This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3232342e302f32302d3234203d3e203237373733.roa
File: 3139302e3135302e3232342e302f32302d3234203d3e203237373733.roa (raw, json)
Hash identifier: I6fPUuFivv2OHhP5GAm7s6WZiXcEVNor41+XRKsdZ3s=
Subject key identifier: 35:B6:6B:F9:C7:8A:DD:52:BE:5E:0C:D5:2F:F6:C1:E6:2B:C4:41:8B
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 28A12B46F2ACB600A5F7CD403DFCAA5B86F54310
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3232342e302f32302d3234203d3e203237373733.roa
Signing time: Tue 06 Jan 2026 20:53:27 +0000
ROA not before: Tue 06 Jan 2026 20:48:27 +0000
ROA not after: Tue 05 Jan 2027 20:53:27 +0000
asID: 27773
IP address blocks: 190.150.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 13:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a1:2b:46:f2:ac:b6:00:a5:f7:cd:40:3d:fc:aa:5b:86:f5:43:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Jan 6 20:48:27 2026 GMT
Not After : Jan 5 20:53:27 2027 GMT
Subject: CN=35B66BF9C78ADD52BE5E0CD52FF6C1E62BC4418B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:69:38:30:ab:1b:e3:61:ae:46:3c:93:3c:
3d:34:55:35:f1:b8:da:14:79:0e:24:21:dd:35:36:
8f:04:b2:6d:51:40:d0:e6:05:f5:f9:7b:fd:39:92:
b4:43:f7:a0:af:68:26:14:4f:21:77:b9:cc:73:f4:
29:0f:57:f0:ab:ba:7f:d1:67:cd:b3:a0:31:18:e4:
38:5c:e5:c9:00:4e:0f:7b:00:13:c2:c8:2d:bd:73:
57:f9:f4:d4:59:2b:51:0f:aa:01:f4:4f:9a:8d:4c:
38:d3:62:e0:9c:85:10:aa:7d:f6:a3:22:a1:db:68:
80:57:b6:bc:36:a0:1d:4c:fe:fe:16:01:9d:1f:6d:
85:c3:e2:16:ab:e7:66:31:e4:d5:8f:52:45:91:e5:
0e:82:a1:b7:43:6c:38:b8:a5:8c:86:af:67:d3:81:
03:37:3f:71:03:10:f1:7c:f9:d4:d6:4e:60:37:e5:
01:5b:e9:08:58:35:be:0c:e6:32:e1:86:59:3a:30:
5c:02:2c:9b:fe:af:68:c9:2a:98:4b:6f:2c:7c:5d:
f5:b7:f5:9e:ba:f2:8e:d7:30:47:10:f0:20:3a:dc:
4f:02:48:ed:bb:8e:d6:11:a7:c0:e6:0f:81:12:67:
17:54:3f:0d:d5:e2:a0:f4:15:a0:7f:39:2e:70:1f:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:6B:F9:C7:8A:DD:52:BE:5E:0C:D5:2F:F6:C1:E6:2B:C4:41:8B
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3232342e302f32302d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.150.224.0/20
Signature Algorithm: sha256WithRSAEncryption
54:32:70:68:a0:a0:64:90:54:b6:0b:2d:17:67:8a:57:b3:a2:
78:0c:ce:2c:77:d3:e7:f1:ba:80:4c:31:fb:27:d8:3a:20:fa:
bf:8f:e2:83:12:dd:63:5a:41:5c:4b:23:8a:b9:a5:bc:b9:27:
b0:df:39:5c:17:d8:af:0e:16:59:90:0f:64:6c:7f:9f:52:ec:
16:75:6b:bd:53:1c:4e:12:a5:9f:f3:26:e5:35:bf:96:78:10:
67:0f:f1:e2:99:26:32:da:15:39:c6:ac:4e:8d:48:c8:4b:29:
06:e2:cb:b3:e9:82:91:c3:54:1b:cf:49:56:1a:39:4c:b9:df:
1f:51:0b:45:2b:ac:a8:78:8b:7c:63:63:dd:6a:ef:a8:0b:b5:
18:56:dc:41:8d:de:ef:3c:73:2b:47:19:af:bd:f6:a8:01:ac:
b7:98:71:ae:62:0f:05:b1:80:a4:11:06:5f:4a:23:74:6d:50:
49:9d:68:fa:e7:89:a5:c5:f1:a7:42:da:d3:e9:0e:0d:f5:e7:
80:3f:85:28:79:7b:bd:c5:17:8b:14:f8:61:b2:5a:12:aa:57:
d3:97:73:ed:cd:1e:e9:70:e8:6c:a7:6a:dd:43:ae:4e:9e:19:
96:8e:ff:c3:82:02:5e:a5:bb:0a:be:27:b8:9f:dc:fe:d4:b9:
18:22:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:37:20 2026 by rpki-client