This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133322e3235352e3133322e302f32322d3232203d3e203532343835.roa
File: 3133322e3235352e3133322e302f32322d3232203d3e203532343835.roa (raw, json)
Hash identifier: y9I+abT63odXE1Fwr3yCN2Sg6EyqdFJ4cuXF8z0MH94=
Subject key identifier: E4:EC:3C:FE:95:34:2A:27:E2:44:49:11:1F:A6:F9:58:34:4D:93:C9
Certificate issuer: /CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
Certificate serial: 14008F4AE1D890C0BA337F1DF8670244DA8BA2D4
Authority key identifier: 09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133322e3235352e3133322e302f32322d3232203d3e203532343835.roa
Signing time: Tue 06 Jan 2026 19:33:45 +0000
ROA not before: Tue 06 Jan 2026 19:28:45 +0000
ROA not after: Tue 05 Jan 2027 19:33:45 +0000
asID: 52485
IP address blocks: 132.255.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl
rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 12:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:00:8f:4a:e1:d8:90:c0:ba:33:7f:1d:f8:67:02:44:da:8b:a2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
Validity
Not Before: Jan 6 19:28:45 2026 GMT
Not After : Jan 5 19:33:45 2027 GMT
Subject: CN=E4EC3CFE95342A27E24449111FA6F958344D93C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:6d:32:45:56:78:78:40:ba:e3:46:0f:a7:
7e:5c:48:d4:de:c0:ad:97:c7:0b:90:00:aa:cf:48:
24:de:81:5d:2f:8f:ce:9b:c0:f1:d6:f4:d4:15:7d:
c7:1e:74:0b:30:95:af:6d:84:6f:11:2b:39:69:ea:
bf:4b:1e:3f:93:51:0b:9b:97:fb:a1:3e:4f:5f:9a:
fb:c8:06:8b:49:b5:83:b8:73:da:2e:4b:5b:ed:68:
18:93:75:59:51:c4:e4:02:e9:9e:40:76:f8:66:eb:
7e:8a:fd:02:f1:6b:65:a2:ae:fc:68:05:d2:60:a6:
27:32:70:5c:70:ff:30:08:53:30:71:ac:f0:71:f9:
67:e3:c6:8a:c2:97:3c:fd:30:79:d7:77:32:0a:67:
63:1c:65:75:39:93:ed:84:0d:04:f7:3e:cc:14:c3:
a9:25:d5:a6:a2:28:fc:fe:63:89:ea:37:50:9d:e1:
c4:1b:12:98:36:08:c5:d8:64:6c:9c:fe:30:10:96:
3a:43:7a:17:a9:1f:bc:7e:42:6b:37:3c:e0:85:c5:
36:e1:28:9d:6c:ba:47:0f:03:6a:38:d9:9a:02:d8:
3d:af:f6:13:a9:a8:75:aa:40:ec:47:24:20:1b:d1:
ba:86:41:dc:b1:01:e8:ab:5d:c5:3f:0e:83:0a:d5:
14:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EC:3C:FE:95:34:2A:27:E2:44:49:11:1F:A6:F9:58:34:4D:93:C9
X509v3 Authority Key Identifier:
keyid:09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133322e3235352e3133322e302f32322d3232203d3e203532343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:e8:d2:01:96:13:de:13:37:d9:a2:14:dd:17:5b:bf:17:eb:
c5:f1:06:55:01:d6:21:37:93:2e:c2:f4:87:76:80:17:97:61:
8a:47:47:4f:43:91:7f:74:58:d6:68:8c:b1:14:6f:c9:85:5c:
90:e3:2a:bf:47:c0:3c:8e:a8:62:9f:b2:26:f8:c4:4c:97:00:
ad:77:e7:c7:1b:8a:e3:8d:20:8f:ec:34:ad:d9:04:7c:b7:93:
81:fa:5a:61:d0:51:70:2e:8b:7e:27:e2:57:b8:6a:16:95:94:
1e:81:4a:5b:9d:9c:30:db:71:f4:6b:2a:90:69:38:fd:73:70:
55:7a:34:22:2d:64:52:ab:d7:d8:13:4d:b9:6d:61:73:ca:8e:
16:11:d4:00:9e:fc:e4:08:55:e7:f7:b1:3f:4a:aa:00:00:be:
50:6b:78:2d:43:c6:49:90:9d:3b:72:c9:e6:5c:42:7f:01:0c:
fc:ca:11:69:34:fe:2e:d9:be:24:09:2b:7a:f9:9b:fe:15:01:
77:98:6b:1e:73:03:46:cd:a5:fe:36:36:23:2c:ec:17:49:7d:
7e:c2:7b:a7:dc:7f:58:44:48:35:45:81:b3:af:ec:d8:55:9b:
85:8d:99:11:8e:ae:a7:8d:8a:03:cb:e5:25:99:b8:8c:fc:00:
a2:98:7a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:19:13 2026 by rpki-client