This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/3133382e39372e3134302e302f32322d3234203d3e203237373239.roa
File: 3133382e39372e3134302e302f32322d3234203d3e203237373239.roa (raw, json)
Hash identifier: XORkt+81RFEkuTc/qzwByH0yM5mzCmvGvzaDPCYukKM=
Subject key identifier: 2A:3A:0E:FC:C9:5C:38:45:21:01:61:F2:E2:23:DC:47:EB:EA:80:20
Certificate issuer: /CN=CB8CD2550789B77DC4B972AE0BBC01A92255500D
Certificate serial: 04924EBE1C23FD1A8E6F0EA99A2A6F7BD26D5D2E
Authority key identifier: CB:8C:D2:55:07:89:B7:7D:C4:B9:72:AE:0B:BC:01:A9:22:55:50:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/3133382e39372e3134302e302f32322d3234203d3e203237373239.roa
Signing time: Tue 06 Jan 2026 19:08:20 +0000
ROA not before: Tue 06 Jan 2026 19:03:20 +0000
ROA not after: Tue 05 Jan 2027 19:08:20 +0000
asID: 27729
IP address blocks: 138.97.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.crl
rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:92:4e:be:1c:23:fd:1a:8e:6f:0e:a9:9a:2a:6f:7b:d2:6d:5d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB8CD2550789B77DC4B972AE0BBC01A92255500D
Validity
Not Before: Jan 6 19:03:20 2026 GMT
Not After : Jan 5 19:08:20 2027 GMT
Subject: CN=2A3A0EFCC95C3845210161F2E223DC47EBEA8020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:d5:f6:a9:88:17:de:f8:e6:4a:7b:f0:34:
a5:f0:98:fc:ed:db:33:b1:ce:15:32:ae:2f:28:57:
fe:bd:d6:7e:46:36:70:a1:f2:51:8d:1f:da:cc:8b:
72:5e:30:c6:2c:24:1a:71:4f:78:55:82:73:cd:11:
d8:40:27:af:7d:39:48:e2:da:44:7c:f4:0b:f6:62:
95:c7:27:56:75:ae:f6:13:63:76:55:59:ae:69:ae:
8a:eb:69:77:1c:9d:b3:c6:e3:97:29:73:3d:bc:67:
c7:43:a3:e6:15:3b:17:15:7c:fb:b6:9e:42:c2:90:
f8:7b:d0:ca:48:29:59:28:d5:49:93:f1:41:92:5f:
13:fc:ba:fd:4b:e7:83:43:c0:38:f9:32:77:69:1a:
8c:79:c0:bf:0c:c7:ce:79:26:79:43:9f:ff:db:87:
77:2f:1c:73:7e:13:df:1d:ba:0b:fc:e4:82:73:3c:
79:0f:ab:4f:b3:5b:a8:d1:82:55:e5:22:82:1a:0d:
e2:47:47:74:ea:db:f8:bf:eb:75:ad:a6:2f:75:83:
5c:fb:fd:9c:17:8f:6b:60:0c:59:f6:5f:51:8f:a6:
b7:9f:62:66:29:c0:76:c7:0c:3f:c9:6b:3b:a9:3b:
8d:31:4e:17:8f:d5:4a:19:72:b0:86:7b:86:66:c8:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3A:0E:FC:C9:5C:38:45:21:01:61:F2:E2:23:DC:47:EB:EA:80:20
X509v3 Authority Key Identifier:
keyid:CB:8C:D2:55:07:89:B7:7D:C4:B9:72:AE:0B:BC:01:A9:22:55:50:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/3133382e39372e3134302e302f32322d3234203d3e203237373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.140.0/22
Signature Algorithm: sha256WithRSAEncryption
54:93:d7:b4:d1:57:2e:b2:08:c9:1e:e9:41:81:9d:82:02:67:
ef:c3:7f:a9:12:7f:05:20:85:f1:ce:c3:47:6b:dd:e6:78:d6:
99:19:8e:fc:7b:2b:35:48:18:0e:a1:d9:2a:a2:9a:8d:e6:86:
6c:45:83:92:63:9a:79:10:8f:4f:bf:2b:f6:29:d8:53:68:60:
d3:7c:ed:de:16:6d:d0:88:57:8f:73:37:7e:99:0d:6c:26:45:
1a:9d:92:41:9a:55:72:39:7f:ab:a5:f5:25:04:79:d6:0f:6f:
60:e4:1b:af:4a:b2:da:98:73:ca:22:4e:d3:bc:5f:c7:cc:22:
da:fc:ec:d8:07:7b:1d:88:cb:11:15:ac:b8:89:f6:5e:9d:7a:
9a:26:57:c5:18:fb:06:3f:82:d7:6e:e8:a4:39:69:96:6a:22:
7d:35:35:75:a4:bd:fe:72:a4:12:b1:d4:3e:8b:c3:e5:a3:c0:
aa:f0:86:92:62:ea:64:b7:f3:28:e6:c4:36:d4:23:1f:0b:93:
5e:70:77:3c:db:1f:c9:9d:09:9d:ab:78:ce:a0:3d:3a:fb:92:
c5:0a:14:8a:8a:e3:c8:74:fe:5a:0c:e8:be:4a:8b:51:f6:22:
02:63:34:f6:1f:86:27:54:ea:ca:38:6a:d9:6b:b2:82:fd:a0:
61:1e:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:49:44 2026 by rpki-client