6:72:A5:F7:3B:77:C3
X509v3 Authority Key Identifier:
keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134342e302f32342d3234203d3e203332303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:60:21:23:8f:fd:e1:4d:fe:6d:ba:37:d8:3d:e7:8a:a2:88:
dc:a7:46:0f:7f:74:10:76:04:f2:2d:3a:db:e5:25:32:34:8e:
59:45:89:b2:52:ba:24:7c:ca:92:a5:d8:67:18:89:a7:98:92:
e8:e7:bd:45:af:e5:06:5b:68:9f:ca:9c:fe:bd:f2:a5:8b:35:
b8:de:ce:7f:de:ee:8b:aa:2c:8c:19:29:64:8d:53:65:02:bd:
5e:d5:93:b4:b3:d6:86:c5:a2:ee:22:12:21:58:7e:d4:b2:bf:
b1:96:4c:89:03:94:68:20:56:ec:60:aa:29:5f:ac:2c:97:4d:
1f:76:e9:af:56:42:00:38:7f:68:19:10:d6:3c:3e:e8:a9:69:
e9:2f:74:cd:8c:07:64:86:05:e6:c3:b6:1b:05:30:e9:ed:66:
63:ce:61:ee:a9:3a:dc:67:e9:b2:cf:a2:2a:64:93:5c:d6:cc:
cc:93:42:2d:51:90:55:15:10:17:e0:89:2c:81:24:22:ef:72:
9a:1e:aa:39:cd:c8:54:ca:1e:5d:a5:6e:a1:32:31:dd:8e:6e:
1a:f8:4f:7c:36:a5:6f:31:7d:76:51:b9:11:3e:c8:da:70:fd:
55:8f:d5:07:40:28:69:b9:fa:d9:0a:48:ae:47:82:7a:d7:1d:
65:fe:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:52 2026 by rpki-client