This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e3132382e302f31382d3234203d3e203237373733.roa
File: 3139302e35332e3132382e302f31382d3234203d3e203237373733.roa (raw, json)
Hash identifier: GFyZz/MScV5FMBO7kYzPPngZBztASC9oi0ajurTBs8w=
Subject key identifier: 2F:3A:DC:0E:70:2E:14:5E:42:83:3E:DB:49:DA:B5:AA:BB:B7:16:9A
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 13A57BEB4ED927C8FEF481B3196F9526DED24ADF
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e3132382e302f31382d3234203d3e203237373733.roa
Signing time: Tue 06 Jan 2026 20:53:16 +0000
ROA not before: Tue 06 Jan 2026 20:48:16 +0000
ROA not after: Tue 05 Jan 2027 20:53:16 +0000
asID: 27773
IP address blocks: 190.53.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a5:7b:eb:4e:d9:27:c8:fe:f4:81:b3:19:6f:95:26:de:d2:4a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Jan 6 20:48:16 2026 GMT
Not After : Jan 5 20:53:16 2027 GMT
Subject: CN=2F3ADC0E702E145E42833EDB49DAB5AABBB7169A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:15:92:7b:61:a7:58:15:25:5e:0e:19:58:
20:b0:55:9c:fd:de:04:71:84:9b:b6:0b:c5:b2:80:
51:c6:83:58:5b:62:41:c1:31:0a:99:65:bd:7b:82:
a4:d9:ae:7c:52:e3:17:3d:ae:b1:10:51:ab:cc:c1:
65:8c:de:57:02:4b:0a:6c:a5:fd:58:25:b5:6c:07:
8f:8a:c5:fd:0a:c8:f5:6a:f6:98:74:bc:97:5f:1d:
16:be:c1:3c:8f:a5:f7:34:67:49:52:33:d0:e9:f5:
20:d8:7d:e7:ea:50:4d:6a:18:f1:8b:5e:32:40:07:
a4:0d:08:16:83:5f:4e:03:b1:90:c0:d1:fe:3a:2f:
d1:72:d2:ca:36:6a:06:9d:cd:b9:77:92:78:cd:e6:
b7:2e:69:78:64:e0:f0:44:a9:ad:31:24:ce:3e:03:
04:c8:53:3e:e8:3d:48:6c:9e:01:39:49:59:ab:06:
d9:d4:0e:4f:09:0f:00:1a:da:d2:98:cc:fa:9f:4d:
76:db:b3:07:33:b1:ee:df:d3:78:37:d9:13:4f:a9:
83:f5:9f:2a:22:f1:2a:60:58:b9:00:94:02:c4:98:
54:0f:4e:aa:a8:9f:52:7b:c9:89:c5:d5:58:45:4a:
94:d3:51:d1:d0:da:0f:d5:ff:b5:da:10:d9:1c:8d:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3A:DC:0E:70:2E:14:5E:42:83:3E:DB:49:DA:B5:AA:BB:B7:16:9A
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e3132382e302f31382d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.53.128.0/18
Signature Algorithm: sha256WithRSAEncryption
08:07:37:29:50:ae:87:a3:cb:c5:f6:03:cf:a2:07:d5:a0:b9:
16:d0:5e:cf:21:fa:4f:b9:ba:32:80:55:78:aa:5e:30:e8:9e:
7b:41:84:48:fa:4a:54:ec:89:5a:a4:8a:fb:63:eb:1c:5f:62:
06:96:b6:41:df:e7:1c:e6:2e:a8:2c:02:f2:f4:77:1c:fb:1b:
07:65:b3:38:f9:25:30:c5:6e:be:56:47:40:7c:02:d9:e8:97:
27:e0:79:b1:44:17:cb:fa:22:88:97:2d:c2:28:58:22:5e:8f:
47:b2:43:6f:d8:c6:1b:63:32:84:3f:eb:3a:ec:26:8c:2a:47:
9a:61:58:e9:08:4d:b2:1b:03:c9:36:5f:b4:be:bc:79:c1:4f:
71:fc:50:0c:9e:33:36:29:88:89:94:b4:a1:8d:98:f9:e0:06:
c8:15:d6:f4:64:ff:e6:8d:c3:a9:bf:4d:77:4b:26:c0:99:4f:
49:f9:34:ff:59:70:09:78:70:8b:5a:5a:af:2d:f8:3d:be:7d:
ad:3a:12:73:ec:ce:bc:1a:f1:2c:ce:59:28:b7:36:4c:e7:82:
45:ce:ec:9d:1d:41:53:ac:f0:49:60:2f:f9:64:25:a5:d2:f1:
3a:8a:26:4e:84:60:95:ca:6f:7e:54:95:11:46:98:42:60:4f:
0a:e6:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:46:12 2026 by rpki-client