This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32322d3232203d3e20323635373731.roa
File: 3132382e3230312e3130382e302f32322d3232203d3e20323635373731.roa (raw, json)
Hash identifier: XZO27XRGi9VF78gBLMpz2VyQVgx3RJT+PGe0s2GrZKk=
Subject key identifier: 99:35:68:2C:95:51:49:A5:E6:3E:2E:79:58:0A:2B:1F:9A:F6:E8:6C
Certificate issuer: /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Certificate serial: 19ED1E0C9D0DD818F4E6A8A12E63101FA1F5CF35
Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32322d3232203d3e20323635373731.roa
Signing time: Tue 06 Jan 2026 19:23:45 +0000
ROA not before: Tue 06 Jan 2026 19:18:45 +0000
ROA not after: Tue 05 Jan 2027 19:23:45 +0000
asID: 265771
IP address blocks: 128.201.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ed:1e:0c:9d:0d:d8:18:f4:e6:a8:a1:2e:63:10:1f:a1:f5:cf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Validity
Not Before: Jan 6 19:18:45 2026 GMT
Not After : Jan 5 19:23:45 2027 GMT
Subject: CN=9935682C955149A5E63E2E79580A2B1F9AF6E86C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:54:cb:4f:4e:48:8d:82:b1:29:7b:ba:7e:
8c:68:9e:75:eb:aa:b9:8f:89:de:49:e5:6d:4e:e2:
78:40:7e:44:8f:63:fa:40:e7:d0:66:df:68:b0:bd:
41:3d:61:31:7e:64:bf:b7:52:36:9d:d8:2f:10:c9:
58:bd:50:9e:17:8a:56:d3:00:67:ac:2a:11:f5:df:
38:af:0e:32:2f:7a:fa:19:f5:64:da:fe:dd:f4:8c:
a7:fb:fe:7b:60:29:4c:74:fb:4b:a7:aa:38:8a:c4:
b1:7b:c5:a9:91:6f:13:15:ff:94:34:f1:a2:8c:8d:
69:77:62:0d:9a:ee:fa:a3:e9:bd:36:01:79:f3:6f:
78:e0:21:b6:43:9d:01:16:7d:bd:41:f7:f4:82:bd:
1f:71:6b:df:94:74:99:09:57:a9:d6:a9:43:0b:52:
d6:b1:75:0e:6d:f9:1f:8b:04:f3:8d:7e:e2:85:9e:
ba:44:1c:97:93:90:76:5a:95:bf:00:63:d7:77:98:
7a:e5:f9:4c:af:48:f9:25:70:9a:2d:a9:8f:68:c9:
48:c1:4b:0e:ef:9c:02:65:45:53:24:b9:b0:bf:71:
b9:85:d9:90:df:b5:cf:5c:bd:b4:47:3f:34:1a:f7:
0c:fd:af:ca:d2:91:7c:3a:7f:52:12:c1:4b:68:38:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:35:68:2C:95:51:49:A5:E6:3E:2E:79:58:0A:2B:1F:9A:F6:E8:6C
X509v3 Authority Key Identifier:
keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32322d3232203d3e20323635373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:84:0a:14:d5:95:17:f6:b8:e5:1c:18:19:8d:15:87:37:3e:
08:a2:bd:5d:83:86:36:59:55:4d:67:85:bb:4f:5c:6d:01:98:
00:95:c5:a2:47:08:ca:e2:43:0c:12:d0:6f:fd:5a:2a:43:0b:
16:c0:47:a5:44:f1:0f:5f:55:56:e1:0a:8d:24:4e:9b:56:9d:
19:51:c0:62:b1:1a:7f:c3:0f:7e:12:d4:77:ad:20:26:52:48:
73:50:e9:03:e2:40:4d:7e:7c:11:df:58:64:f7:7f:07:17:db:
d9:62:a8:df:53:df:d1:29:30:08:a2:b5:d8:41:8f:51:b5:a8:
b6:29:ff:d5:42:84:53:f1:b7:11:0d:4e:b7:8b:11:f2:64:ef:
b3:aa:89:67:20:ed:9b:cc:69:53:fb:d3:9a:b1:1c:bd:52:c3:
37:06:95:02:e7:9f:d4:99:e5:ff:f4:12:03:9e:7b:8b:5f:c6:
d5:df:8d:55:f3:d3:e2:bb:58:5b:75:ae:99:64:b7:50:7c:06:
7a:7b:a6:7c:04:74:a5:b8:e0:f5:62:68:d0:a7:82:fa:02:9e:
82:04:74:82:48:0a:c4:25:95:c7:36:8d:7f:7c:b8:0c:f5:5e:
23:71:60:29:5b:98:d4:4a:c5:20:9a:29:1a:6c:ed:93:00:ed:
49:04:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:55 2026 by rpki-client