This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f32342d3234203d3e203138363738.roa
File: 3139302e3132312e3132382e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: KY01uuYCcNxkNeHk/fyaCYiAiAx4W/XkRhZjg2pXPbc=
Subject key identifier: 1A:A1:80:06:93:D9:C9:CA:65:5F:2D:7A:77:C2:63:16:44:86:FB:E0
Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial: 23E56DAB243E875DE1271F4977EB754411D3CD9E
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f32342d3234203d3e203138363738.roa
Signing time: Tue 06 Jan 2026 20:48:33 +0000
ROA not before: Tue 06 Jan 2026 20:43:33 +0000
ROA not after: Tue 05 Jan 2027 20:48:33 +0000
asID: 18678
IP address blocks: 190.121.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 18:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e5:6d:ab:24:3e:87:5d:e1:27:1f:49:77:eb:75:44:11:d3:cd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Validity
Not Before: Jan 6 20:43:33 2026 GMT
Not After : Jan 5 20:48:33 2027 GMT
Subject: CN=1AA1800693D9C9CA655F2D7A77C263164486FBE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:af:ff:2a:f5:18:45:37:fc:03:6e:16:c8:
48:63:81:13:71:3c:18:d6:ec:36:95:a0:b7:7d:fa:
68:52:ed:62:9e:fa:e2:c2:69:5b:a7:a9:73:72:36:
d6:e6:23:3e:7f:3d:ae:18:ae:6c:0e:c5:3a:af:a1:
fa:0c:54:42:13:38:3a:ca:ea:5f:70:56:cc:fa:ef:
1d:82:a2:94:7b:a6:6e:c3:9e:46:1d:9d:47:b7:77:
9c:6c:03:cd:56:3e:46:76:e3:a6:cd:fb:64:4f:13:
dc:5d:26:1e:4a:df:e8:b1:d1:ee:a0:a1:70:20:7b:
e1:c5:df:3e:53:1e:54:2c:14:7a:54:a3:20:6a:5c:
e7:93:64:ce:b7:89:e5:a6:9c:b4:83:94:e8:f0:70:
1d:8a:c5:d0:c3:c0:bc:26:a3:29:75:47:a4:d4:90:
c6:29:2b:af:78:b8:54:1d:83:2d:ed:41:c6:ed:c1:
ef:6f:f6:4b:11:08:cd:ed:b1:f0:78:20:0e:b6:28:
a0:5e:5c:a6:aa:96:9d:28:9c:c7:07:30:7e:ab:36:
fc:79:01:c7:dc:77:1c:ea:f5:b7:88:52:f6:56:93:
84:b3:f8:cb:5f:2d:85:b3:bb:e6:e6:89:b2:50:7d:
af:42:4a:4e:3e:c3:22:95:97:1b:3c:65:39:87:77:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:80:06:93:D9:C9:CA:65:5F:2D:7A:77:C2:63:16:44:86:FB:E0
X509v3 Authority Key Identifier:
keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.121.128.0/24
Signature Algorithm: sha256WithRSAEncryption
83:28:46:cc:43:f2:f6:c5:ab:08:63:b0:8d:17:03:93:f5:9d:
d8:3f:dc:d2:ad:8f:74:c2:aa:1b:2c:51:20:b1:b3:65:a6:e8:
ac:a1:e7:b5:b6:7d:50:8d:5f:b3:e3:bd:67:be:b9:ee:8c:d5:
33:31:72:9b:4a:8b:63:60:28:36:8c:b4:96:d0:66:89:cb:52:
15:7b:d5:8f:b0:4b:a8:58:ba:93:53:88:69:bb:c7:27:fc:8f:
12:1e:89:b1:5e:c0:8e:df:9c:ed:e8:c3:f0:8d:07:69:a3:d7:
88:3a:52:72:48:7a:aa:9f:ef:67:4f:c0:f1:a5:54:0d:d5:e7:
3b:cb:fd:8e:82:de:01:a8:74:92:20:ca:0b:31:01:fd:de:04:
c1:56:9c:c8:ac:c0:da:b2:9e:14:32:4b:c6:84:da:eb:ba:f5:
0c:8a:aa:37:0a:ba:3a:8a:d2:e1:6b:d8:fe:83:c5:24:b8:86:
0b:e3:7d:8c:7a:53:06:0a:ae:0b:a7:71:52:7e:c5:eb:a7:00:
e7:84:75:3e:ef:28:df:f3:eb:cf:ae:96:67:6a:f3:c4:3d:41:
f9:fd:ca:f4:32:86:d9:5d:95:cb:56:07:7a:33:a3:3f:3f:ac:
0f:af:7d:71:e6:67:1f:3c:82:6a:51:39:b4:f7:31:b6:b9:72:
4e:eb:d1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:52 2026 by rpki-client