This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa
File: 3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier: 3bj5TtSqT3x6KLNat050Yd08xAm/Uk8pJSoHkgfGuHE=
Subject key identifier: BC:29:F0:F0:E5:D4:F5:B3:54:00:CB:5A:9F:59:B2:6D:30:9A:BA:06
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 053AE1EE9A553E703E4D359F71FB584B0C91CCDE
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa
Signing time: Tue 06 Jan 2026 20:53:19 +0000
ROA not before: Tue 06 Jan 2026 20:48:19 +0000
ROA not after: Tue 05 Jan 2027 20:53:19 +0000
asID: 27773
IP address blocks: 190.150.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 13:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:3a:e1:ee:9a:55:3e:70:3e:4d:35:9f:71:fb:58:4b:0c:91:cc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Jan 6 20:48:19 2026 GMT
Not After : Jan 5 20:53:19 2027 GMT
Subject: CN=BC29F0F0E5D4F5B35400CB5A9F59B26D309ABA06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:16:6a:fc:53:8c:e4:ad:dc:46:c4:a4:50:
57:90:bc:c0:58:82:e6:a9:7f:07:b4:fd:92:35:78:
f8:56:ee:8b:57:ee:c9:67:2b:15:c3:87:3c:bb:34:
2e:c8:c6:fa:1b:7c:e4:9c:80:60:33:8c:c8:1a:65:
8b:4b:0d:5b:af:0f:cf:38:6d:28:2f:5c:10:36:d4:
85:41:64:6b:2b:15:ae:78:cd:1e:da:dd:56:82:e2:
d5:1d:67:cc:0e:2c:90:ee:40:99:00:14:db:75:1f:
64:5b:a5:91:1d:ad:c3:8d:f8:bc:a6:71:d6:40:d1:
bd:fa:f5:e8:ad:a6:0d:44:89:f4:84:31:38:25:38:
3c:95:50:df:e5:bd:2f:79:90:f5:22:1a:cb:61:04:
75:06:64:c6:89:af:93:43:04:d1:81:ea:28:a7:67:
30:0d:7d:89:c7:c7:1c:ba:0b:fe:8e:fc:93:73:19:
13:0d:2e:09:0c:40:4e:7f:75:2b:5c:2e:b9:05:e8:
29:c6:72:16:da:cb:f7:1f:1b:b9:54:2e:84:85:35:
37:e9:5f:4a:28:b0:41:18:8f:bd:cf:58:f0:20:21:
26:7f:c6:f9:85:7c:63:b7:9a:cb:04:98:45:a3:a8:
d5:a6:ee:e1:7e:eb:a0:47:53:ab:32:8b:43:33:66:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:F0:F0:E5:D4:F5:B3:54:00:CB:5A:9F:59:B2:6D:30:9A:BA:06
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.150.240.0/21
Signature Algorithm: sha256WithRSAEncryption
48:22:d2:63:6a:94:a9:b2:5e:ef:55:f2:72:1b:80:30:a8:ca:
e6:9b:92:d6:df:3d:0c:20:e1:9f:b8:59:20:ed:09:3d:df:b1:
e3:2d:bd:ab:0b:39:48:6a:8a:76:09:c4:a4:c6:1e:f0:7f:b6:
08:2e:7b:76:79:ac:9a:26:a2:27:4a:c6:74:ef:4f:a4:6b:a2:
00:6b:9e:09:d9:81:4b:16:0d:52:2a:ad:df:7f:02:9e:4f:e2:
c1:a1:48:aa:ea:81:30:d0:f1:1a:15:51:9c:84:e1:8a:87:f9:
d9:7f:2d:c4:80:2d:74:11:24:80:5a:2a:24:8c:c9:49:9b:06:
14:e0:27:9e:11:df:3d:96:72:23:13:0c:ce:9a:84:7d:4f:02:
15:9b:82:ad:2e:38:3f:75:8d:02:9f:c0:ad:56:fa:83:25:17:
dd:79:e9:9c:8c:e7:8b:b5:d2:f9:86:ea:dc:86:a2:f7:80:6a:
08:8d:bf:5e:ec:26:69:27:5e:86:bc:8d:2a:6a:26:ec:bb:38:
ec:5e:41:30:f4:d0:3b:50:05:18:55:2f:9f:7f:47:9e:a6:b5:
fa:c9:c7:6d:96:39:94:8f:9b:92:bc:5e:0b:64:b0:e2:be:d3:
85:1d:64:0d:b7:98:1f:13:a7:07:e2:6f:10:f8:15:6f:c6:67:
64:71:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:13 2026 by rpki-client