This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3233352e302f32342d3234203d3e203138373334.roa
File: 3138392e3230342e3233352e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier: gqKVGHhfl2kbOLKDgSiBfaGrdvHvYSlLkKW83fUnYII=
Subject key identifier: BB:D7:D8:3E:08:27:5B:9E:30:12:71:2D:C9:EF:C6:E3:67:C2:21:F2
Certificate issuer: /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial: 2226C1BC3B638867CAD061853563DB5DD8BA1640
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3233352e302f32342d3234203d3e203138373334.roa
Signing time: Tue 06 Jan 2026 19:04:33 +0000
ROA not before: Tue 06 Jan 2026 18:59:33 +0000
ROA not after: Tue 05 Jan 2027 19:04:33 +0000
asID: 18734
IP address blocks: 189.204.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 06:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:26:c1:bc:3b:63:88:67:ca:d0:61:85:35:63:db:5d:d8:ba:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Validity
Not Before: Jan 6 18:59:33 2026 GMT
Not After : Jan 5 19:04:33 2027 GMT
Subject: CN=BBD7D83E08275B9E3012712DC9EFC6E367C221F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:6a:b4:12:d6:65:b7:66:a7:a0:64:f1:f1:
f3:33:89:c1:06:ae:5f:a0:00:22:46:a7:99:7b:27:
1d:dd:9d:2a:62:9f:7a:92:66:39:e5:d4:95:a7:b0:
9e:a2:3e:3e:64:ce:68:32:05:82:01:81:2c:85:40:
42:4e:1e:af:e4:3d:29:c6:75:e6:8a:75:95:f3:b1:
8c:97:59:69:06:f5:2d:91:42:23:bf:d5:40:4c:e5:
dc:32:f4:57:bc:46:32:e7:aa:3b:51:71:94:b0:8b:
6a:9a:26:f9:26:77:d3:ca:93:8c:77:0d:19:b9:ed:
33:ff:c3:03:1f:11:53:73:35:1e:4b:2e:be:5a:df:
1b:57:4a:45:0e:cb:1a:49:82:74:d6:d9:63:ee:95:
4f:90:99:e6:60:0a:4e:8e:64:aa:6f:84:80:71:10:
36:4e:91:3e:6d:c4:55:63:65:b6:0a:51:f1:de:dd:
ff:92:a8:4d:78:87:3a:be:bf:e1:2b:81:d5:be:40:
3d:74:cc:08:fa:36:74:33:68:19:42:8b:64:3f:0e:
54:5b:78:f2:3d:ba:78:3f:b8:d6:a6:11:67:0d:4c:
2e:65:dd:9f:1c:eb:d0:a0:5f:dc:22:89:78:dc:35:
3e:e6:4a:1b:88:fb:6b:60:9d:88:79:37:00:b0:9b:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D7:D8:3E:08:27:5B:9E:30:12:71:2D:C9:EF:C6:E3:67:C2:21:F2
X509v3 Authority Key Identifier:
keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3233352e302f32342d3234203d3e203138373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.204.235.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a9:41:fa:f7:77:c5:2e:b0:02:a4:8f:66:d3:8e:7b:c8:ec:
49:ab:fc:0f:de:89:bc:60:3a:88:15:7f:e5:d0:43:d5:81:f4:
92:49:0e:ac:81:3b:47:62:eb:08:b7:63:1c:2d:62:ec:86:0f:
9b:7c:e6:d3:19:72:00:7e:9c:4d:42:d9:75:4c:87:38:8e:09:
c3:76:2c:37:37:42:2e:ec:b3:c8:14:e1:cd:65:75:ca:ca:3a:
a6:64:3f:0b:c1:fa:b1:b5:f0:eb:2c:ac:d5:6d:e6:18:c4:96:
40:03:5d:b5:1f:3f:f4:8c:55:8e:b2:47:8a:95:f7:9b:36:1e:
1a:18:5b:c4:2c:5d:2f:96:88:24:97:1e:d2:30:b3:cc:74:1f:
f5:14:77:15:62:2d:fd:13:5e:4c:20:dc:ef:3c:79:ce:e6:9f:
66:29:f9:fd:db:9e:db:ad:71:55:d9:1e:ca:1b:33:97:ff:ee:
01:fb:18:f3:15:64:b7:1c:81:1c:6e:27:e3:7d:07:f6:cc:0d:
9b:3e:8d:75:86:eb:4a:eb:9c:a3:37:03:1d:d1:7c:bd:74:be:
03:c9:8f:82:1b:a6:97:84:99:b9:5c:72:05:bd:06:71:b2:9a:
1f:73:5f:c2:b7:14:c0:24:ab:18:63:ef:8b:d2:ac:ee:54:fa:
46:c0:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:14 2026 by rpki-client