This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e36342e302e302f31322d3137203d3e203236363131.roa
File: 3139312e36342e302e302f31322d3137203d3e203236363131.roa (raw, json)
Hash identifier: 4yZh+H2zATskfSJ1biyRsN/+nWgggykSdCW9l5sK7+k=
Subject key identifier: 04:38:AA:21:09:1E:AB:34:73:91:A8:94:DA:BA:6A:0B:A5:03:6B:B1
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 6BDA492342B838C42BD540E6231AFC0362715AED
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e36342e302e302f31322d3137203d3e203236363131.roa
Signing time: Tue 06 Jan 2026 19:02:59 +0000
ROA not before: Tue 06 Jan 2026 18:57:59 +0000
ROA not after: Tue 05 Jan 2027 19:02:59 +0000
asID: 26611
IP address blocks: 191.64.0.0/12 maxlen: 17
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Jan 2026 02:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:da:49:23:42:b8:38:c4:2b:d5:40:e6:23:1a:fc:03:62:71:5a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Jan 6 18:57:59 2026 GMT
Not After : Jan 5 19:02:59 2027 GMT
Subject: CN=0438AA21091EAB347391A894DABA6A0BA5036BB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:b9:db:91:94:f3:3f:20:20:ff:54:f5:bd:
9f:ba:4e:5b:49:6b:5f:62:39:0d:ff:7e:f0:60:fe:
6c:d1:1e:5d:db:e7:cf:29:c3:ae:82:fc:56:f7:ba:
47:7c:6a:30:29:b4:83:5f:ee:f4:93:be:ae:f9:ac:
aa:c6:6c:00:76:89:f2:b1:21:d4:d7:81:5d:c4:2e:
70:73:a7:72:50:bf:b1:0f:56:07:dd:ce:de:86:d1:
5e:12:e7:09:d9:45:82:d7:be:61:7e:83:15:b6:82:
72:63:d0:21:34:c0:e9:99:f9:50:46:7e:d6:66:63:
e0:af:d2:12:9e:50:d7:18:45:43:4e:58:56:b0:55:
bc:76:31:41:b9:41:2a:70:80:19:fc:dd:ed:f2:e5:
48:c2:ad:49:9a:15:db:5b:cd:d7:b8:70:ec:57:e8:
f9:c4:49:14:1c:71:a7:86:ac:89:b0:f4:5d:01:42:
7c:90:1c:09:77:b8:13:70:94:e9:c4:58:0a:7c:13:
6b:37:3c:6a:b6:44:c8:e9:75:31:60:6f:14:c7:10:
64:3e:ee:b3:31:54:50:49:91:2f:29:eb:96:91:02:
67:26:b2:e9:a9:71:d7:3c:65:15:75:33:c0:c3:f4:
31:1c:26:57:46:81:64:7d:94:5e:f3:8c:0f:5a:8d:
54:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:AA:21:09:1E:AB:34:73:91:A8:94:DA:BA:6A:0B:A5:03:6B:B1
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e36342e302e302f31322d3137203d3e203236363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.64.0.0/12
Signature Algorithm: sha256WithRSAEncryption
9e:31:86:a8:69:8b:ff:91:13:67:1c:e8:a9:9b:fe:58:42:6a:
ca:ce:95:cd:df:63:e7:25:dc:60:40:6e:bb:d6:35:1c:8f:87:
27:e6:1e:7c:ce:2c:7d:c2:6c:77:4f:ad:44:59:da:19:f7:bb:
7c:ba:0e:da:11:22:c3:82:0c:6e:42:0d:3a:23:a0:4d:d7:75:
e7:dd:0b:31:da:8e:b7:23:7e:b4:b3:82:b6:5e:8b:16:a3:51:
70:06:03:f8:e2:00:0d:d6:2b:9f:71:9d:be:95:d4:e9:36:ba:
bb:a8:08:11:6d:04:c2:39:b1:ef:2b:28:40:ab:5c:3c:54:89:
96:b4:b9:b9:ae:2b:43:e2:cb:0e:da:63:90:35:44:76:b5:ea:
c0:df:18:e1:d3:60:c3:de:83:d3:39:4f:f8:88:36:91:b9:b7:
e8:95:ce:aa:bc:a5:2b:55:f7:a3:dc:7c:0d:3e:c4:32:64:38:
6b:af:5a:93:4c:14:07:b9:31:55:cb:c2:5f:e0:f7:d5:c7:6e:
4d:76:d4:be:55:7a:b8:ff:64:c3:40:0b:0f:44:d5:a8:06:40:
c3:f1:d5:05:20:25:28:09:1e:0a:fd:13:a7:7d:48:48:4e:80:
ca:b6:13:0b:dd:48:b8:94:64:65:37:d7:be:4d:25:97:ed:8f:
35:cd:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:13:28 2026 by rpki-client