This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa
File: 3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa (raw, json)
Hash identifier: /SLxi+V+IbkefiZmH+WdTq3Ks4zVY+XxRB6ZHD0RsK0=
Subject key identifier: 89:EA:90:15:6C:B7:46:2E:48:97:42:83:05:AB:A0:D6:87:EE:E5:5E
Certificate issuer: /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial: 22B1FD55C7653089B2C3C5852676596B999A742E
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa
Signing time: Tue 06 Jan 2026 19:11:50 +0000
ROA not before: Tue 06 Jan 2026 19:06:50 +0000
ROA not after: Tue 05 Jan 2027 19:11:50 +0000
asID: 52330
IP address blocks: 190.184.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b1:fd:55:c7:65:30:89:b2:c3:c5:85:26:76:59:6b:99:9a:74:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Validity
Not Before: Jan 6 19:06:50 2026 GMT
Not After : Jan 5 19:11:50 2027 GMT
Subject: CN=89EA90156CB7462E4897428305ABA0D687EEE55E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:ab:74:06:f0:13:32:bf:8c:11:99:6d:6c:
7d:0f:b9:f0:d1:db:2a:6d:a9:de:45:30:25:0a:d5:
bd:84:8b:01:58:82:b0:b7:84:98:74:91:dc:a9:e3:
ef:07:7e:9e:69:25:33:2d:b8:32:16:fc:db:71:1f:
51:01:60:15:29:7b:70:67:a4:31:8b:b8:4c:16:5d:
03:44:93:57:dc:27:6c:71:79:fd:dc:85:5a:0e:79:
ee:a0:a3:1b:b3:7e:9d:c2:55:be:2d:6f:0b:17:28:
c1:94:a9:bc:78:da:ca:1f:20:4a:03:7d:6c:e7:93:
06:b3:81:67:1c:e7:46:79:00:4f:9d:cb:d7:e4:1b:
18:5b:0b:90:a7:29:6c:63:c5:fd:30:8c:be:e5:c5:
48:18:4e:12:91:50:aa:4f:6f:90:8a:e5:4b:b3:d4:
54:dd:f5:38:e0:f6:b8:aa:47:cf:cd:cf:94:b0:00:
4f:d6:42:de:0a:26:35:cb:d2:af:cf:de:0f:58:1b:
09:18:ff:96:6a:e0:de:26:a2:6d:24:d9:e7:bb:6f:
3e:25:45:fe:49:49:cf:f2:bd:44:e8:3f:75:b4:48:
b9:5a:c1:c5:19:3d:fc:85:8e:59:43:1b:1b:59:6e:
de:24:63:21:4d:6e:3d:80:75:41:37:6c:cf:d3:94:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:90:15:6C:B7:46:2E:48:97:42:83:05:AB:A0:D6:87:EE:E5:5E
X509v3 Authority Key Identifier:
keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.184.200.0/21
Signature Algorithm: sha256WithRSAEncryption
49:ad:73:d2:2e:87:59:cb:c6:e3:b8:b6:d0:0f:61:a0:4d:4e:
e8:12:d4:f6:5c:88:c7:31:d6:17:e0:29:5f:bb:22:d8:04:49:
47:46:90:7d:9b:5d:92:c0:6f:c6:d7:1b:56:2c:a5:68:3c:b5:
d0:bd:0f:f3:1c:43:b1:e3:aa:7e:35:86:b3:6b:b6:43:01:39:
20:b9:97:fb:fa:44:28:42:bd:ef:47:8d:56:c5:e9:55:e9:40:
aa:88:de:8c:c6:5b:38:35:b9:19:17:5c:35:fa:8a:c4:a3:1b:
c4:70:b1:4a:70:c5:ea:73:71:da:60:20:09:26:4a:f9:b1:8a:
b3:13:e5:e9:5a:f5:2b:13:a5:c0:61:73:2c:6e:7c:69:7d:f2:
49:48:a7:ae:cf:24:8b:58:61:f0:d7:33:13:4a:d7:6c:a1:03:
2d:31:b5:6f:f5:57:52:07:50:11:81:72:44:88:65:c9:e0:a9:
70:9e:4f:cf:a5:ef:84:49:dc:7e:33:e4:2f:01:bf:99:3c:20:
0b:41:8a:c5:e3:10:d9:10:d2:e8:b6:76:ef:32:8f:c5:f9:d3:
41:f9:dc:20:f1:b5:69:29:66:aa:34:88:98:e9:22:0d:a0:5b:
8e:34:92:f3:39:1d:78:53:4d:84:17:84:ce:56:24:0f:3f:eb:
27:e0:5a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:26:04 2026 by rpki-client