This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132322e302f32332d3234203d3e20323636383436.roa
File: 3133382e302e3132322e302f32332d3234203d3e20323636383436.roa (raw, json)
Hash identifier: 7B3Hv/roh7X21Z757Apa9xRYrwmO8MUdWeujjqF/Auw=
Subject key identifier: C0:96:07:3D:97:09:13:DA:AE:A3:8C:8A:D9:46:EF:C8:BF:7C:2A:27
Certificate issuer: /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial: 6E31309B601D737BFC9C3FEEAF4DCB1AE76DA755
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132322e302f32332d3234203d3e20323636383436.roa
Signing time: Tue 06 Jan 2026 19:46:14 +0000
ROA not before: Tue 06 Jan 2026 19:41:14 +0000
ROA not after: Tue 05 Jan 2027 19:46:14 +0000
asID: 266846
IP address blocks: 138.0.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:31:30:9b:60:1d:73:7b:fc:9c:3f:ee:af:4d:cb:1a:e7:6d:a7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Validity
Not Before: Jan 6 19:41:14 2026 GMT
Not After : Jan 5 19:46:14 2027 GMT
Subject: CN=C096073D970913DAAEA38C8AD946EFC8BF7C2A27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:7a:8c:b4:1f:47:17:30:66:99:d9:9a:78:
a4:94:22:f3:45:ec:79:37:7e:39:c2:02:ff:b3:f1:
c1:dd:80:ee:58:96:8c:34:43:a9:2c:fc:6c:b3:cf:
9b:e5:87:07:98:f5:19:65:3f:31:45:7d:e3:9a:09:
d3:49:4b:76:eb:5f:d9:c8:bb:6c:aa:00:8b:3b:5c:
e6:dd:80:2f:4a:96:3f:98:6c:02:d1:42:6c:7d:89:
1e:bc:27:b8:e6:aa:3f:be:16:2c:e6:c5:89:5a:d4:
2c:e7:c3:71:ed:59:56:5d:bc:61:3d:9e:6a:30:00:
a9:ca:78:c5:8e:2b:40:52:7e:3d:45:92:84:eb:cb:
57:62:53:0d:d9:ed:bc:54:7a:b4:62:84:15:f9:d5:
64:e6:52:84:dc:27:9d:01:41:94:8a:36:8f:98:f4:
2d:44:fa:6e:ab:78:f9:4c:ef:dd:b9:b5:b0:4f:dc:
84:10:9d:2f:ee:85:b1:66:2d:1e:a8:08:99:d1:4b:
16:d0:84:1e:09:44:38:5c:cf:37:3c:50:66:a5:61:
b4:11:13:ff:bf:7f:b8:d6:58:5f:ee:4b:0e:80:f7:
95:9f:2a:48:82:5b:d6:ba:10:81:f3:a2:b1:e8:da:
ac:89:39:c4:77:4d:0e:02:e2:66:0b:5c:41:22:85:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:96:07:3D:97:09:13:DA:AE:A3:8C:8A:D9:46:EF:C8:BF:7C:2A:27
X509v3 Authority Key Identifier:
keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132322e302f32332d3234203d3e20323636383436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.122.0/23
Signature Algorithm: sha256WithRSAEncryption
22:60:da:7f:49:8a:3a:63:c9:c1:ac:c8:e8:59:68:81:9b:f8:
12:ac:e3:6f:c7:16:d6:ce:9d:35:9b:f6:c5:15:3c:5f:0c:0f:
1b:d7:91:c0:89:94:78:5f:c7:8e:0d:2c:18:7b:da:e3:4d:14:
b8:28:18:8f:36:57:a6:8e:48:61:20:7e:db:b0:4a:38:a5:7b:
2c:5c:42:1b:91:f9:36:c9:55:2b:61:46:b9:77:a8:10:9f:13:
0a:38:fa:c6:7b:b5:35:d6:0a:2d:39:19:45:cc:09:5c:7a:83:
1d:4b:7e:0c:90:a3:07:a4:52:79:78:aa:03:61:1a:d4:20:8d:
2b:9c:ea:ab:71:a9:e7:d6:7b:93:4c:61:51:c3:ac:cf:59:a3:
9e:86:20:88:90:81:bd:69:d7:c4:5f:1b:41:08:dd:25:d4:81:
94:13:00:f3:15:5f:8a:f1:a1:92:83:b1:8c:e9:4a:fc:a0:3c:
02:91:7c:e8:73:c2:ab:2e:13:71:14:32:2f:91:79:d2:04:3b:
3c:0b:a7:c8:61:55:ed:0c:48:a5:6a:3b:8c:66:b8:3c:92:d4:
e6:90:23:9d:bc:a3:4e:65:44:17:dd:05:7a:b7:91:d4:2e:b5:
85:4c:46:ca:d4:08:71:df:ac:da:c2:e4:7a:a4:af:2a:e1:f1:
13:d0:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:35 2026 by rpki-client