This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/3133382e3132312e342e302f32342d3234203d3e203631343939.roa
File: 3133382e3132312e342e302f32342d3234203d3e203631343939.roa (raw, json)
Hash identifier: ax3FzIBfHeGabtZsH6SZElBzr+w4Ufx4MfJvnaoLS2o=
Subject key identifier: D1:32:4B:B9:9B:29:87:18:0A:5F:8F:C9:2D:21:85:35:58:56:91:2A
Certificate issuer: /CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
Certificate serial: 3B07E66DD50736EEAD616284244BAAD288A8688C
Authority key identifier: 0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/3133382e3132312e342e302f32342d3234203d3e203631343939.roa
Signing time: Tue 06 Jan 2026 19:45:51 +0000
ROA not before: Tue 06 Jan 2026 19:40:51 +0000
ROA not after: Tue 05 Jan 2027 19:45:51 +0000
asID: 61499
IP address blocks: 138.121.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.crl
rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 14:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:07:e6:6d:d5:07:36:ee:ad:61:62:84:24:4b:aa:d2:88:a8:68:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
Validity
Not Before: Jan 6 19:40:51 2026 GMT
Not After : Jan 5 19:45:51 2027 GMT
Subject: CN=D1324BB99B2987180A5F8FC92D2185355856912A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:61:71:b4:e1:f0:eb:6d:cc:21:8b:73:f2:
a2:fa:59:de:f0:89:54:a0:bd:f6:9c:8d:c7:73:51:
e3:5d:3d:04:a0:34:59:31:81:17:79:b8:38:e7:ee:
c7:cd:81:20:23:86:27:2d:82:d9:3b:a2:43:4d:9a:
11:df:88:bd:34:4b:90:17:d1:78:fe:49:f2:70:52:
68:f3:21:34:bc:88:e0:af:10:b1:d1:84:29:8a:9c:
81:6a:f8:9b:d5:8e:e3:48:a0:3a:73:98:04:85:86:
3a:90:2d:dd:b4:7c:87:22:4b:fd:1e:98:3d:fc:c1:
cd:df:8b:49:05:49:24:55:a1:ac:10:5c:38:5c:2d:
50:1e:9a:9d:c4:dd:03:98:a5:b2:1d:ce:98:ba:0c:
fc:b3:23:94:2b:d4:5a:a5:23:8d:14:fe:77:74:49:
0f:4e:67:ef:c8:b0:6f:a9:81:31:d1:44:c9:06:78:
c0:c7:d0:51:e2:90:df:01:46:32:eb:54:af:7c:82:
94:7c:62:f9:e0:c4:96:58:65:7e:f0:c8:c1:68:a9:
56:59:3e:05:be:af:d9:99:7c:f7:80:9c:15:8a:70:
96:55:56:00:3b:9b:df:f0:57:a3:53:e4:f3:c3:22:
d5:32:b3:e7:b1:e9:bb:93:70:01:86:c8:89:7e:66:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:4B:B9:9B:29:87:18:0A:5F:8F:C9:2D:21:85:35:58:56:91:2A
X509v3 Authority Key Identifier:
keyid:0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/3133382e3132312e342e302f32342d3234203d3e203631343939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.4.0/24
Signature Algorithm: sha256WithRSAEncryption
08:85:c2:36:02:f2:60:e2:0b:de:a7:bf:a1:36:8a:4f:cf:d6:
4c:f8:36:cd:39:eb:10:e6:ac:ea:2b:b1:d5:a5:b4:11:df:65:
4d:b9:c9:ab:06:54:e3:74:32:fb:50:a9:b4:ee:83:87:fb:c0:
74:84:6c:ec:44:fd:ca:e0:6a:ac:b0:19:5a:74:ca:0a:ef:04:
6b:f0:df:1a:4c:79:a5:90:4a:ae:5b:b4:36:c8:dc:ec:f7:43:
fb:a6:e7:17:f1:2e:87:bf:bf:1c:6f:b3:3a:d0:c5:9c:10:ff:
a4:79:8d:14:34:87:e7:2a:51:6e:8e:c3:78:9d:2d:12:a4:5f:
38:5e:45:02:5a:72:31:8e:f1:57:15:ce:8e:86:36:c9:e8:f5:
a5:4e:27:2b:af:22:99:1b:c0:25:f7:3d:58:56:14:93:e6:a1:
e4:6c:48:fc:cd:bb:71:ab:5e:1c:f1:49:99:c8:50:aa:e9:2c:
55:7e:79:f1:63:30:fb:65:07:66:57:12:a2:c3:63:87:93:6b:
56:06:6d:3f:c9:10:1f:d3:06:7b:dd:28:85:a0:70:b6:36:91:
b2:01:f6:7c:2f:26:03:d5:84:81:5f:3e:fa:17:92:d5:63:e9:
0b:1b:8b:ca:88:38:d6:53:8f:81:cd:fd:46:75:73:cb:a2:67:
82:6a:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:31:38 2026 by rpki-client