This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa
File: 3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier: ZHFCpBLOgslopsGyq4jib2Hn6glx/KDe/qqlhs5NAxs=
Subject key identifier: EC:BC:0D:D1:69:04:8C:FE:68:5F:B9:22:38:EB:9E:A8:2E:8C:DF:A2
Certificate issuer: /CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Certificate serial: 03D6F280D49E831ACEECEE3EA2DFA4916F771A6F
Authority key identifier: EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa
Signing time: Tue 06 Jan 2026 19:37:34 +0000
ROA not before: Tue 06 Jan 2026 19:32:34 +0000
ROA not after: Tue 05 Jan 2027 19:37:34 +0000
asID: 400039
IP address blocks: 138.99.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 23:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d6:f2:80:d4:9e:83:1a:ce:ec:ee:3e:a2:df:a4:91:6f:77:1a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Validity
Not Before: Jan 6 19:32:34 2026 GMT
Not After : Jan 5 19:37:34 2027 GMT
Subject: CN=ECBC0DD169048CFE685FB92238EB9EA82E8CDFA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a5:b9:0b:1a:ee:76:33:c0:c5:0b:18:8f:8d:
30:58:a5:1e:60:40:77:21:73:f0:49:23:fd:c3:b5:
7f:bc:18:04:54:fc:76:fc:19:94:04:d4:df:41:d2:
b3:c5:f2:33:04:6e:9f:d5:99:30:0e:3b:40:f1:72:
8b:4f:7b:c5:fb:b2:bc:38:77:91:1b:1e:fc:4c:ea:
ca:07:07:b9:d5:4e:d0:5e:28:2b:38:b7:5a:b9:2a:
ff:10:af:f1:01:ca:a6:b7:d5:a5:03:53:5b:d9:29:
9c:cb:d9:00:de:4a:69:4b:ff:27:dc:27:31:86:d4:
13:4b:5b:59:cf:d9:e7:33:4b:2f:19:88:05:98:a7:
d6:cf:46:72:d0:4a:92:e4:b1:a2:40:21:c3:40:5b:
40:6c:45:33:9e:4b:44:67:ce:c8:9b:cc:23:03:49:
c9:6b:40:d9:ac:b5:09:f9:a0:54:e9:01:f4:92:d2:
66:13:c2:ae:62:6b:d2:ea:8b:1a:ea:80:84:20:b8:
de:75:70:c8:60:fa:ff:cf:97:7e:90:b4:f9:01:d2:
98:cf:4f:ad:d4:20:2a:04:62:73:26:97:b3:f2:ee:
d4:9d:d5:67:22:41:9c:41:18:13:45:89:53:52:d5:
97:0c:da:ca:78:1d:11:25:95:26:b3:07:4a:ab:d6:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:0D:D1:69:04:8C:FE:68:5F:B9:22:38:EB:9E:A8:2E:8C:DF:A2
X509v3 Authority Key Identifier:
keyid:EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.144.0/24
Signature Algorithm: sha256WithRSAEncryption
20:29:b8:15:11:32:3a:ea:53:94:0d:ba:e4:14:4d:8a:3f:71:
ce:8d:1c:5e:a4:ab:b1:f0:f8:85:e5:d7:1d:9b:d6:86:7d:a7:
3b:84:cd:ad:a8:cb:ed:e4:dc:a2:52:d7:16:b0:cf:42:06:39:
38:0d:be:e4:0d:c2:9e:4d:4a:22:d7:d0:10:d5:da:36:34:2e:
62:82:36:98:85:ba:8e:a0:66:58:eb:f0:18:5a:2a:ca:b5:9d:
ad:96:b9:67:8d:97:a3:87:38:ac:62:9c:18:92:66:9e:06:5d:
bd:ba:dc:c1:44:31:fe:71:25:fa:45:6e:eb:03:50:2b:11:c5:
ae:bc:7b:13:27:d7:8a:52:02:17:75:00:00:01:68:3b:20:e5:
be:78:f4:16:3a:ed:60:ea:98:83:0c:6f:a4:e4:ce:b0:c4:b1:
93:4c:ae:9a:54:bf:60:f4:73:b7:70:84:4c:bb:d1:2d:2e:e9:
75:8c:12:5e:c6:29:78:49:ce:b5:d3:35:d3:10:ef:36:85:77:
79:b9:3f:20:e8:81:3e:2a:2d:e0:21:76:44:75:dc:8b:59:43:
a8:b4:6b:3f:57:36:08:b9:95:ef:08:2d:ba:65:a0:6a:45:65:
1c:81:a6:4e:41:39:d9:aa:bd:cf:5a:b5:56:42:52:e8:f5:fa:
8e:00:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:29:50 2026 by rpki-client