This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34302e302f32312d3234203d3e203237373733.roa
File: 3139302e39392e34302e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier: OePGmYrtgajM442P5mWNVE8EgZYpoRdqHAVMTBqqJH0=
Subject key identifier: F4:69:C1:C7:41:5C:42:C4:6B:44:2C:73:63:D4:3A:71:62:E5:A4:F7
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 202B1F6D9CA5CA6B6CC31477F1817E69962B4DC5
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34302e302f32312d3234203d3e203237373733.roa
Signing time: Tue 06 Jan 2026 20:53:23 +0000
ROA not before: Tue 06 Jan 2026 20:48:23 +0000
ROA not after: Tue 05 Jan 2027 20:53:23 +0000
asID: 27773
IP address blocks: 190.99.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 07:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2b:1f:6d:9c:a5:ca:6b:6c:c3:14:77:f1:81:7e:69:96:2b:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Jan 6 20:48:23 2026 GMT
Not After : Jan 5 20:53:23 2027 GMT
Subject: CN=F469C1C7415C42C46B442C7363D43A7162E5A4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:34:ee:33:f3:18:f0:17:40:49:f5:0f:84:
c7:69:a4:c6:40:82:17:f1:fe:50:b8:c3:93:fd:14:
6a:a0:1f:86:4b:75:2d:b1:65:da:f2:63:74:6f:2b:
3a:8f:4e:d6:b8:c4:3d:43:67:b1:40:6b:d2:e8:e5:
88:55:94:f2:ee:ba:c5:db:93:bf:81:c3:fd:a3:9d:
90:6e:42:47:a9:7d:ea:dc:b1:ac:be:15:6e:9e:6f:
fa:62:a9:a9:29:23:ad:9b:9a:d6:20:2e:57:3e:84:
49:02:68:46:1e:4d:43:14:77:4e:c5:6d:2e:5f:46:
e2:09:c2:16:4a:7a:a0:77:23:d5:83:dc:a8:62:53:
67:aa:e5:09:05:86:08:ef:a1:4e:38:14:64:31:12:
c1:da:1c:37:58:dc:c4:65:53:04:67:cb:ea:59:17:
35:1e:c2:07:ed:01:a7:c4:7d:88:23:bd:83:7a:29:
fb:84:f2:54:12:f6:e3:61:ac:f1:ef:61:cd:a1:4d:
72:f8:4a:6e:01:c0:90:35:ee:40:a3:df:6b:de:66:
4c:10:94:5a:45:d3:f9:a1:ae:44:87:35:51:d4:5b:
08:13:a9:6f:c7:d1:fb:e9:7c:f4:50:98:27:10:d4:
7c:3c:5e:ff:f7:40:b1:cb:fe:f2:04:53:0b:de:09:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:69:C1:C7:41:5C:42:C4:6B:44:2C:73:63:D4:3A:71:62:E5:A4:F7
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34302e302f32312d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.40.0/21
Signature Algorithm: sha256WithRSAEncryption
02:61:5f:f3:bc:11:ee:22:03:64:fe:56:f7:e3:50:b6:b7:4e:
91:bc:e4:fb:53:1c:81:09:53:db:10:e1:f0:f7:3a:fd:3e:6e:
90:bf:62:42:07:90:cf:ac:31:f3:a2:37:dc:21:3b:14:6a:9a:
0a:c4:3e:72:43:d9:c6:f1:25:f1:e3:d3:b0:a0:d2:72:a7:8f:
56:3c:68:ba:c0:94:aa:31:d9:0c:10:39:28:1e:55:12:2c:cb:
0e:88:3a:78:47:25:af:58:d7:f7:69:d3:cb:c5:87:6b:83:6f:
78:03:a2:10:14:28:dd:9f:2e:20:9f:bc:fe:e5:29:a8:3b:5e:
2a:35:75:2b:20:97:4b:38:69:92:47:05:95:ac:87:08:66:34:
f1:ef:6f:82:95:8d:3b:9c:05:16:6c:c2:35:3c:37:ae:ca:19:
5d:e7:9d:eb:7e:9f:e5:5f:5f:70:27:e5:86:d3:a7:33:2a:d6:
0b:1f:46:4c:1b:87:b9:46:99:93:90:02:63:24:92:78:27:cc:
23:9d:04:e1:23:a6:f2:c6:1a:03:21:71:48:0d:7b:e0:8d:e0:
57:c2:59:ad:bf:7d:6e:99:4d:7b:89:3d:b9:64:87:66:41:a3:
1c:31:fe:80:74:b5:e0:15:d1:3e:bd:1b:21:64:ce:74:17:de:
30:98:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:47:52 2026 by rpki-client