This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/3133382e3230342e3232382e302f32322d3234203d3e203631353036.roa
File: 3133382e3230342e3232382e302f32322d3234203d3e203631353036.roa (raw, json)
Hash identifier: VBJNStgcaBiv9VbjRvHDj8kv7R1F6D3ODI2EB8bvSI8=
Subject key identifier: 8C:DE:D1:E4:9A:D5:E1:D4:DA:8B:8E:59:EA:E9:A3:B2:2D:39:4E:0E
Certificate issuer: /CN=30293EE5309A01535DED2E8C83D8043CC3C407D5
Certificate serial: 6C6492FF88CAD5F292E4B71A99C8443EC9EFCD11
Authority key identifier: 30:29:3E:E5:30:9A:01:53:5D:ED:2E:8C:83:D8:04:3C:C3:C4:07:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/3133382e3230342e3232382e302f32322d3234203d3e203631353036.roa
Signing time: Tue 06 Jan 2026 19:18:47 +0000
ROA not before: Tue 06 Jan 2026 19:13:47 +0000
ROA not after: Tue 05 Jan 2027 19:18:47 +0000
asID: 61506
IP address blocks: 138.204.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.crl
rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 01:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:64:92:ff:88:ca:d5:f2:92:e4:b7:1a:99:c8:44:3e:c9:ef:cd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30293EE5309A01535DED2E8C83D8043CC3C407D5
Validity
Not Before: Jan 6 19:13:47 2026 GMT
Not After : Jan 5 19:18:47 2027 GMT
Subject: CN=8CDED1E49AD5E1D4DA8B8E59EAE9A3B22D394E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:2f:f6:81:66:73:32:01:c4:64:27:1d:dd:
ca:57:10:38:46:4b:30:9b:78:04:aa:17:a0:46:37:
54:38:50:00:f2:2a:10:8d:07:a1:2f:9c:11:55:71:
a0:02:07:37:8c:b2:ef:0b:fe:66:26:19:81:ce:94:
19:33:4b:46:c2:4b:fe:85:be:c2:c3:e7:fc:2c:53:
9d:18:08:3d:7e:09:38:82:a3:61:92:3b:d5:c4:f8:
43:30:27:3f:2f:c3:52:d4:38:99:87:71:9c:7f:d1:
2c:eb:4e:5f:f6:18:19:3d:09:be:37:ef:9f:e9:5d:
4f:a7:86:31:17:34:c6:a0:f0:70:97:89:7d:bc:16:
6c:8b:0f:bc:85:fa:69:67:24:57:a1:3a:b2:34:b2:
fa:dd:06:a0:8b:35:d0:fa:a7:4f:58:14:3a:ad:ce:
95:60:e0:6a:44:55:2c:d5:ea:e4:b2:42:1d:57:ef:
dd:f3:15:da:48:fe:9b:28:da:d5:7c:b7:1d:76:a5:
0b:e8:14:6c:b8:e4:5c:23:ad:b4:f8:b4:78:fe:a8:
da:c1:49:a8:5a:e2:99:c7:1a:4a:8c:99:59:55:cd:
da:4f:a4:34:07:55:d6:a0:d1:0c:50:02:b3:da:09:
fa:98:84:ab:f5:d7:8f:cf:07:d6:33:11:e9:7e:1c:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DE:D1:E4:9A:D5:E1:D4:DA:8B:8E:59:EA:E9:A3:B2:2D:39:4E:0E
X509v3 Authority Key Identifier:
keyid:30:29:3E:E5:30:9A:01:53:5D:ED:2E:8C:83:D8:04:3C:C3:C4:07:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/3133382e3230342e3232382e302f32322d3234203d3e203631353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:1e:c3:a2:43:6d:ab:ce:42:cf:62:b6:39:2a:6d:8e:35:c1:
70:21:5c:65:ec:c4:4d:2f:21:4b:40:ef:a4:72:03:d2:e1:e9:
fb:7b:92:39:55:ad:d6:26:4b:cf:b3:ea:71:d3:ac:b7:1d:0d:
40:61:b5:b0:d0:16:69:0a:c2:5f:48:4d:ff:68:f8:12:9a:07:
fb:1d:ec:ee:b0:61:4e:e9:78:30:57:81:a6:d6:17:c1:23:03:
58:d2:39:cf:0e:cc:0b:7f:ec:ed:38:7c:2c:c0:a8:22:46:42:
6e:c9:b6:f0:1f:a2:1d:1f:05:8a:ae:36:8d:bb:14:f1:44:64:
b4:a6:00:63:1c:9f:87:b0:98:80:c5:c7:a0:d7:96:d6:c2:30:
4d:af:14:c1:64:f8:52:a0:24:d4:12:e0:ec:6b:ce:69:89:8c:
c6:a1:08:13:b4:b4:29:2f:02:f7:47:d6:2e:f7:55:04:de:03:
f4:cd:99:44:2e:aa:85:84:af:4e:e3:a1:a8:c3:b3:4b:a2:47:
8d:98:04:3d:aa:f2:1a:4c:28:ba:aa:7a:53:d9:dc:d8:4c:66:
4b:a8:53:46:62:62:d0:a9:db:de:b0:c4:5e:42:8e:cd:7b:d9:
eb:09:b5:13:04:af:21:52:c1:fa:bc:75:d8:0c:2d:7c:f4:f4:
0a:56:17:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:17:11 2026 by rpki-client