This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32342d3234203d3e203238343332.roa
File: 3230312e3133312e3233362e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier: ApsBLOIUVuJiCfAw04HMh6jEEZjcqmHeMcEYbMWcikY=
Subject key identifier: 5F:38:9C:C0:BA:F4:85:D6:F1:10:AA:48:03:9A:BB:0C:C6:20:29:9F
Certificate issuer: /CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Certificate serial: 025231748F432E4321277DB9FBF1A28A57D4CF24
Authority key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32342d3234203d3e203238343332.roa
Signing time: Tue 06 Jan 2026 19:21:08 +0000
ROA not before: Tue 06 Jan 2026 19:16:08 +0000
ROA not after: Tue 05 Jan 2027 19:21:08 +0000
asID: 28432
IP address blocks: 201.131.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl
rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:52:31:74:8f:43:2e:43:21:27:7d:b9:fb:f1:a2:8a:57:d4:cf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Validity
Not Before: Jan 6 19:16:08 2026 GMT
Not After : Jan 5 19:21:08 2027 GMT
Subject: CN=5F389CC0BAF485D6F110AA48039ABB0CC620299F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:ca:a5:df:b7:cb:5c:5f:85:1a:d9:9d:5b:
91:68:ee:ed:3d:37:50:31:78:4a:6a:a2:2b:1a:29:
5e:8c:83:5f:80:ff:11:7f:67:dc:95:b6:98:a5:91:
35:96:59:23:e4:de:e3:60:76:5f:12:45:68:cd:da:
74:d5:91:a5:53:06:af:3c:88:7d:03:7d:d5:99:dd:
be:c4:e6:d4:e0:2e:78:7e:5b:36:a9:c9:92:e4:30:
f8:48:55:f3:b2:b9:0c:7b:36:90:28:33:1a:fa:3e:
4c:35:fb:7c:d1:70:86:30:8f:e9:1f:58:9f:de:ba:
8d:6b:ed:55:22:67:9f:ff:28:45:fa:87:f3:9b:51:
d2:f5:27:63:88:9c:db:d0:77:90:3b:cb:3d:ef:a1:
75:37:ce:04:66:c4:55:01:42:f9:d8:58:bf:27:f0:
a5:81:99:04:fa:78:02:2f:c5:5f:7d:cf:ea:ee:4a:
34:bd:d9:ad:25:a1:87:03:ed:5c:ea:da:41:44:5e:
36:fd:02:d3:1a:0f:8e:ea:a6:01:0e:4b:b4:36:94:
74:eb:24:1b:f9:06:90:97:af:a8:94:b5:63:65:a3:
82:c0:d8:be:c8:d9:32:aa:9a:05:a5:67:b7:6b:b7:
62:04:e5:da:4c:a4:d6:61:b5:3d:9f:cf:32:3a:57:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:38:9C:C0:BA:F4:85:D6:F1:10:AA:48:03:9A:BB:0C:C6:20:29:9F
X509v3 Authority Key Identifier:
keyid:19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32342d3234203d3e203238343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.236.0/24
Signature Algorithm: sha256WithRSAEncryption
64:90:b3:bc:5b:05:95:d4:13:a2:d8:92:34:43:29:5e:d0:ce:
92:51:3d:38:45:eb:a1:d2:d9:64:38:55:28:9c:c5:90:ec:98:
bf:0b:52:d1:b6:7f:5f:1e:9c:de:01:cb:9a:0a:ec:b6:34:d5:
48:0d:bc:8c:06:ec:65:a6:71:f7:6b:db:70:89:09:ab:f7:20:
ea:38:9e:a0:e5:69:2e:5c:35:bc:74:5a:1f:06:99:ec:7e:e0:
1b:8a:07:a7:fd:12:48:7b:ad:25:5f:4c:ba:2a:5b:9c:56:23:
ef:d9:5a:c0:91:3a:59:48:8f:bc:10:e4:f4:63:4f:9f:c6:d6:
5b:d6:51:68:9e:5d:0c:3e:c2:fb:a4:15:65:76:5d:26:54:b1:
87:70:48:5f:1c:ef:52:76:03:e8:c8:b6:70:e3:7f:d5:8a:ae:
d6:9f:0a:ec:ed:24:a3:ad:91:7a:4e:c0:ed:44:d6:e9:13:7d:
d5:d9:91:a5:18:1d:4d:20:a2:71:a8:25:2d:85:99:f7:d1:53:
ae:ca:ba:00:2e:bf:12:2c:5c:c8:71:0e:04:67:6d:d3:c2:3c:
17:29:a8:66:f8:c3:86:7f:06:fb:6f:be:65:fa:cc:03:d0:ff:
85:14:4c:97:97:f7:10:66:50:2f:64:2b:60:5e:2d:a2:b0:b6:
27:2a:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:20:56 2026 by rpki-client