This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34302e302f32322d3234203d3e203238303735.roa
File: 3139382e31322e34302e302f32322d3234203d3e203238303735.roa (raw, json)
Hash identifier: mc5rHv+E1hCMMZgYcjA+DBJcpHgzcP3xU1jLOMUznsI=
Subject key identifier: A1:50:40:78:4B:FB:40:1F:0A:EB:98:7F:A8:06:CE:0C:42:D5:9B:F6
Certificate issuer: /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial: 719629207904B901E4B3E645649CCD1C3795D938
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34302e302f32322d3234203d3e203238303735.roa
Signing time: Tue 06 Jan 2026 20:50:30 +0000
ROA not before: Tue 06 Jan 2026 20:45:30 +0000
ROA not after: Tue 05 Jan 2027 20:50:30 +0000
asID: 28075
IP address blocks: 198.12.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 16:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:96:29:20:79:04:b9:01:e4:b3:e6:45:64:9c:cd:1c:37:95:d9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Validity
Not Before: Jan 6 20:45:30 2026 GMT
Not After : Jan 5 20:50:30 2027 GMT
Subject: CN=A15040784BFB401F0AEB987FA806CE0C42D59BF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:f0:6c:72:12:7f:36:1a:78:a2:47:4c:fa:
52:47:e0:28:2a:0e:9d:a9:27:07:7f:be:bb:1f:11:
61:ef:a5:ca:0b:97:89:c6:07:2c:84:24:66:a7:b2:
2c:a8:e0:de:15:07:08:0e:e4:2c:d4:ab:ea:ca:43:
e9:e9:49:94:a3:40:eb:00:8e:c0:0a:2f:d1:74:18:
6e:0c:48:cd:5d:f7:92:55:88:1a:c2:26:03:34:9d:
b6:1a:96:25:4a:87:ce:f6:0e:12:39:78:a7:c4:b6:
5a:dc:73:41:50:cf:0b:39:38:9d:2f:d0:d9:ad:17:
d3:54:2a:46:a8:c0:4b:e7:c0:2f:c6:7e:92:f5:d5:
30:8a:da:6e:23:e4:a3:4b:4e:a7:97:a9:c8:06:11:
88:9f:9a:f8:e6:41:1c:de:cb:72:73:e8:b2:fc:ca:
30:67:4b:55:b9:dc:dc:1c:70:c0:ca:3a:83:2a:b2:
e5:84:28:9c:63:45:78:a1:a5:97:e1:25:f1:5e:b5:
66:04:a2:0f:03:e0:ac:d1:08:98:67:74:b3:bf:6f:
38:08:82:e0:70:98:b0:53:ee:68:21:57:5b:02:33:
3c:de:4f:43:15:56:2e:a0:dd:d2:fe:e3:45:53:c3:
ba:7f:08:5d:9f:a3:25:43:3d:a7:86:7c:9b:5c:af:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:40:78:4B:FB:40:1F:0A:EB:98:7F:A8:06:CE:0C:42:D5:9B:F6
X509v3 Authority Key Identifier:
keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34302e302f32322d3234203d3e203238303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.12.40.0/22
Signature Algorithm: sha256WithRSAEncryption
53:60:25:d9:15:e3:0e:d2:52:02:ff:1f:ad:b5:bf:cb:98:f6:
f1:37:84:f6:fc:53:d4:7b:b1:22:45:cd:a1:f1:c7:51:1c:b9:
e1:fa:85:a5:ca:d9:1f:3e:4e:7b:b7:0c:d0:81:65:fc:89:9f:
b2:4f:db:3d:63:28:6c:d8:53:d3:35:d9:86:44:94:dd:a8:ea:
64:8d:48:af:91:7a:fd:73:ff:a7:63:fe:bb:6d:65:d3:92:c2:
0c:9a:2a:70:3b:c3:ff:a9:fb:6c:d2:44:84:f0:40:e3:94:fa:
25:46:e5:ce:92:ef:0a:0a:5a:5a:8b:12:65:ef:af:ed:d4:71:
ab:0d:78:ea:54:d7:06:8a:b5:3e:da:1c:d0:4a:3a:ce:c1:06:
53:45:88:5f:eb:dd:9e:f5:24:23:c4:c5:b8:77:f0:ab:62:02:
42:ca:af:47:cb:b3:1c:d8:d4:18:a2:67:da:ab:49:10:77:f3:
5b:89:57:0a:a2:da:7b:7e:4f:f3:75:21:3e:02:2f:76:a8:19:
2f:26:a7:a3:95:5b:eb:c4:89:ed:0b:2a:12:0d:56:ef:11:42:
4f:5b:53:49:94:0d:fb:6c:30:38:ba:29:5e:f4:31:da:36:94:
5a:0b:b3:de:bc:59:0f:92:12:eb:a5:12:41:18:e6:66:11:da:
bf:94:51:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:54:41 2026 by rpki-client