This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/3139302e38392e32382e302f32342d3234203d3e20323639393735.roa
File: 3139302e38392e32382e302f32342d3234203d3e20323639393735.roa (raw, json)
Hash identifier: jZTXFwrRwENWfNnuuLmwdruLG67MLBSed/K2kWAFRDg=
Subject key identifier: FE:43:72:B3:0C:7D:EF:69:49:DA:25:63:BC:20:B8:CD:E8:50:56:CD
Certificate issuer: /CN=2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E
Certificate serial: 5D5212FA495DA8891C762C07AF1128ABD66F6D04
Authority key identifier: 2E:BE:CF:ED:7C:AB:D8:11:E5:DE:DA:FA:73:9F:DB:2C:F0:EE:C1:2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/3139302e38392e32382e302f32342d3234203d3e20323639393735.roa
Signing time: Tue 06 Jan 2026 20:57:08 +0000
ROA not before: Tue 06 Jan 2026 20:52:08 +0000
ROA not after: Tue 05 Jan 2027 20:57:08 +0000
asID: 269975
IP address blocks: 190.89.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.crl
rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 05:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:52:12:fa:49:5d:a8:89:1c:76:2c:07:af:11:28:ab:d6:6f:6d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E
Validity
Not Before: Jan 6 20:52:08 2026 GMT
Not After : Jan 5 20:57:08 2027 GMT
Subject: CN=FE4372B30C7DEF6949DA2563BC20B8CDE85056CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f5:e0:c4:e0:58:90:d3:a9:90:7b:b1:2d:6b:
9d:f9:60:f1:77:1f:81:ff:84:be:2a:34:c5:d4:74:
aa:2c:70:cc:18:2a:b8:6c:fb:97:37:12:4c:aa:f3:
95:27:57:50:02:72:d2:ca:20:81:a5:7e:34:29:41:
dd:85:82:fe:1e:6b:db:c6:90:7c:aa:1d:92:1e:a8:
d7:89:00:31:71:43:c0:a0:4f:44:2d:a4:a7:b8:02:
da:aa:2e:2f:ba:a2:1c:7d:45:9e:0e:18:13:de:fc:
9f:ae:ea:ec:52:67:93:53:a9:d3:4b:f4:0e:0d:b6:
a5:06:a0:58:16:4c:40:3c:96:6f:99:8d:71:1a:9e:
f0:a3:a8:e4:72:b9:54:1b:b8:38:ac:f2:fd:bf:d5:
88:ca:db:6f:e0:39:5f:93:60:07:a2:14:71:67:66:
bb:ad:ae:90:fe:42:0e:cb:3a:72:f7:78:46:e2:82:
e5:93:76:2d:9f:d2:ae:6c:ce:3a:a4:1b:e8:2d:be:
7d:f3:ed:de:64:3a:02:93:66:3b:ab:84:67:d3:de:
5d:32:67:8a:a3:e4:b2:e2:13:82:78:49:8a:ee:fe:
e9:40:31:c0:7d:09:2d:9f:81:9e:99:c7:8f:37:92:
e0:ec:be:d3:76:a9:da:ac:ef:a4:38:6f:e5:27:41:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:43:72:B3:0C:7D:EF:69:49:DA:25:63:BC:20:B8:CD:E8:50:56:CD
X509v3 Authority Key Identifier:
keyid:2E:BE:CF:ED:7C:AB:D8:11:E5:DE:DA:FA:73:9F:DB:2C:F0:EE:C1:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/3139302e38392e32382e302f32342d3234203d3e20323639393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:65:dd:da:15:c4:be:48:cf:b7:81:b8:cd:2b:76:29:42:6b:
c2:8b:64:be:07:7e:45:c2:63:9c:c6:f7:44:9b:d5:d7:fd:38:
73:fe:22:25:b9:a9:31:96:c7:28:0f:57:bd:0c:a6:49:12:5a:
ae:7d:22:ca:67:1d:44:69:23:3a:b1:c5:b1:55:ea:36:63:4e:
ad:df:3a:3f:a2:da:bd:43:ab:0d:5e:98:5f:c9:27:4e:d2:4b:
2f:41:47:08:6a:c3:51:52:aa:47:eb:07:6f:12:9c:5f:aa:46:
7a:02:d8:c0:ce:64:e4:a8:e6:6a:61:c4:45:47:2d:80:d5:ca:
64:d8:0f:68:95:ca:48:8c:f0:43:ad:07:5a:da:0a:ee:9a:90:
2d:4c:1f:05:cf:12:ed:ec:1f:45:bd:da:42:2e:26:98:8b:f3:
9d:9b:08:40:6e:2f:0a:b6:45:6e:07:1e:52:51:60:4f:7b:c8:
9c:37:e5:fb:7c:62:ff:cd:43:cd:0d:88:92:ca:49:73:e7:f5:
c9:47:f9:06:d3:3c:08:d8:1a:86:2e:d1:a4:cf:5c:45:09:50:
b3:12:b1:5e:37:09:a6:71:b5:50:22:34:95:82:3f:66:58:81:
69:4a:0e:db:52:86:73:4b:0b:07:76:c9:42:94:78:e4:7a:d6:
0d:99:b4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:31:53 2026 by rpki-client