This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e35382e302f32332d3234203d3e203532323333.roa
File: 3139302e38382e35382e302f32332d3234203d3e203532323333.roa (raw, json)
Hash identifier: RYMuv3BY6+q5x99Tx2k1zvhj7RFQ3cMJBvu+tFbQbsc=
Subject key identifier: 52:2B:8D:58:88:1B:5A:68:5C:7F:0A:A5:3B:DB:0F:F7:23:DF:77:36
Certificate issuer: /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial: 1117F430FFC33E26B61F57B200927B55CEAC67
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e35382e302f32332d3234203d3e203532323333.roa
Signing time: Tue 06 Jan 2026 19:43:20 +0000
ROA not before: Tue 06 Jan 2026 19:38:20 +0000
ROA not after: Tue 05 Jan 2027 19:43:20 +0000
asID: 52233
IP address blocks: 190.88.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 01:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:17:f4:30:ff:c3:3e:26:b6:1f:57:b2:00:92:7b:55:ce:ac:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Validity
Not Before: Jan 6 19:38:20 2026 GMT
Not After : Jan 5 19:43:20 2027 GMT
Subject: CN=522B8D58881B5A685C7F0AA53BDB0FF723DF7736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:ef:e7:8a:cb:b1:aa:8a:5f:54:6d:66:55:
21:a9:0a:49:8c:5a:75:b1:be:07:cb:0b:f6:b4:28:
2e:09:46:b1:22:12:97:d9:23:2b:d6:59:39:0f:7d:
99:63:f2:5e:69:68:6d:d8:aa:62:e4:82:71:cd:40:
c0:ac:55:2c:cb:c2:50:e1:85:81:33:85:d0:bb:ed:
b3:5e:8b:60:b4:0b:54:9b:20:fc:a8:e6:17:5c:a1:
7b:23:a9:42:0d:25:ae:58:ab:41:52:9d:71:41:08:
ae:d9:d9:59:26:04:42:8c:4f:d1:49:20:4a:62:6c:
33:fc:64:1a:fb:6d:2a:77:67:1e:91:c6:4b:91:99:
42:15:00:d9:8d:24:68:53:ec:d0:68:41:99:83:8c:
95:91:05:e3:32:c2:77:54:e2:d8:5f:e4:e3:57:f1:
00:fa:a4:4d:9d:c9:2a:83:87:25:ca:32:5b:2d:11:
1a:5e:7c:75:44:8d:b9:4c:58:e6:b8:a7:cb:1e:b8:
04:f1:22:55:7b:b1:45:92:3d:ad:89:cc:da:e3:80:
67:6a:52:f2:55:a4:53:cb:c3:25:96:2b:c6:53:a5:
b0:db:ec:7b:39:1b:41:c5:5d:18:7b:5e:e5:86:a0:
51:b5:eb:3c:cf:16:5f:ef:92:70:e0:0c:74:99:5f:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2B:8D:58:88:1B:5A:68:5C:7F:0A:A5:3B:DB:0F:F7:23:DF:77:36
X509v3 Authority Key Identifier:
keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e35382e302f32332d3234203d3e203532323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.88.58.0/23
Signature Algorithm: sha256WithRSAEncryption
86:a0:6a:46:1c:cf:8b:9b:18:ad:75:d2:70:7c:98:4a:65:04:
2c:4e:40:c3:60:00:61:27:56:de:26:78:22:cb:93:0c:86:fb:
d1:8b:21:7b:e5:e1:ec:32:e8:9c:1c:8d:be:97:f7:63:b5:f0:
94:6e:27:12:f1:8a:22:cb:ca:0c:e8:76:45:e7:21:df:75:1e:
f2:82:b7:8d:f8:68:b8:fb:42:32:d6:51:fd:2c:f8:8f:77:cb:
9b:5e:0f:0d:dc:8d:e8:b0:95:12:f9:4b:d0:05:cf:87:ab:6d:
2f:8b:11:38:0d:70:38:0f:dc:91:59:b2:2c:12:71:98:2f:86:
0b:2a:4b:67:b6:0a:62:86:9f:d5:13:4f:d2:4c:53:a5:01:8b:
36:24:11:ff:33:15:11:fc:12:fb:7a:11:e8:d9:85:1a:c8:1f:
62:d3:5a:a3:ec:8f:15:15:a0:43:02:e0:a3:e0:62:70:e8:49:
8e:9f:b2:04:8f:63:54:60:07:e9:a2:81:26:77:bb:03:8c:34:
f3:a3:3d:3f:db:f1:51:a6:b8:45:42:6a:39:f7:aa:79:64:ae:
4f:e6:14:0d:66:c5:d0:f8:f7:a0:21:99:ac:ab:d8:66:d4:dc:
46:de:78:f1:29:61:89:df:aa:04:02:d5:41:87:24:f3:97:05:
4a:60:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:37:47 2026 by rpki-client