This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32302e302f32322d3234203d3e203233333833.roa
File: 3139302e342e32302e302f32322d3234203d3e203233333833.roa (raw, json)
Hash identifier: 6f/3Y6FHSANUaDa7zEON/T1rAgH9TPFh2jxv8MnSnSI=
Subject key identifier: CE:10:FA:81:F3:47:6E:F4:2A:64:FC:A3:25:B0:8E:6C:59:EB:C0:CB
Certificate issuer: /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial: 6F8452B88ECD6807170AF7609061DF2D3D0209AC
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32302e302f32322d3234203d3e203233333833.roa
Signing time: Tue 06 Jan 2026 19:12:09 +0000
ROA not before: Tue 06 Jan 2026 19:07:09 +0000
ROA not after: Tue 05 Jan 2027 19:12:09 +0000
asID: 23383
IP address blocks: 190.4.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 06:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:84:52:b8:8e:cd:68:07:17:0a:f7:60:90:61:df:2d:3d:02:09:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Validity
Not Before: Jan 6 19:07:09 2026 GMT
Not After : Jan 5 19:12:09 2027 GMT
Subject: CN=CE10FA81F3476EF42A64FCA325B08E6C59EBC0CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:5c:30:aa:25:29:fb:70:3b:ce:2f:cd:af:
ff:3f:80:08:72:5e:b2:14:f3:41:d5:7e:e9:36:99:
0a:09:bd:f7:25:7a:69:76:b3:dc:73:14:b1:dd:89:
f7:ed:98:97:ff:22:51:30:73:8d:54:6b:ae:d9:53:
ab:02:0c:5d:06:39:ee:f0:45:d1:c3:02:1f:c6:37:
63:55:ab:44:c8:34:a5:7e:a3:37:5a:27:af:78:7a:
ac:72:38:a4:c5:28:ab:55:88:64:eb:66:7a:2a:bc:
fc:59:c2:81:d6:1c:fa:b4:da:16:15:09:35:12:64:
bb:36:cf:d7:6a:bc:26:b2:ab:b3:7a:9c:e7:50:e9:
78:c4:d2:f3:5c:cd:f3:6f:57:01:73:c0:54:5c:c0:
c9:c5:ac:3e:d1:d0:a9:ef:bf:55:18:b1:44:da:82:
e1:0a:47:f7:0d:7a:2b:ed:ca:26:29:2e:be:a8:07:
0d:7b:b6:84:32:5e:10:64:58:fe:a8:7c:9c:f8:92:
2d:6e:b5:08:ae:8d:4a:06:af:d3:43:62:5a:c7:4e:
36:b9:ac:ee:e3:28:93:c4:3a:56:e1:dd:8e:25:33:
8b:7b:38:e5:8d:16:b9:66:3a:cb:36:19:b4:76:01:
c8:5f:ea:06:11:8a:63:d4:35:b5:ce:99:f4:f5:bb:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:FA:81:F3:47:6E:F4:2A:64:FC:A3:25:B0:8E:6C:59:EB:C0:CB
X509v3 Authority Key Identifier:
keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32302e302f32322d3234203d3e203233333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.20.0/22
Signature Algorithm: sha256WithRSAEncryption
41:b6:d3:62:a8:d6:16:8b:48:0e:4e:9d:ff:3c:5d:f9:55:78:
cd:60:b0:67:9a:9c:71:19:bf:0d:45:8b:86:de:dc:04:15:80:
b4:b9:17:1e:10:aa:5a:ac:25:ba:ae:99:12:51:02:b3:fa:14:
b2:11:21:75:f4:ba:b7:71:e1:68:93:c3:0b:2d:8d:10:41:e3:
7d:e5:60:3d:d8:f8:7f:b2:5a:67:30:fc:02:af:0f:78:00:36:
92:13:5d:14:b7:ff:5d:91:ea:b7:11:9f:65:65:0b:29:c9:64:
07:77:e0:a4:94:47:88:f6:62:15:eb:f9:23:be:8b:5f:6e:00:
bf:66:49:de:b8:cc:59:e5:a8:2f:6f:9e:d9:27:ca:16:7c:0c:
d9:4c:49:d6:5d:94:9f:cd:4d:2d:e3:bc:02:81:b0:e9:08:aa:
d2:5a:d5:bb:11:aa:2b:57:b3:f3:02:f4:cc:4a:0a:ca:88:5e:
73:ab:7c:ad:ff:1e:84:8b:5a:ae:53:a0:b2:16:7e:1c:aa:4e:
6a:ea:1e:3c:d1:1c:3a:d5:ba:4c:df:c0:a0:43:8c:aa:f0:86:
cf:bc:22:64:82:a4:4f:5a:65:a6:88:cc:f5:00:1a:29:46:88:
80:4e:79:e1:d1:50:57:b5:04:17:22:a2:79:f4:4a:88:23:b7:
f9:cf:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:13 2026 by rpki-client