This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3133382e3131382e38302e302f32322d3234203d3e203532323633.roa
File: 3133382e3131382e38302e302f32322d3234203d3e203532323633.roa (raw, json)
Hash identifier: m8Kr3VnKMgBMu6+C+KUkHSFuDoYdqKEGy8S6GEtu3Xc=
Subject key identifier: A8:4C:EF:1F:76:0D:1E:D8:8A:F8:7E:E2:F3:93:94:E7:10:07:4C:05
Certificate issuer: /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial: 601E7374001AA6B63F69DC6BF39925FCCA24D912
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3133382e3131382e38302e302f32322d3234203d3e203532323633.roa
Signing time: Tue 06 Jan 2026 19:41:06 +0000
ROA not before: Tue 06 Jan 2026 19:36:06 +0000
ROA not after: Tue 05 Jan 2027 19:41:06 +0000
asID: 52263
IP address blocks: 138.118.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 14:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:1e:73:74:00:1a:a6:b6:3f:69:dc:6b:f3:99:25:fc:ca:24:d9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Validity
Not Before: Jan 6 19:36:06 2026 GMT
Not After : Jan 5 19:41:06 2027 GMT
Subject: CN=A84CEF1F760D1ED88AF87EE2F39394E710074C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:b3:cc:f9:09:1c:b6:36:2b:0d:0e:f9:74:
7e:3f:16:bc:8b:9b:6c:5d:62:0b:65:fb:90:78:e8:
67:4f:2b:f3:83:73:f0:f4:5e:01:1e:af:06:a3:bc:
36:0b:9c:dd:18:c8:74:6b:da:46:c6:f5:df:9a:7f:
cb:27:4e:b6:72:30:d9:26:66:f4:3d:5e:4f:8f:58:
31:d1:7f:f5:48:2e:54:82:69:e7:e1:ff:48:30:93:
44:00:aa:4c:91:30:a5:9a:3c:ca:cb:21:73:75:13:
c7:16:4c:3c:cc:f0:3d:86:22:f6:31:3c:78:91:1c:
1f:f1:c1:26:f3:cb:24:2e:e1:54:c8:af:60:0e:5a:
ab:7d:5b:84:96:ef:b9:c7:63:8c:e7:22:7b:37:ef:
3f:53:aa:5d:c0:6a:23:68:da:95:b0:4f:46:9c:21:
b4:d7:f5:9d:d0:f0:2d:8e:ed:00:50:3d:a4:24:3a:
46:48:e8:bb:85:5e:ab:0a:e8:cf:36:a0:aa:f9:db:
6c:77:78:d2:a2:bc:64:9a:5f:95:25:7b:2e:76:d3:
bc:88:68:ff:df:28:91:c6:9f:95:73:05:54:3d:61:
ad:ba:03:64:0d:aa:a9:b0:5e:6f:43:4b:5b:52:a5:
53:1a:9a:94:77:2d:b0:14:93:8e:99:98:11:cc:cf:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4C:EF:1F:76:0D:1E:D8:8A:F8:7E:E2:F3:93:94:E7:10:07:4C:05
X509v3 Authority Key Identifier:
keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3133382e3131382e38302e302f32322d3234203d3e203532323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.80.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:e4:7b:34:41:a3:08:18:f6:12:eb:18:05:f7:97:a4:d0:70:
39:03:37:ee:d5:12:63:9e:c2:f1:2d:a7:84:e5:e7:df:e2:9a:
b9:fe:3c:cd:4e:a1:fc:30:b8:de:e5:f2:67:84:10:1b:5c:9b:
61:6e:44:e7:bd:34:a4:4d:40:c5:19:bd:cc:74:b3:79:20:20:
f5:2b:a8:66:a1:03:04:8e:cd:5f:a5:7e:dc:1e:a9:33:08:a3:
12:9b:89:2c:1c:76:43:67:5f:71:10:47:ec:4e:88:ad:c7:4a:
e8:7b:eb:a4:a3:78:26:cb:2f:2e:8f:10:83:8b:01:77:b9:07:
c8:03:4b:3e:ab:ee:0d:11:3e:bf:b2:af:0b:7e:34:e2:4f:f6:
7c:41:ab:05:24:09:9a:26:62:aa:bd:49:9b:31:91:66:70:cd:
93:31:1b:8a:72:a4:6e:52:36:d7:49:a0:f4:6d:d1:0c:86:a0:
4e:49:8c:55:ac:a2:d6:13:0f:6e:c8:5e:dc:61:eb:73:06:2d:
2b:66:b1:a5:c4:96:c5:76:99:cc:03:22:26:3a:a4:29:37:3e:
dd:c0:14:5f:71:6c:45:22:65:7e:53:a9:9f:46:d3:0c:9d:f2:
7b:92:7a:37:8d:c3:d6:dd:2c:e0:90:82:74:48:8d:18:f3:0a:
a2:0f:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:02:43 2026 by rpki-client