This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3133382e35392e31362e302f32322d3234203d3e203532343233.roa
File: 3133382e35392e31362e302f32322d3234203d3e203532343233.roa (raw, json)
Hash identifier: PA5KJ2Xk3pWYF6oA8CT+La38wpHo0S1V/3DNgECLzDQ=
Subject key identifier: 87:07:67:CB:A8:28:FC:5A:98:4C:A9:AC:F0:0D:AF:BA:D0:4B:2A:66
Certificate issuer: /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial: 79AEE229C8F3C689936DE2CF2265302EF5FBB7E9
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3133382e35392e31362e302f32322d3234203d3e203532343233.roa
Signing time: Tue 06 Jan 2026 19:16:38 +0000
ROA not before: Tue 06 Jan 2026 19:11:38 +0000
ROA not after: Tue 05 Jan 2027 19:16:38 +0000
asID: 52423
IP address blocks: 138.59.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 04:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ae:e2:29:c8:f3:c6:89:93:6d:e2:cf:22:65:30:2e:f5:fb:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Validity
Not Before: Jan 6 19:11:38 2026 GMT
Not After : Jan 5 19:16:38 2027 GMT
Subject: CN=870767CBA828FC5A984CA9ACF00DAFBAD04B2A66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:c1:ce:8b:5b:1f:b3:1b:5b:e4:44:cc:91:
98:72:f4:e6:10:7d:4a:e2:17:d7:68:28:b2:4e:51:
b6:16:f3:33:5e:df:d4:1e:f7:3e:fc:50:df:97:2c:
2c:68:be:97:e3:30:e3:8c:d2:33:54:e3:4c:f0:87:
90:a0:34:40:ce:ee:57:d5:24:1d:f6:59:11:48:05:
d0:81:ba:2d:8f:15:7a:ec:76:9c:c4:a2:58:da:9a:
a9:66:19:69:ba:8c:5f:22:66:49:1c:c3:bb:e1:28:
02:01:d5:cf:28:15:a8:25:57:39:3f:81:4a:6d:19:
c0:79:8d:f1:80:e3:3d:af:5f:d9:ac:f3:e6:df:9c:
3f:d9:61:62:90:2f:b5:73:6d:b6:79:b2:5b:8d:46:
6f:0b:3c:76:8d:d2:41:b5:b3:1a:63:9c:47:32:b8:
35:84:7e:cb:aa:96:50:91:8a:30:58:81:1e:90:82:
d6:74:40:33:85:5f:80:30:c8:24:c6:10:c1:7c:ae:
46:76:10:f1:96:78:b8:2d:c5:f1:62:2d:d4:e0:d4:
cf:cf:b1:82:44:6e:4c:b4:05:c7:19:d3:11:6a:5b:
5e:f1:92:31:f7:90:e6:27:e5:70:64:68:f2:3f:24:
a6:90:5e:ba:bd:b2:97:24:9b:4b:ae:42:e9:2b:82:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:07:67:CB:A8:28:FC:5A:98:4C:A9:AC:F0:0D:AF:BA:D0:4B:2A:66
X509v3 Authority Key Identifier:
keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3133382e35392e31362e302f32322d3234203d3e203532343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.16.0/22
Signature Algorithm: sha256WithRSAEncryption
69:a8:9d:13:a7:b5:c2:82:4a:cc:51:ef:35:22:2d:c5:96:cc:
04:9b:45:c1:1a:f6:19:1d:37:e0:a4:c0:0f:c3:58:80:36:ba:
82:9a:a5:26:b6:e7:7e:8e:df:88:5c:61:48:74:67:51:e5:ce:
35:e1:5c:ac:8e:c1:34:ce:41:97:2f:09:b8:e9:7d:df:cf:41:
b7:94:a6:2f:1a:b5:c3:7d:a6:22:70:dd:39:22:73:59:6a:cc:
77:05:14:4c:15:9e:22:c7:de:2b:0a:a7:d3:a0:44:9b:a7:b5:
27:95:de:c2:7c:34:66:d0:0d:7e:94:60:88:be:e3:50:cf:62:
3f:f9:37:1a:c0:4b:26:43:3f:17:ff:09:58:fe:07:ee:b0:52:
c4:75:47:3d:0a:35:07:66:25:57:aa:2d:3e:28:2b:71:1c:b5:
20:91:3e:92:84:fa:aa:c8:d8:21:7b:b9:ec:d1:61:97:56:47:
e6:e8:2b:35:1a:b6:a4:90:34:bd:7c:fd:60:78:68:dd:62:d6:
af:1d:34:df:c9:74:36:33:23:fb:df:30:26:6e:7a:e2:4e:30:
b8:0d:e9:7b:41:5b:b2:96:58:59:80:e6:78:95:6f:c4:dd:74:
9d:cd:6b:eb:f4:4b:17:6f:83:aa:54:7d:05:28:c2:02:49:48:
6d:4e:f4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:50:08 2026 by rpki-client