This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa
File: 3139302e352e3132382e302f31392d3234203d3e203136353932.roa (raw, json)
Hash identifier: WdDpONiRTfBNWA38mlSePkud8W44FHtJSlen4qPQxBA=
Subject key identifier: 5D:AA:2B:FC:70:42:33:BB:1F:3C:1C:99:52:9D:5C:13:E6:FD:55:8C
Certificate issuer: /CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
Certificate serial: 61D4BFCFC96C25BB5B48C392174F085BBAD7CC54
Authority key identifier: 31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa
Signing time: Tue 06 Jan 2026 19:00:20 +0000
ROA not before: Tue 06 Jan 2026 18:55:20 +0000
ROA not after: Tue 05 Jan 2027 19:00:20 +0000
asID: 16592
IP address blocks: 190.5.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl
rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 14:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d4:bf:cf:c9:6c:25:bb:5b:48:c3:92:17:4f:08:5b:ba:d7:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
Validity
Not Before: Jan 6 18:55:20 2026 GMT
Not After : Jan 5 19:00:20 2027 GMT
Subject: CN=5DAA2BFC704233BB1F3C1C99529D5C13E6FD558C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:45:6d:40:e2:6c:b5:a9:11:e4:14:23:04:
57:cb:b6:6a:88:ac:9d:f6:19:13:5d:72:33:75:82:
02:04:bf:33:8c:24:63:d7:85:21:22:25:16:07:29:
a9:79:31:bf:ee:0f:f3:74:28:d5:5f:06:ac:99:d4:
25:bf:1a:86:5a:95:88:f9:08:32:87:8e:29:2b:82:
5e:31:88:b8:df:42:42:93:63:55:4d:e9:e4:29:84:
02:e1:08:b3:44:94:66:0e:52:fe:0b:84:2d:32:49:
37:9c:85:62:ec:7c:e6:b3:f9:b5:69:ca:b3:ac:67:
2e:65:df:b0:5b:f5:7e:c0:00:14:0d:0d:4e:57:c3:
7f:54:68:41:18:32:89:49:c7:c0:f0:35:00:a3:17:
ba:5c:71:ec:76:3a:be:bb:f7:e6:56:6f:48:19:80:
17:d1:4a:dd:6c:b0:61:cc:b5:ed:83:e8:00:f4:44:
53:4c:75:e5:00:60:a1:ce:6c:c5:a1:3b:c6:95:77:
c5:c9:5c:bc:bd:19:10:e8:82:9a:ac:a9:a2:eb:a9:
35:b7:be:cf:24:b7:39:ae:df:d7:0b:15:dc:0d:9f:
f7:5f:76:73:cf:4d:9f:88:91:87:23:c2:0c:27:c9:
f4:84:21:e9:f1:dc:8c:05:91:f3:2f:fc:74:02:37:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AA:2B:FC:70:42:33:BB:1F:3C:1C:99:52:9D:5C:13:E6:FD:55:8C
X509v3 Authority Key Identifier:
keyid:31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.5.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:f6:f2:71:fd:d9:f1:2e:24:a5:2f:55:90:be:16:46:32:a8:
90:c9:52:f2:75:bb:48:23:dd:e9:1a:73:00:1d:2e:c9:13:49:
07:c3:61:1f:a4:3d:70:76:d3:ba:81:ad:19:c3:e0:99:66:3e:
c6:84:6b:9e:ac:f2:ef:da:5b:dc:66:41:49:bc:08:66:6a:9e:
6e:5b:43:e1:77:2f:af:3e:7c:06:c2:0b:28:9b:d3:54:00:3f:
70:5f:30:fa:b1:97:8d:f0:32:85:51:dc:d9:85:a0:d4:09:25:
ea:39:08:f9:7a:6f:c9:9e:71:51:4b:0c:ff:0b:b1:15:c9:df:
71:84:5d:28:94:7e:b7:20:8e:03:b7:1f:d1:7a:04:be:20:4d:
0e:32:c7:b1:c6:e7:f5:a9:00:c8:10:f6:68:74:2f:bc:82:0c:
07:f6:9e:5c:f6:e4:96:b4:91:b9:76:76:9e:98:ae:ba:5a:0f:
07:59:d9:c1:21:21:99:e7:fe:f7:32:88:2a:04:29:8a:53:c0:
b9:a0:93:bf:b8:25:d4:e5:44:85:25:9a:6a:4e:0d:d4:04:c5:
0c:a2:8b:d9:f7:37:fa:91:27:b4:f0:e6:69:c6:a3:d8:3f:41:
c3:9d:2f:f9:aa:41:74:0f:2b:fe:84:ff:b0:f4:02:a3:76:ae:
07:19:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:57:34 2026 by rpki-client