This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
File: 3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier: 4c0SZ2CNPoc45Oip4ARa4ga0gjBfE6oDcYzQwZhD3BQ=
Subject key identifier: 43:B2:2D:03:13:97:AE:BC:D1:21:AB:58:EA:B3:E3:F1:88:98:E3:D1
Certificate issuer: /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial: 3CFA005DD6F58743393245958D2B510484BC102F
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
Signing time: Tue 06 Jan 2026 19:47:22 +0000
ROA not before: Tue 06 Jan 2026 19:42:22 +0000
ROA not after: Tue 05 Jan 2027 19:47:22 +0000
asID: 14754
IP address blocks: 190.149.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fa:00:5d:d6:f5:87:43:39:32:45:95:8d:2b:51:04:84:bc:10:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Validity
Not Before: Jan 6 19:42:22 2026 GMT
Not After : Jan 5 19:47:22 2027 GMT
Subject: CN=43B22D031397AEBCD121AB58EAB3E3F18898E3D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:4f:f3:36:32:be:50:94:3f:02:0f:21:34:
1b:3b:0d:28:b6:13:a0:72:50:39:3f:bf:6b:3c:c0:
e9:01:37:01:f0:30:0c:dd:f5:7a:75:57:8d:15:9e:
3e:7e:d4:17:d3:b3:db:86:15:20:d3:c2:09:db:4c:
2f:52:7e:4b:be:99:34:40:23:c9:3c:53:81:f5:31:
6e:dd:ee:10:2b:12:db:a7:81:a9:4e:f2:09:59:43:
23:65:89:bb:a9:44:28:b4:3e:58:3e:2b:98:31:ee:
2d:7b:fc:10:50:3d:31:c1:5a:a8:60:d1:3a:77:2c:
27:7f:68:8f:df:4f:51:65:f0:0a:fe:1b:fa:26:b4:
3f:c7:24:c4:7d:79:30:61:81:db:23:03:5c:10:94:
8e:37:02:e3:96:0b:90:d0:56:5f:8d:76:b4:f7:74:
10:78:64:38:19:1a:83:03:49:c1:17:cd:ea:ca:1b:
7c:30:97:3e:1e:73:53:a4:59:1f:ba:31:66:8a:49:
79:7f:55:55:0b:c1:dc:58:0d:7d:3b:2f:68:a3:bc:
c1:4f:46:54:0e:78:f5:a2:bf:85:55:75:2b:12:1a:
8c:e3:75:76:03:b3:7a:75:34:08:3a:90:d1:14:ce:
95:9e:e2:31:cf:51:05:41:43:b0:b5:12:79:4e:f1:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B2:2D:03:13:97:AE:BC:D1:21:AB:58:EA:B3:E3:F1:88:98:E3:D1
X509v3 Authority Key Identifier:
keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.149.154.0/23
Signature Algorithm: sha256WithRSAEncryption
58:f4:bd:19:d4:14:ee:94:1a:9c:b5:e6:7e:59:7c:8a:45:90:
fa:50:8d:10:ac:37:1d:6c:05:99:b6:6b:c4:1a:e3:fa:ad:41:
40:95:fa:3e:8d:31:b0:5b:df:31:6c:65:78:97:c9:5b:33:2a:
e5:35:e0:b7:5b:99:c6:74:11:e6:c6:e2:c1:17:2e:5b:51:cf:
21:27:98:e0:97:96:c2:8a:87:9c:74:2e:c2:5c:8b:86:1b:f5:
89:bc:14:99:ef:8a:7c:62:b4:fb:f6:0e:c1:64:bb:41:30:99:
07:1b:7d:44:7b:00:0d:b7:1d:b7:2d:2d:88:ae:99:31:ea:90:
6c:71:99:18:6a:fa:92:46:2d:3c:1c:07:24:f1:57:66:89:3e:
8b:0d:21:2d:a2:9b:ba:e2:9a:cf:96:cd:b6:8c:cc:49:70:b3:
af:c7:dd:b2:e6:07:f0:45:9a:6b:f6:2a:f7:4d:a8:f1:3f:7c:
95:bd:b8:8a:cf:e8:fd:c3:07:08:b1:65:7f:c7:fa:d6:4e:7c:
4b:9f:ca:9f:67:eb:70:5a:bb:cc:73:0e:8a:34:96:b6:0e:d2:
09:bc:2f:58:8d:24:8d:a4:6e:21:3f:b9:45:e4:59:25:03:95:
7b:12:95:6c:3a:fd:71:38:fd:0c:3c:13:2b:54:2b:d9:c0:19:
04:3c:66:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:01:07 2026 by rpki-client