This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3134332e3235352e3133362e302f32322d3232203d3e203631353039.roa
File: 3134332e3235352e3133362e302f32322d3232203d3e203631353039.roa (raw, json)
Hash identifier: JtCbKdx+gB93yTwxHMs07RjwssQr0j70ghXqmWlF/zc=
Subject key identifier: 5E:EA:4A:B4:C4:AC:C5:51:4E:E4:BD:0B:E7:E4:4B:57:84:B7:9E:7E
Certificate issuer: /CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Certificate serial: 2C05BF51E557601D408BA5A95939F1AFC4394E17
Authority key identifier: 9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3134332e3235352e3133362e302f32322d3232203d3e203631353039.roa
Signing time: Tue 06 Jan 2026 19:00:44 +0000
ROA not before: Tue 06 Jan 2026 18:55:44 +0000
ROA not after: Tue 05 Jan 2027 19:00:44 +0000
asID: 61509
IP address blocks: 143.255.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.crl
rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 06:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:05:bf:51:e5:57:60:1d:40:8b:a5:a9:59:39:f1:af:c4:39:4e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Validity
Not Before: Jan 6 18:55:44 2026 GMT
Not After : Jan 5 19:00:44 2027 GMT
Subject: CN=5EEA4AB4C4ACC5514EE4BD0BE7E44B5784B79E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:60:4b:fa:8a:0e:32:21:1f:eb:b5:6c:6c:
a2:65:01:40:97:33:99:f5:7e:b8:fc:14:3f:bd:3c:
18:2c:0a:f4:eb:36:ce:58:d0:1b:2c:75:b4:fa:a0:
c6:3f:a1:33:b0:c4:78:92:68:ce:1a:6c:cb:10:87:
1d:71:e1:a0:f9:7c:54:5e:81:6c:25:cc:78:cd:ae:
c8:be:8e:31:d7:78:ec:d0:29:48:77:f9:4c:c3:e0:
cd:df:54:ba:e9:70:02:8d:9d:de:11:6f:18:f5:dc:
71:c3:e5:59:a5:df:ed:ea:91:aa:c6:44:33:e1:6f:
35:a8:46:42:d5:af:23:13:66:ff:8d:68:75:ce:a4:
2e:00:4a:aa:06:fa:b3:0a:a2:eb:8c:45:fe:ac:b4:
04:c1:32:39:27:f1:ce:22:d6:8c:d3:14:ce:20:01:
4b:6e:39:33:a9:b0:d4:6f:6b:3f:84:27:70:0e:e6:
08:32:ee:7f:46:58:5d:4d:42:bb:43:27:ea:e6:78:
e0:c1:8e:f4:79:99:83:8e:cf:c7:73:38:17:47:01:
09:a2:94:50:c7:7e:f8:7a:c0:bf:28:eb:5c:b6:a3:
f0:1c:c6:86:35:8f:3a:1a:65:75:ea:c9:43:d2:b9:
1f:39:9d:a5:00:6c:23:f3:db:51:45:bc:e1:a9:f7:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EA:4A:B4:C4:AC:C5:51:4E:E4:BD:0B:E7:E4:4B:57:84:B7:9E:7E
X509v3 Authority Key Identifier:
keyid:9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3134332e3235352e3133362e302f32322d3232203d3e203631353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.136.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:ed:e6:bd:88:84:2e:a3:bf:c1:e3:67:de:65:4b:bb:6b:ea:
80:ae:d5:03:10:05:25:21:be:bb:e2:91:21:e0:3e:ee:4d:ac:
e0:38:a9:eb:41:c5:13:a0:6a:0f:66:e1:c9:d6:f7:12:d9:e1:
ae:5e:a1:e4:41:9f:4d:21:c9:08:75:03:47:7f:78:65:0d:e7:
0c:55:de:b1:b0:0a:11:1e:31:7b:ad:9f:09:c4:8b:ed:ff:25:
e6:81:8c:8c:07:39:b7:ae:7c:0a:c9:55:83:7c:90:16:db:5d:
c4:f2:f6:db:c4:54:d4:b5:da:c5:70:9a:b5:0f:21:c8:af:ba:
ca:c9:9f:43:d5:96:26:a1:10:68:19:e4:13:50:c6:d9:c1:f9:
44:32:70:0c:1c:11:28:69:7f:9b:3d:ff:02:95:0b:44:aa:55:
e2:21:f5:88:dd:52:40:08:fc:70:d5:b7:b4:2b:2d:b9:1a:c4:
50:3b:d8:c1:ef:4b:8d:25:9e:38:89:cf:20:94:f2:dc:8f:16:
a8:3f:20:99:15:c9:7d:c0:2a:ec:43:0e:9f:c9:8a:47:70:ac:
54:6c:10:cf:ec:5d:a1:15:7c:c2:0a:55:99:01:ef:0b:04:a7:
d9:a6:a7:3e:bb:5d:22:6b:22:09:26:98:95:ba:5e:f2:75:43:
97:da:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:36:38 2026 by rpki-client