This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3133382e38342e33322e302f31392d3234203d3e203134353933.roa
File: 3133382e38342e33322e302f31392d3234203d3e203134353933.roa (raw, json)
Hash identifier: 2iNLlr7n0zURgP1mLladgD7ET1BQ5+bGfov897MK4JA=
Subject key identifier: 12:BA:F7:1B:71:0D:48:14:DE:D8:88:E2:68:FB:EA:A9:E3:73:3A:3B
Certificate issuer: /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial: 5A1D69D7DB32BA85A679BF42F50E59A62E0B28CF
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3133382e38342e33322e302f31392d3234203d3e203134353933.roa
Signing time: Tue 06 Jan 2026 19:10:51 +0000
ROA not before: Tue 06 Jan 2026 19:05:51 +0000
ROA not after: Tue 05 Jan 2027 19:10:51 +0000
asID: 14593
IP address blocks: 138.84.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 16:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:1d:69:d7:db:32:ba:85:a6:79:bf:42:f5:0e:59:a6:2e:0b:28:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Validity
Not Before: Jan 6 19:05:51 2026 GMT
Not After : Jan 5 19:10:51 2027 GMT
Subject: CN=12BAF71B710D4814DED888E268FBEAA9E3733A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:59:d0:42:47:ad:50:47:90:e0:dd:a5:64:
1b:0b:ae:08:8c:39:4b:9a:9f:0d:16:57:bb:ca:1d:
54:69:ae:de:ef:7f:f2:f3:22:72:50:9c:76:76:1c:
2e:d8:7e:f4:10:64:ad:2a:9b:7b:65:9d:8c:dd:e0:
62:20:d2:05:66:42:ac:20:f5:6b:3b:7f:64:a2:9c:
1f:25:4d:93:58:c0:a9:35:90:aa:e9:eb:83:36:7a:
40:fc:24:b3:93:c4:b0:08:d5:16:66:15:99:af:ac:
1c:21:84:f6:9c:12:7c:2b:da:f5:e5:8c:3b:54:a3:
64:e2:7a:92:88:44:5d:d9:3e:e0:75:91:5e:71:38:
c9:b3:e1:a4:d6:1f:6c:c7:ef:32:d2:51:5f:fb:25:
23:80:47:16:d8:d0:f7:1e:ae:9c:77:b2:c5:33:23:
99:68:61:97:f8:14:40:3c:72:e7:a1:58:d1:a1:bf:
1f:c1:76:ca:a2:a3:9a:68:26:64:b3:a8:a9:d2:b5:
74:d5:63:6e:79:3e:4f:1d:6b:66:27:71:e4:cc:8c:
ca:33:1b:24:fd:fa:da:b5:6a:6c:3f:9e:fb:07:a0:
7e:e9:3a:42:44:96:88:df:64:6f:68:8a:46:b4:c8:
99:e3:cd:54:79:75:72:1c:31:16:fd:80:ef:5c:24:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:F7:1B:71:0D:48:14:DE:D8:88:E2:68:FB:EA:A9:E3:73:3A:3B
X509v3 Authority Key Identifier:
keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3133382e38342e33322e302f31392d3234203d3e203134353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.84.32.0/19
Signature Algorithm: sha256WithRSAEncryption
96:2d:e8:10:15:1e:8a:f0:f5:d5:8e:18:aa:f1:8c:33:28:fb:
f1:d1:ce:3c:0b:32:36:4b:e2:28:2d:55:81:9d:87:5c:39:65:
00:59:f5:08:3f:54:38:2d:81:4c:7e:88:86:1e:b7:27:14:bf:
22:a5:c7:18:01:f7:1b:e9:b2:01:19:7d:5e:f8:15:95:9f:69:
51:cb:3b:83:53:cd:28:c6:39:a4:b2:46:7e:8d:46:e9:3a:ad:
60:f1:53:98:aa:26:85:f2:06:8b:b5:d2:44:61:cd:8e:11:4a:
00:65:d3:35:26:9d:a2:ed:50:ae:bb:7e:96:7e:87:57:ac:9a:
64:7f:a2:8f:ec:89:4e:2b:ab:5c:d4:8f:bd:ca:88:31:d6:7e:
d5:ef:4e:a6:48:f8:4d:32:10:3a:c8:f3:aa:3f:bc:65:db:cb:
3d:dc:90:4c:94:13:80:9a:1c:71:14:b0:a8:94:1b:eb:18:28:
8d:00:cb:1b:ea:8e:28:95:fd:75:74:15:f7:c9:16:0c:70:db:
b2:2c:1a:8a:27:80:b6:da:7c:a2:03:67:35:61:05:1b:5f:1f:
62:00:a5:46:32:5d:fa:a3:e0:1d:c7:b6:a6:a3:19:5f:3a:e7:
59:91:cd:dd:c3:2e:cb:1c:d3:f6:bc:17:d1:7e:56:11:d5:38:
c3:ba:67:fe
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWh1p19syuoWmeb9C9Q5Zpi4LKM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVEQTE3MUQ1QUUwOUU1NUE3MjgwREMyMjc2MTBEODJB
MkFCMDM1NjAeFw0yNjAxMDYxOTA1NTFaFw0yNzAxMDUxOTEwNTFaMDMxMTAvBgNV
BAMTKDEyQkFGNzFCNzEwRDQ4MTRERUQ4ODhFMjY4RkJFQUE5RTM3MzNBM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfVnQQketUEeQ4N2lZBsLrgiM
OUuanw0WV7vKHVRprt7vf/LzInJQnHZ2HC7YfvQQZK0qm3tlnYzd4GIg0gVmQqwg
9Ws7f2SinB8lTZNYwKk1kKrp64M2ekD8JLOTxLAI1RZmFZmvrBwhhPacEnwr2vXl
jDtUo2TiepKIRF3ZPuB1kV5xOMmz4aTWH2zH7zLSUV/7JSOARxbY0Pcerpx3ssUz
I5loYZf4FEA8cuehWNGhvx/Bdsqio5poJmSzqKnStXTVY255Pk8da2YnceTMjMoz
GyT9+tq1amw/nvsHoH7pOkJElojfZG9oika0yJnjzVR5dXIcMRb9gO9cJAKLAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUErr3G3ENSBTe2IjiaPvqqeNzOjswHwYDVR0j
BBgwFoAUFdoXHVrgnlWnKA3CJ2ENgqKrA1YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDgzNzdCOEY4MTBFNjlCMUU2REUzRjIyOTg0OEFCMzQ0
RkI3ODY0OTQyRjc2Q0NDQ0JFNUMyNTZCMjNENkJGLzAvMTVEQTE3MUQ1QUUwOUU1
NUE3MjgwREMyMjc2MTBEODJBMkFCMDM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNURBMTcxRDVBRTA5RTU1QTcy
ODBEQzIyNzYxMEQ4MkEyQUIwMzU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ4Mzc3QjhGODEwRTY5QjFFNkRFM0YyMjk4NDhBQjM0NEZCNzg2NDk0
MkY3NkNDQ0NCRTVDMjU2QjIzRDZCRi8wLzMxMzMzODJlMzgzNDJlMzMzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzQzNTM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWKVCAwDQYJ
KoZIhvcNAQELBQADggEBAJYt6BAVHorw9dWOGKrxjDMo+/HRzjwLMjZL4igtVYGd
h1w5ZQBZ9Qg/VDgtgUx+iIYetycUvyKlxxgB9xvpsgEZfV74FZWfaVHLO4NTzSjG
OaSyRn6NRuk6rWDxU5iqJoXyBou10kRhzY4RSgBl0zUmnaLtUK67fpZ+h1esmmR/
oo/siU4rq1zUj73KiDHWftXvTqZI+E0yEDrI86o/vGXbyz3ckEyUE4CaHHEUsKiU
G+sYKI0AyxvqjiiV/XV0FffJFgxw27IsGoongLbafKIDZzVhBRtfH2IApUYyXfqj
4B3HtqajGV8651mRzd3DLssc0/a8F9F+VhHVOMO6Z/4=
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:09:11 2026 by rpki-client