This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/3133312e3232312e34332e302f32342d3234203d3e20323632313836.roa
File: 3133312e3232312e34332e302f32342d3234203d3e20323632313836.roa (raw, json)
Hash identifier: qWlLIYcxdRM2RkjEi8ul0wgJvQbgOLC3bAZZ7IPXSQ8=
Subject key identifier: 76:35:14:FA:D2:F9:7E:CE:97:8C:5D:05:D7:D1:13:71:6B:1F:68:78
Certificate issuer: /CN=8995F63E387603C84272761C6F4D5C08A0EC0161
Certificate serial: 3F258FB2EDD911483D009380AB938C450D27AC5D
Authority key identifier: 89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/3133312e3232312e34332e302f32342d3234203d3e20323632313836.roa
Signing time: Tue 06 Jan 2026 19:42:37 +0000
ROA not before: Tue 06 Jan 2026 19:37:37 +0000
ROA not after: Tue 05 Jan 2027 19:42:37 +0000
asID: 262186
IP address blocks: 131.221.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl
rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 04:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:25:8f:b2:ed:d9:11:48:3d:00:93:80:ab:93:8c:45:0d:27:ac:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8995F63E387603C84272761C6F4D5C08A0EC0161
Validity
Not Before: Jan 6 19:37:37 2026 GMT
Not After : Jan 5 19:42:37 2027 GMT
Subject: CN=763514FAD2F97ECE978C5D05D7D113716B1F6878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:ea:ce:4c:25:87:0c:14:8f:c9:2c:c5:88:
a2:a0:07:61:ed:a4:c9:5c:97:00:a6:e9:a7:4f:7a:
ec:92:8d:1e:df:56:e5:c0:3a:e7:27:55:a3:d7:6a:
68:35:93:ee:a0:86:c4:a1:49:e8:21:4e:fd:8a:db:
5e:db:25:78:db:ba:f0:91:ff:9b:aa:82:06:b8:11:
f6:24:17:aa:8d:e5:d5:ef:03:0d:3e:e7:22:3e:26:
4e:2f:1f:91:ee:e4:b1:67:1b:5e:76:cf:fb:9e:56:
07:8e:4a:af:d8:1c:7c:28:d5:94:6c:ec:1e:73:cf:
ef:a9:ea:7f:66:d6:52:01:dd:0e:bf:46:f1:ec:47:
c5:dc:c1:af:60:1d:b3:07:61:90:e6:6c:3b:2a:a6:
69:c1:6c:cc:81:ed:3c:2a:4a:f5:54:e7:48:68:7e:
40:ef:c6:65:70:55:46:e5:2f:b4:a3:07:65:b6:e6:
05:fe:14:0e:5f:33:f7:8c:fc:7c:38:4a:fe:07:b8:
41:1a:37:a4:b3:03:4f:15:51:8e:0f:35:80:9b:16:
95:88:31:2e:db:30:8a:fc:c9:59:7f:34:ef:af:a7:
a4:ee:b0:38:78:ab:1a:68:55:ae:a0:39:f7:34:a1:
5d:8f:3b:d9:e9:7c:e8:dd:3a:e2:38:0d:ca:7c:e2:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:35:14:FA:D2:F9:7E:CE:97:8C:5D:05:D7:D1:13:71:6B:1F:68:78
X509v3 Authority Key Identifier:
keyid:89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/3133312e3232312e34332e302f32342d3234203d3e20323632313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:46:fa:96:b9:19:c6:2b:35:7d:b0:f8:89:66:dd:52:13:a8:
6c:97:1b:c4:b1:88:8d:cd:d6:9d:ad:66:3c:43:85:b2:4c:b9:
8d:cb:0d:2f:ec:fe:0f:63:2e:1f:da:fb:32:5c:e7:12:84:c0:
48:e1:0f:37:d7:a2:a1:1e:58:3c:66:71:11:50:79:f6:23:62:
e5:61:4d:16:f9:ad:31:45:95:67:8a:9b:57:b8:6e:ee:e5:63:
40:92:fa:b6:07:f9:37:dc:fc:9a:83:6c:93:da:9f:db:ff:ca:
a4:38:46:4c:e8:39:bb:f1:8b:99:f4:5a:fe:30:be:2b:b2:a1:
12:dc:70:b0:57:20:52:df:4d:b2:0c:53:b0:d1:a4:de:d2:08:
bd:5a:e7:7b:6e:d5:80:38:fa:02:1e:4b:88:2c:87:08:c6:76:
ca:87:5f:a5:d1:23:e5:a7:38:8f:00:59:c9:d7:43:93:e7:2f:
23:4e:41:f9:9a:c7:9c:09:49:4e:ea:70:58:16:f7:aa:7a:af:
c8:d8:9e:90:23:ec:1f:1c:c2:7f:da:08:5c:e6:5a:07:77:c1:
02:e4:32:e5:74:0c:e3:de:08:f1:c3:95:18:79:9d:6f:c9:d8:
d9:a4:c4:e4:00:73:2a:23:01:9b:3c:4f:d6:4a:2d:e8:2e:7f:
0f:1c:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:51 2026 by rpki-client