This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/3139322e3130302e3139382e302f32342d3234203d3e20323731383231.roa
File: 3139322e3130302e3139382e302f32342d3234203d3e20323731383231.roa (raw, json)
Hash identifier: kDwBLITa47Yb6cs9WLBG6/rAJyzLWSog8qrj3YW/M3o=
Subject key identifier: F1:E1:35:A7:BC:58:24:58:64:F6:5A:6C:DF:AA:51:B0:EF:FE:DA:B1
Certificate issuer: /CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
Certificate serial: 6BDFD2D778F5DF3D5EF3211C10F2D7E817300FAE
Authority key identifier: B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/3139322e3130302e3139382e302f32342d3234203d3e20323731383231.roa
Signing time: Tue 06 Jan 2026 19:22:00 +0000
ROA not before: Tue 06 Jan 2026 19:17:00 +0000
ROA not after: Tue 05 Jan 2027 19:22:00 +0000
asID: 271821
IP address blocks: 192.100.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl
rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 17:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:df:d2:d7:78:f5:df:3d:5e:f3:21:1c:10:f2:d7:e8:17:30:0f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
Validity
Not Before: Jan 6 19:17:00 2026 GMT
Not After : Jan 5 19:22:00 2027 GMT
Subject: CN=F1E135A7BC58245864F65A6CDFAA51B0EFFEDAB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:73:df:00:43:0a:fc:a4:22:85:50:9a:07:
ea:9d:0a:d3:28:55:9f:ec:25:f0:fb:15:28:eb:eb:
9c:c1:5e:bd:b3:0a:5e:c1:a6:a5:6d:21:b2:e8:9a:
bd:dd:ed:e6:8e:c6:3a:61:ff:c8:c5:bd:ce:cb:87:
f2:84:ff:48:00:f4:8c:e6:21:5b:5c:0d:00:83:af:
1f:17:c2:c5:87:1c:fd:0f:8d:c2:87:18:06:0f:e9:
b7:f3:db:cc:95:d6:65:cf:50:0b:2b:c4:55:68:f5:
0c:8f:c6:8c:a3:dd:9c:85:d5:bb:9f:0f:43:2c:ad:
b4:6b:2b:d0:9e:85:86:51:84:ff:73:c6:b6:4e:44:
35:9a:ac:f0:36:89:68:20:bb:2d:b3:7d:b6:e8:93:
97:3b:99:80:b6:a8:81:fc:ab:ae:7a:e9:3a:5e:ed:
0f:c5:8e:13:23:a5:41:ef:d9:f4:b0:bc:c8:64:d2:
0f:c9:9b:91:62:ad:5e:52:66:30:28:ae:f9:38:42:
8a:97:b1:fc:17:0b:da:27:5b:68:cf:59:63:69:ba:
0f:3d:3d:bf:a6:77:a5:1b:77:9c:dc:a9:43:17:fa:
2d:7a:3e:c9:b3:37:76:ee:dc:39:b3:f8:fe:61:ef:
32:99:00:c5:8d:ba:07:6a:a2:55:50:8a:91:ad:d2:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E1:35:A7:BC:58:24:58:64:F6:5A:6C:DF:AA:51:B0:EF:FE:DA:B1
X509v3 Authority Key Identifier:
keyid:B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/3139322e3130302e3139382e302f32342d3234203d3e20323731383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.198.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bb:95:3a:6d:a3:5d:5a:3b:7a:b3:75:d0:20:99:6e:bd:e9:
4e:18:16:d3:b6:a9:22:05:3b:8b:5c:95:b7:8f:14:38:82:c7:
6c:12:40:b4:d4:1a:2b:b4:57:57:4c:55:44:8e:99:39:d4:ce:
67:14:05:b9:74:72:9e:d2:a4:e3:fb:f9:6c:6c:39:0d:c5:14:
b4:71:36:06:38:f5:e8:b3:64:c1:49:c0:35:df:f7:eb:30:11:
f4:ce:10:4b:c4:90:70:57:98:aa:de:ae:a2:4c:2a:e6:66:ab:
f2:a9:d2:1a:5e:a2:52:1f:cb:24:c8:d8:6c:f5:f2:a6:46:98:
61:76:ff:30:15:35:c6:d2:54:11:22:45:13:02:1d:78:1b:c8:
7b:03:cf:44:5f:e3:53:40:9d:7f:d9:d3:d7:8f:5e:fa:94:0b:
c7:0f:1d:74:9a:f8:8f:19:93:d6:77:f5:9c:a4:2c:53:41:2b:
5a:48:f4:78:95:2e:e5:26:be:56:77:47:e5:dc:e4:4b:91:98:
55:19:f6:f1:d7:3c:06:75:1a:73:6d:53:50:a1:8a:7b:33:37:
bd:c2:0d:5f:ed:5e:dd:69:88:34:44:6f:06:28:29:58:36:a6:
bc:07:8d:c5:9d:b1:75:76:ba:06:a0:23:90:57:05:0d:26:ed:
ff:7e:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:22:05 2026 by rpki-client