This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32322d3232203d3e203532353130.roa
File: 3133382e3231392e35362e302f32322d3232203d3e203532353130.roa (raw, json)
Hash identifier: SXVNKafzBCzhE5VweOzYATDMcX6/Jpf1Td6yoRNeWQc=
Subject key identifier: 01:91:B4:0F:24:E7:0D:2B:FF:D7:C3:5F:12:68:4C:84:81:50:BA:1E
Certificate issuer: /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial: 4B09E46C7DADC8E71EC7186A22C412629737825F
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32322d3232203d3e203532353130.roa
Signing time: Tue 06 Jan 2026 19:26:20 +0000
ROA not before: Tue 06 Jan 2026 19:21:20 +0000
ROA not after: Tue 05 Jan 2027 19:26:20 +0000
asID: 52510
IP address blocks: 138.219.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 01:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:09:e4:6c:7d:ad:c8:e7:1e:c7:18:6a:22:c4:12:62:97:37:82:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Validity
Not Before: Jan 6 19:21:20 2026 GMT
Not After : Jan 5 19:26:20 2027 GMT
Subject: CN=0191B40F24E70D2BFFD7C35F12684C848150BA1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:1e:9a:54:aa:46:b2:5b:28:af:1d:74:bc:
d7:b9:4c:0f:a7:da:6e:8a:3a:f2:e1:4c:1e:80:df:
10:73:ba:97:07:69:a7:e1:fa:0a:df:48:a7:7f:ad:
99:1a:f9:28:c8:5d:2d:86:99:c4:e0:db:d5:4c:9e:
24:4a:ab:9c:45:9b:b1:3c:c4:f9:24:43:7f:32:be:
44:ef:cd:03:fa:88:e4:19:25:e5:1d:60:4f:f1:3f:
87:f9:a7:26:b9:6b:37:ec:82:3d:34:5e:6e:6c:d2:
c1:37:fb:f2:2f:94:9f:22:72:d3:fd:05:47:74:d1:
97:03:2f:c8:46:a4:94:32:10:2c:b7:bb:66:b1:e1:
20:2c:f1:6c:94:9e:7c:8f:ee:bd:e2:15:eb:07:df:
a0:db:15:fe:a6:49:fd:d7:a5:e0:71:65:e8:a0:ac:
5a:19:b2:c3:55:f5:64:b4:ae:50:d1:66:c9:2c:a2:
16:3c:21:63:a6:84:19:3e:b9:b8:b7:0c:3b:1c:15:
b7:7b:3a:5a:24:95:87:53:3e:34:83:ce:d2:be:6d:
6a:4c:be:51:98:df:16:84:3b:3c:93:24:f5:de:ca:
ef:b9:22:5a:05:05:b3:73:ad:0a:9f:ec:4a:ab:50:
0d:18:b3:fa:50:f3:cb:8b:dc:4a:c9:eb:6b:bb:00:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:91:B4:0F:24:E7:0D:2B:FF:D7:C3:5F:12:68:4C:84:81:50:BA:1E
X509v3 Authority Key Identifier:
keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32322d3232203d3e203532353130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.56.0/22
Signature Algorithm: sha256WithRSAEncryption
85:61:c7:7d:cb:44:ee:92:5e:11:9a:5c:f0:e2:cf:c1:03:28:
13:f4:28:3b:f4:6a:c0:34:64:af:38:c1:06:9a:e6:79:f7:15:
1a:8d:7c:f6:d0:3b:05:85:dc:5b:8f:98:b3:15:0d:aa:de:74:
24:b1:fe:9a:cb:39:96:e3:8a:ca:46:a6:a8:c8:83:86:61:ba:
2e:a6:b9:a6:28:39:e1:c1:5c:d8:46:c9:e8:e8:37:3a:17:15:
b7:1f:a3:77:66:82:6a:b0:aa:1e:cf:13:09:ce:22:3c:ef:23:
0e:7d:6c:ef:2e:59:6a:96:2a:d8:a0:07:ca:dd:51:a7:72:2c:
2c:40:3c:5f:cd:f3:33:dc:87:e9:c3:1a:74:e1:5c:cf:c7:f0:
a4:fe:9b:79:30:e3:2a:74:45:b5:be:66:e6:e5:01:95:b7:ed:
1c:90:11:2f:0a:46:6f:c2:3d:56:1f:f7:33:b2:9a:b2:ae:32:
70:ca:e1:5a:eb:90:0a:3d:2f:d2:4d:d3:8d:0d:83:02:a1:0a:
f2:ae:f2:ef:c2:71:36:4d:b2:81:08:04:19:96:46:f6:3c:cf:
04:65:da:a3:96:23:06:f1:c6:75:45:8f:59:16:0b:35:ae:a9:
66:e5:cd:8e:4f:b5:95:e7:ba:a2:99:d1:36:69:2b:cd:86:16:
db:92:d6:7e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSwnkbH2tyOcexxhqIsQSYpc3gl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYzNkQ0Q0JFREJFN0EwRjRENDNEQzE2MjFERTNEMTkz
NjY0NUYzRDAeFw0yNjAxMDYxOTIxMjBaFw0yNzAxMDUxOTI2MjBaMDMxMTAvBgNV
BAMTKDAxOTFCNDBGMjRFNzBEMkJGRkQ3QzM1RjEyNjg0Qzg0ODE1MEJBMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dR6aVKpGslsorx10vNe5TA+n
2m6KOvLhTB6A3xBzupcHaafh+grfSKd/rZka+SjIXS2GmcTg29VMniRKq5xFm7E8
xPkkQ38yvkTvzQP6iOQZJeUdYE/xP4f5pya5azfsgj00Xm5s0sE3+/IvlJ8ictP9
BUd00ZcDL8hGpJQyECy3u2ax4SAs8WyUnnyP7r3iFesH36DbFf6mSf3XpeBxZeig
rFoZssNV9WS0rlDRZsksohY8IWOmhBk+ubi3DDscFbd7OloklYdTPjSDztK+bWpM
vlGY3xaEOzyTJPXeyu+5IloFBbNzrQqf7EqrUA0Ys/pQ88uL3ErJ62u7AABBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUAZG0DyTnDSv/18NfEmhMhIFQuh4wHwYDVR0j
BBgwFoAUJjbUy+2+eg9NQ9wWId49GTZkXz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTAyNUFERTYzQTkxNzc4OThEN0UxRUYxMTAzMDg5RTgy
RDE4Q0UwNTQxMDUwRjRDODQ5NTE2QTYwRjc3NDIzLzAvMjYzNkQ0Q0JFREJFN0Ew
RjRENDNEQzE2MjFERTNEMTkzNjY0NUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjM2RDRDQkVEQkU3QTBGNEQ0
M0RDMTYyMURFM0QxOTM2NjQ1RjNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREUwMjVBREU2M0E5MTc3ODk4RDdFMUVGMTEwMzA4OUU4MkQxOENFMDU0
MTA1MEY0Qzg0OTUxNkE2MEY3NzQyMy8wLzMxMzMzODJlMzIzMTM5MmUzNTM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM1MzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAorbODAN
BgkqhkiG9w0BAQsFAAOCAQEAhWHHfctE7pJeEZpc8OLPwQMoE/QoO/RqwDRkrzjB
BprmefcVGo189tA7BYXcW4+YsxUNqt50JLH+mss5luOKykamqMiDhmG6Lqa5pig5
4cFc2EbJ6Og3OhcVtx+jd2aCarCqHs8TCc4iPO8jDn1s7y5ZapYq2KAHyt1Rp3Is
LEA8X83zM9yH6cMadOFcz8fwpP6beTDjKnRFtb5m5uUBlbftHJARLwpGb8I9Vh/3
M7Kasq4ycMrhWuuQCj0v0k3TjQ2DAqEK8q7y78JxNk2ygQgEGZZG9jzPBGXao5Yj
BvHGdUWPWRYLNa6pZuXNjk+1lee6opnRNmkrzYYW25LWfg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:59 2026 by rpki-client