This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32322d3234203d3e20323633383233.roa
File: 3133382e3231392e3231362e302f32322d3234203d3e20323633383233.roa (raw, json)
Hash identifier: yyhSM9IhDfs3FzCcY2lHAhIbTdfyCSNpAcTlBLexCl8=
Subject key identifier: 42:30:05:F9:F1:4B:48:40:9D:5F:AD:8D:03:62:0B:DC:3D:BE:F4:61
Certificate issuer: /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial: 0FFD6CC1E00D512F6621FA8199527D35B82346B2
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32322d3234203d3e20323633383233.roa
Signing time: Tue 06 Jan 2026 19:22:16 +0000
ROA not before: Tue 06 Jan 2026 19:17:16 +0000
ROA not after: Tue 05 Jan 2027 19:22:16 +0000
asID: 263823
IP address blocks: 138.219.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 01:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fd:6c:c1:e0:0d:51:2f:66:21:fa:81:99:52:7d:35:b8:23:46:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Validity
Not Before: Jan 6 19:17:16 2026 GMT
Not After : Jan 5 19:22:16 2027 GMT
Subject: CN=423005F9F14B48409D5FAD8D03620BDC3DBEF461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:4a:3f:54:10:c0:3b:38:b0:e3:2c:9f:9f:
78:63:25:e2:b3:62:3a:7f:73:a9:32:ec:11:57:0f:
58:aa:7a:dd:20:0b:97:fd:d3:74:54:27:81:3a:b4:
9e:d5:2b:7b:9d:d7:ea:de:f6:b9:24:5f:33:ea:54:
4b:78:eb:a7:ed:40:dc:49:bf:e1:b4:0d:33:c3:aa:
28:db:00:a6:e5:d1:df:87:2c:a4:f7:8e:52:db:b5:
a3:e8:c1:e6:06:7f:b9:c9:d2:cc:36:99:c9:76:68:
af:54:0f:b7:5f:ae:7e:a2:9d:df:f2:c8:44:36:f1:
14:ab:9e:7e:66:84:84:7e:01:8d:db:2f:d4:29:43:
aa:63:c0:9c:b9:6f:dd:48:4e:a0:84:12:50:b5:8f:
e2:6a:d9:24:ec:bd:59:cb:fb:f3:3a:62:ba:39:f6:
04:86:75:4a:d4:1b:fe:37:85:1d:57:33:36:38:c3:
9a:21:eb:2f:60:02:bd:eb:e3:bb:21:76:b7:5a:41:
4a:ba:37:85:c1:4e:55:6d:04:e9:cc:51:25:e3:3b:
02:33:8b:26:af:a5:22:e3:87:fe:46:a5:57:bc:41:
d9:c7:a3:24:4a:c9:64:04:55:a1:cf:d1:00:92:09:
58:5c:05:55:7e:0d:fe:ae:f6:d0:7c:28:f6:a3:fc:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:05:F9:F1:4B:48:40:9D:5F:AD:8D:03:62:0B:DC:3D:BE:F4:61
X509v3 Authority Key Identifier:
keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32322d3234203d3e20323633383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.216.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:77:25:f2:76:37:01:dd:a7:c5:e8:84:42:f7:fa:c2:b0:02:
0c:fb:95:50:dc:22:64:a7:c9:1f:5d:52:a0:6f:ff:54:18:2b:
96:e3:32:27:42:bb:b3:14:73:60:6f:d3:aa:98:f1:ab:d9:e9:
16:8d:83:91:7d:e3:f6:60:91:85:17:6e:94:dd:9e:95:90:2a:
11:2f:63:a0:18:b2:14:32:00:2b:b6:3e:b3:c9:1e:4c:71:de:
c0:87:8e:40:f8:4d:8b:ea:62:ca:ab:f3:71:e4:21:12:c2:3e:
98:57:e0:1c:d6:1e:56:e4:90:62:64:4a:70:e2:4b:e4:a8:3e:
e4:9c:02:8d:b3:ef:5e:a1:e5:05:5f:a4:a3:46:ff:5f:82:9a:
2d:ab:3e:0a:42:77:cd:38:1e:a8:d6:d3:15:37:7a:e5:99:df:
79:18:2b:98:79:f1:15:7d:8f:5c:99:4e:19:ac:ee:22:51:3f:
c0:da:86:df:b3:1a:04:33:69:ce:45:31:d3:e1:b3:7f:a1:60:
2e:4d:2f:87:d6:6c:6f:f0:3d:3c:73:d8:06:55:8b:8c:14:2d:
b4:92:f4:40:62:d9:42:b7:e5:5f:d5:54:6e:c8:6c:bd:89:eb:
e5:ed:f8:5c:47:97:9b:ad:73:39:17:48:be:aa:0b:9d:d9:9c:
8d:14:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:34:51 2026 by rpki-client