This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3133382e3230342e302e302f32322d3232203d3e203238303735.roa
File: 3133382e3230342e302e302f32322d3232203d3e203238303735.roa (raw, json)
Hash identifier: EvoCSwzTFLp0UhctIsOlmbycGUQlsdxpLsyVB0jhwNE=
Subject key identifier: 35:13:79:85:72:7B:54:9E:E3:69:E7:DE:D2:90:85:A8:B2:76:39:E1
Certificate issuer: /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial: 026055D902961F524020467812804213B6087AC6
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3133382e3230342e302e302f32322d3232203d3e203238303735.roa
Signing time: Tue 06 Jan 2026 20:50:32 +0000
ROA not before: Tue 06 Jan 2026 20:45:32 +0000
ROA not after: Tue 05 Jan 2027 20:50:32 +0000
asID: 28075
IP address blocks: 138.204.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 16:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:60:55:d9:02:96:1f:52:40:20:46:78:12:80:42:13:b6:08:7a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Validity
Not Before: Jan 6 20:45:32 2026 GMT
Not After : Jan 5 20:50:32 2027 GMT
Subject: CN=35137985727B549EE369E7DED29085A8B27639E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:56:8b:44:3c:73:7f:3c:ac:7c:c7:1e:85:
54:d6:cf:60:10:64:3c:06:23:8b:52:73:63:b3:95:
03:a1:52:d1:3d:ac:d7:bf:f5:3d:50:ff:b8:9d:84:
37:86:5e:8c:52:09:84:6e:62:ad:12:d9:8c:24:9c:
3d:f4:20:33:51:df:4e:7a:62:69:39:8b:59:fe:50:
24:ff:67:25:1f:ab:14:1e:ef:d1:0d:ed:71:e5:b8:
37:b3:4f:9a:32:d3:56:db:a8:bb:22:3f:4b:fc:ed:
65:06:12:29:4d:b8:4e:2e:cf:6f:21:14:40:f2:a3:
47:1e:d0:fd:d6:5c:b4:cf:f4:5c:c3:d3:3b:bf:99:
98:1b:c3:2e:3e:82:d2:71:39:53:25:48:f6:f0:99:
84:ae:66:60:84:21:08:9a:b5:e6:ba:02:12:be:73:
5d:6e:66:bd:3e:39:9b:cc:d9:02:4b:b7:b6:4e:8c:
1b:57:4b:ee:f2:09:17:a5:96:e0:56:ea:dc:a1:08:
29:df:dd:9e:15:9a:58:31:ce:e0:b6:c3:44:cf:da:
be:58:ae:20:ef:05:52:1e:24:f5:ae:f4:f7:ac:b8:
28:f2:c4:7f:43:c1:2e:72:94:23:dc:b4:4f:75:f1:
40:e9:a3:1f:cd:2a:07:8c:d7:84:02:53:b8:18:de:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:79:85:72:7B:54:9E:E3:69:E7:DE:D2:90:85:A8:B2:76:39:E1
X509v3 Authority Key Identifier:
keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3133382e3230342e302e302f32322d3232203d3e203238303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:0c:bf:34:68:a5:91:c1:3a:af:bd:a4:fa:c7:82:30:9a:02:
33:9e:b2:69:57:db:da:1b:22:5f:e6:67:db:13:92:f6:77:9a:
64:d4:78:be:e7:bb:28:68:d7:1c:f3:d6:08:f7:68:3a:1d:be:
86:f8:89:4f:4a:90:18:26:50:07:f1:ac:6f:0f:0a:06:7b:71:
ce:71:5d:2f:c2:e5:15:be:23:67:93:1a:28:1c:f7:45:f6:14:
c2:ae:09:1f:19:be:67:fd:61:62:f5:98:a9:3c:56:ef:6e:5f:
99:e5:0b:1d:33:64:ab:ab:8d:e5:c0:ee:41:6d:af:b8:1d:fe:
a1:f6:7a:8d:bd:83:8c:26:fd:77:28:8e:9c:7e:29:6d:8b:57:
e8:8f:4f:08:6b:12:d3:ec:05:7d:61:8d:7a:b5:f2:ab:4d:51:
aa:91:b4:42:f2:fe:65:10:29:54:83:c0:69:13:0b:4b:a7:ef:
af:d2:fc:9b:1d:97:c3:19:f3:9b:80:83:a0:6c:fe:61:e2:9b:
a0:7c:d2:39:94:5e:18:02:cb:1c:94:a1:e6:56:88:ae:c3:1f:
ba:e8:ea:c4:a7:13:a8:ec:30:4d:c3:97:60:de:cc:8a:5b:8b:
fe:ea:92:5b:ef:84:4e:e1:e7:73:da:35:02:1f:b9:3c:dc:9e:
c2:01:5e:0a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUAmBV2QKWH1JAIEZ4EoBCE7YIesYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NDN0RGQjJDN0M5RkNGMkYxMTQwNjE0NzZFQ0I4N0I1
NzNBNEUxODAeFw0yNjAxMDYyMDQ1MzJaFw0yNzAxMDUyMDUwMzJaMDMxMTAvBgNV
BAMTKDM1MTM3OTg1NzI3QjU0OUVFMzY5RTdERUQyOTA4NUE4QjI3NjM5RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVdlaLRDxzfzysfMcehVTWz2AQ
ZDwGI4tSc2OzlQOhUtE9rNe/9T1Q/7idhDeGXoxSCYRuYq0S2YwknD30IDNR3056
Ymk5i1n+UCT/ZyUfqxQe79EN7XHluDezT5oy01bbqLsiP0v87WUGEilNuE4uz28h
FEDyo0ce0P3WXLTP9FzD0zu/mZgbwy4+gtJxOVMlSPbwmYSuZmCEIQiatea6AhK+
c11uZr0+OZvM2QJLt7ZOjBtXS+7yCRelluBW6tyhCCnf3Z4VmlgxzuC2w0TP2r5Y
riDvBVIeJPWu9PesuCjyxH9DwS5ylCPctE918UDpox/NKgeM14QCU7gY3kLnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUNRN5hXJ7VJ7jaefe0pCFqLJ2OeEwHwYDVR0j
BBgwFoAUzMffssfJ/PLxFAYUduy4e1c6ThgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjQ0OEIyRjk5Rjc1MERFRTRGQjM4MjBCRkRFRUE1QzA3
MEFDNzhBQzFEREVBRTRCQTVCNDcyQjU4MERBMjY0LzAvQ0NDN0RGQjJDN0M5RkNG
MkYxMTQwNjE0NzZFQ0I4N0I1NzNBNEUxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQ0M3REZCMkM3QzlGQ0YyRjEx
NDA2MTQ3NkVDQjg3QjU3M0E0RTE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI0NDhCMkY5OUY3NTBERUU0RkIzODIwQkZERUVBNUMwNzBBQzc4QUMx
RERFQUU0QkE1QjQ3MkI1ODBEQTI2NC8wLzMxMzMzODJlMzIzMDM0MmUzMDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzgzMDM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKKzAAwDQYJ
KoZIhvcNAQELBQADggEBAHsMvzRopZHBOq+9pPrHgjCaAjOesmlX29obIl/mZ9sT
kvZ3mmTUeL7nuyho1xzz1gj3aDodvob4iU9KkBgmUAfxrG8PCgZ7cc5xXS/C5RW+
I2eTGigc90X2FMKuCR8Zvmf9YWL1mKk8Vu9uX5nlCx0zZKurjeXA7kFtr7gd/qH2
eo29g4wm/Xcojpx+KW2LV+iPTwhrEtPsBX1hjXq18qtNUaqRtELy/mUQKVSDwGkT
C0un76/S/Jsdl8MZ85uAg6Bs/mHim6B80jmUXhgCyxyUoeZWiK7DH7ro6sSnE6js
ME3Dl2DezIpbi/7qklvvhE7h53PaNQIfuTzcnsIBXgo=
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:53:48 2026 by rpki-client