This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32312d3231203d3e20323633323039.roa
File: 3139312e39372e37322e302f32312d3231203d3e20323633323039.roa (raw, json)
Hash identifier: p5h6xprOissjQ/gvQPqB/HC1bG+oFVnR1L8OeoIVQFE=
Subject key identifier: 0B:85:15:D8:3A:65:07:0D:9B:B9:5E:46:7E:6F:84:35:A2:CD:F6:DE
Certificate issuer: /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial: 09A3E3CA147922CD22BBA6097FBC04B0E19CB463
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32312d3231203d3e20323633323039.roa
Signing time: Tue 06 Jan 2026 19:23:28 +0000
ROA not before: Tue 06 Jan 2026 19:18:28 +0000
ROA not after: Tue 05 Jan 2027 19:23:28 +0000
asID: 263209
IP address blocks: 191.97.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a3:e3:ca:14:79:22:cd:22:bb:a6:09:7f:bc:04:b0:e1:9c:b4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Validity
Not Before: Jan 6 19:18:28 2026 GMT
Not After : Jan 5 19:23:28 2027 GMT
Subject: CN=0B8515D83A65070D9BB95E467E6F8435A2CDF6DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:84:c6:e4:72:71:40:2b:ea:7e:4f:2b:b1:
cd:91:e2:de:3d:8d:d0:6c:ca:d9:45:ca:86:28:3b:
0b:92:6f:75:a6:c8:90:70:21:46:73:b9:75:2e:e1:
9d:36:51:9f:f9:53:5b:bc:d0:3a:20:62:d5:57:81:
b2:34:24:89:5e:34:40:15:99:3d:bb:75:8c:c4:fc:
0a:dc:26:f3:d8:b0:6d:c9:8b:3f:29:d4:de:4a:c5:
80:0d:51:aa:61:7d:c5:46:03:65:a4:8b:0d:93:77:
ef:bd:39:dd:0f:5d:b1:b7:93:d1:dd:05:fe:94:26:
9b:a4:da:c0:c6:c2:34:3b:82:af:a8:09:68:5b:99:
1d:20:cc:4e:a1:8a:23:b6:cf:0f:35:35:31:79:57:
04:aa:de:ad:79:c3:14:c0:55:55:5f:34:6e:cb:f0:
51:c5:23:fa:c4:ba:88:9b:a2:83:ce:48:fe:36:ab:
da:bf:82:f8:30:01:31:e4:63:9d:52:28:c9:b5:ae:
d6:a6:96:3e:77:1f:00:f3:9b:35:83:8a:b9:3f:7c:
aa:1d:da:fc:27:92:76:36:56:96:e1:dc:e9:23:93:
61:56:dd:dd:9f:3a:e3:62:3f:c2:f2:a0:9f:20:d8:
68:1f:d2:a7:5f:a1:fc:40:92:48:3a:12:8c:0c:8e:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:15:D8:3A:65:07:0D:9B:B9:5E:46:7E:6F:84:35:A2:CD:F6:DE
X509v3 Authority Key Identifier:
keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32312d3231203d3e20323633323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.72.0/21
Signature Algorithm: sha256WithRSAEncryption
86:be:e0:f6:ae:12:95:3a:05:e1:eb:06:4e:b5:d4:9f:4f:ab:
c5:fa:3a:96:64:6c:7c:7d:ef:0b:a2:d5:fd:96:79:f0:be:d2:
8e:ce:6f:22:c9:f3:52:de:5f:fd:19:6a:70:b3:9f:c9:6d:33:
ef:4a:fe:29:f5:82:d6:e2:1d:06:58:d6:f5:c9:c8:99:d4:a5:
02:83:8c:16:d1:70:0d:03:35:11:21:2b:f6:c6:de:75:d0:a8:
80:7a:d8:b9:6b:1f:81:42:86:b1:bc:a7:2d:b9:b9:40:be:3d:
4c:a5:4c:a7:cb:ec:bb:35:e5:2c:5e:72:21:65:05:d7:14:4e:
af:78:67:61:28:c8:18:6f:bd:71:a7:3d:38:90:46:c1:01:31:
7d:79:55:e3:c8:d6:f3:29:b0:cf:27:88:d8:a4:ed:19:37:58:
49:95:25:86:4b:93:fb:a8:50:86:8f:5e:21:34:06:1f:4b:26:
1f:59:c5:0c:61:79:bf:2f:9e:33:1d:39:a5:c8:47:94:b9:0b:
92:fd:24:83:65:95:fb:de:77:c0:2b:4c:80:0d:19:45:f8:3a:
36:76:dd:73:f6:3e:29:a6:e3:de:5a:9d:66:2a:f5:61:3c:98:
dc:84:f2:ab:36:d5:74:64:51:09:41:6a:94:6a:9e:eb:88:59:
d0:e5:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:51 2026 by rpki-client