This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39362e302f32322d3234203d3e20323635363933.roa
File: 3134332e3133372e39362e302f32322d3234203d3e20323635363933.roa (raw, json)
Hash identifier: w4FSbDPhAg5KEby2IeLIc1AG0KAGfQrLlpLv+vXLD8Q=
Subject key identifier: D2:9D:F7:FF:B1:7E:5A:B6:B8:01:3B:A7:90:A3:74:2E:06:0E:8D:EC
Certificate issuer: /CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Certificate serial: 74B4E9339EFA0107952C4430D2448B22D21CB4DB
Authority key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39362e302f32322d3234203d3e20323635363933.roa
Signing time: Tue 06 Jan 2026 19:42:59 +0000
ROA not before: Tue 06 Jan 2026 19:37:59 +0000
ROA not after: Tue 05 Jan 2027 19:42:59 +0000
asID: 265693
IP address blocks: 143.137.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl
rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b4:e9:33:9e:fa:01:07:95:2c:44:30:d2:44:8b:22:d2:1c:b4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Validity
Not Before: Jan 6 19:37:59 2026 GMT
Not After : Jan 5 19:42:59 2027 GMT
Subject: CN=D29DF7FFB17E5AB6B8013BA790A3742E060E8DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f8:e3:e4:8c:03:b2:26:40:31:a3:91:b2:c4:
a7:ad:99:41:3f:47:f4:c5:6c:ec:5b:26:3c:bc:d3:
fb:7e:1a:d5:96:7f:2c:69:7c:85:f2:c9:71:57:16:
9a:22:f7:84:db:d0:40:5a:9c:29:da:d1:1c:53:5a:
e9:75:9f:d2:14:31:a2:fe:3d:b8:f4:f2:bb:15:a0:
27:ec:bf:c2:5a:3e:32:74:d6:0b:80:bb:95:76:54:
39:5c:52:41:82:55:81:39:0a:bc:61:c5:8f:55:37:
30:f9:2c:d4:60:84:09:ed:db:b1:03:d5:fb:fb:7d:
a8:7d:5c:ee:16:a7:51:f1:59:b5:c2:90:d9:4a:0f:
88:20:3b:de:eb:93:71:ce:90:14:67:4c:37:be:a8:
90:8e:80:19:e8:65:31:d6:8c:08:5e:2b:14:2d:62:
d4:64:ce:52:f3:b4:4c:4b:2c:a8:ac:78:70:b6:0d:
44:9d:f8:31:b7:86:22:fc:23:43:c0:6f:c5:59:f0:
ff:58:25:f0:f4:5d:02:f8:2c:6b:79:fa:5f:15:61:
43:6a:47:51:6f:6e:c4:34:91:2f:e9:46:87:66:97:
3f:a5:07:f2:62:a5:a0:b5:42:aa:44:31:57:28:49:
e1:27:4c:20:a8:72:ec:ce:44:7c:a2:d5:0a:f4:31:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9D:F7:FF:B1:7E:5A:B6:B8:01:3B:A7:90:A3:74:2E:06:0E:8D:EC
X509v3 Authority Key Identifier:
keyid:BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39362e302f32322d3234203d3e20323635363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:2f:f6:c4:12:fd:69:b5:35:c0:13:41:56:28:65:a3:ed:ee:
1a:2a:2d:eb:ec:1b:01:ce:1c:db:f7:20:b9:9d:7a:3a:a0:9a:
0a:86:a4:1a:05:e2:e2:5d:5e:55:e0:0b:31:d3:72:06:81:dc:
36:0b:33:24:5e:ef:3f:62:3a:01:db:fd:6d:1d:bc:ad:e7:6b:
0c:be:c3:f4:49:59:19:bc:31:a7:c5:db:33:f1:b7:33:4c:e6:
24:1d:47:12:43:12:91:48:5e:91:27:8f:be:8b:cf:aa:8f:fc:
19:8a:84:f5:f4:eb:e5:6d:07:ad:90:7b:75:45:dc:05:09:2b:
f3:0b:c0:79:56:f5:16:31:a4:f2:fe:ab:ea:c9:60:fd:38:89:
95:17:48:b3:c4:d2:15:bb:72:8c:4b:98:2d:e0:68:9a:88:59:
bc:7f:b7:1e:48:b6:39:cb:5d:29:69:2a:a5:33:09:38:22:43:
f8:e9:21:75:0e:e8:d7:0d:85:1e:cd:d4:c6:98:8e:13:be:e1:
8a:53:dc:60:db:73:04:35:76:0b:a7:db:ea:66:31:92:67:be:
ad:08:13:4b:c8:31:7a:15:cb:0f:7e:a8:a6:72:c5:7a:be:39:
26:4e:7c:b4:79:3e:0e:0a:59:ca:7e:6b:2f:ed:a6:37:c5:ae:
16:ca:ad:94
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdLTpM576AQeVLEQw0kSLItIctNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4Rjk0Q0NGNkVGREU0NDA0MzNBNkNBMEE0RjQyNUEz
Qzc0QTFBNDAeFw0yNjAxMDYxOTM3NTlaFw0yNzAxMDUxOTQyNTlaMDMxMTAvBgNV
BAMTKEQyOURGN0ZGQjE3RTVBQjZCODAxM0JBNzkwQTM3NDJFMDYwRThERUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw+OPkjAOyJkAxo5GyxKetmUE/
R/TFbOxbJjy80/t+GtWWfyxpfIXyyXFXFpoi94Tb0EBanCna0RxTWul1n9IUMaL+
Pbj08rsVoCfsv8JaPjJ01guAu5V2VDlcUkGCVYE5CrxhxY9VNzD5LNRghAnt27ED
1fv7fah9XO4Wp1HxWbXCkNlKD4ggO97rk3HOkBRnTDe+qJCOgBnoZTHWjAheKxQt
YtRkzlLztExLLKiseHC2DUSd+DG3hiL8I0PAb8VZ8P9YJfD0XQL4LGt5+l8VYUNq
R1FvbsQ0kS/pRodmlz+lB/JipaC1QqpEMVcoSeEnTCCocuzORHyi1Qr0McotAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0p33/7F+Wra4ATunkKN0LgYOjewwHwYDVR0j
BBgwFoAUvI+UzPbv3kQEM6bKCk9CWjx0oaQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NEIzRTlDNzJCNTc3NUJCNjZDOEMxNjdDNDQ1OTVEQzlF
NkVFOUFEREEyNEU2QjlFOEU5ODU1QTI2QTJDNTlGLzAvQkM4Rjk0Q0NGNkVGREU0
NDA0MzNBNkNBMEE0RjQyNUEzQzc0QTFBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzhGOTRDQ0Y2RUZERTQ0MDQz
M0E2Q0EwQTRGNDI1QTNDNzRBMUE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDRCM0U5QzcyQjU3NzVCQjY2QzhDMTY3QzQ0NTk1REM5RTZFRTlBRERB
MjRFNkI5RThFOTg1NUEyNkEyQzU5Ri8wLzMxMzQzMzJlMzEzMzM3MmUzOTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzOTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj4lg
MA0GCSqGSIb3DQEBCwUAA4IBAQB8L/bEEv1ptTXAE0FWKGWj7e4aKi3r7BsBzhzb
9yC5nXo6oJoKhqQaBeLiXV5V4Asx03IGgdw2CzMkXu8/YjoB2/1tHbyt52sMvsP0
SVkZvDGnxdsz8bczTOYkHUcSQxKRSF6RJ4++i8+qj/wZioT19OvlbQetkHt1RdwF
CSvzC8B5VvUWMaTy/qvqyWD9OImVF0izxNIVu3KMS5gt4GiaiFm8f7ceSLY5y10p
aSqlMwk4IkP46SF1DujXDYUezdTGmI4TvuGKU9xg23MENXYLp9vqZjGSZ76tCBNL
yDF6FcsPfqimcsV6vjkmTny0eT4OClnKfmsv7aY3xa4Wyq2U
-----END CERTIFICATE-----
Generated at Tue Jan 13 01:22:26 2026 by rpki-client