This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e3130362e3132302e302f32312d3234203d3e203131383135.roa
File: 3139302e3130362e3132302e302f32312d3234203d3e203131383135.roa (raw, json)
Hash identifier: Y26RreCIhHYx3yCpGctBs0KC2dDOTzscQ/5C5kVqqJA=
Subject key identifier: 76:FA:A0:A4:10:45:72:7C:7C:F2:AE:77:A0:33:41:05:E1:68:A0:3A
Certificate issuer: /CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Certificate serial: 2E5FF5F8EBBDBE09E6E163D946E7A79E13ACDCD5
Authority key identifier: D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e3130362e3132302e302f32312d3234203d3e203131383135.roa
Signing time: Tue 06 Jan 2026 19:28:41 +0000
ROA not before: Tue 06 Jan 2026 19:23:41 +0000
ROA not after: Tue 05 Jan 2027 19:28:41 +0000
asID: 11815
IP address blocks: 190.106.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl
rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:5f:f5:f8:eb:bd:be:09:e6:e1:63:d9:46:e7:a7:9e:13:ac:dc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Validity
Not Before: Jan 6 19:23:41 2026 GMT
Not After : Jan 5 19:28:41 2027 GMT
Subject: CN=76FAA0A41045727C7CF2AE77A0334105E168A03A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:ad:38:14:e5:5a:e7:0d:36:27:6b:21:93:
e4:5d:9e:d2:dd:17:02:e6:ec:ec:b3:18:49:6a:9d:
be:24:6d:9a:72:f8:ba:8d:cb:21:f7:29:5e:bc:d9:
4f:85:2f:d5:34:e0:37:78:a2:2e:34:be:21:bf:5c:
1c:9c:eb:ce:8a:d3:f7:d3:91:d1:87:34:67:24:21:
5c:fa:c5:c4:ba:bd:d1:8e:75:c8:1c:40:f8:0d:cd:
43:8c:a7:46:9a:37:cf:e4:92:af:b2:60:16:f4:8d:
a9:3b:1f:63:b0:c4:1f:1f:2f:16:a4:2b:51:66:84:
40:d1:85:03:24:7a:5e:dd:46:38:af:40:79:68:b8:
a0:52:52:6d:2b:00:e1:bf:ee:4c:72:5a:79:ab:c9:
2e:65:12:d3:7e:21:00:27:ef:65:4a:60:57:dc:c4:
fb:55:6f:e3:1b:c6:b5:ef:01:48:a0:02:2b:52:0d:
ed:24:d1:ba:36:b6:ce:7c:1a:5e:94:17:65:63:60:
c9:39:91:80:12:26:cc:5e:34:dc:51:38:6e:a7:9d:
f6:9f:a5:5c:92:60:7d:d0:3d:4b:39:ac:02:44:71:
69:33:c3:b9:d8:86:c5:d1:39:e7:e4:a2:37:d9:98:
2c:fc:66:a5:23:40:78:1e:98:5c:04:85:19:8f:f4:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FA:A0:A4:10:45:72:7C:7C:F2:AE:77:A0:33:41:05:E1:68:A0:3A
X509v3 Authority Key Identifier:
keyid:D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e3130362e3132302e302f32312d3234203d3e203131383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.106.120.0/21
Signature Algorithm: sha256WithRSAEncryption
42:b3:03:ce:29:7f:26:58:ad:19:87:08:2e:e1:cd:4b:01:7b:
db:99:bd:26:eb:24:50:37:30:5f:b6:09:07:89:a6:e8:84:fc:
c9:83:c4:0b:fd:c6:39:7e:e3:94:fd:0e:95:e7:7a:d8:7b:32:
16:3e:fc:89:8d:45:ca:dd:67:20:9d:f5:de:3c:08:f3:b3:27:
0b:35:2b:3b:6c:eb:48:9f:9e:ee:3d:ba:ef:e1:61:0f:99:ff:
71:85:f1:4d:42:ee:79:b2:63:7c:d7:1e:f6:4a:66:1f:de:5f:
74:7e:6b:5f:b7:20:d4:fb:e7:16:bd:43:6b:fd:35:de:46:cd:
97:1b:e9:0b:a8:47:be:ed:84:dc:83:b4:aa:55:3d:f5:7d:0a:
64:39:7d:eb:49:8e:62:47:d1:6d:1f:53:fe:bf:6c:f9:36:69:
a0:a7:47:b3:5e:92:da:15:5a:40:8d:8c:c1:00:e8:12:aa:1c:
97:de:dc:fa:93:0b:0f:fb:07:7a:a3:de:48:bc:ff:1a:61:92:
aa:12:55:c5:9b:b2:a5:90:fb:90:61:3f:a5:62:69:9b:04:bd:
ce:a9:7a:5e:4f:a2:21:cf:27:b8:ad:a7:0d:7a:5b:04:c6:7a:
a3:50:40:17:03:dd:c7:67:aa:46:69:48:0d:04:7b:e5:2e:10:
c2:22:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:35:15 2026 by rpki-client