This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3133322e3235312e3232342e302f31392d3234203d3e203237383339.roa
File: 3133322e3235312e3232342e302f31392d3234203d3e203237383339.roa (raw, json)
Hash identifier: UHZ2Q+sklntfNh926Yg2JGtUKeQUD2qVcNsgSAq5vBU=
Subject key identifier: 73:88:E3:20:CC:C2:01:21:3F:8B:8E:68:46:A1:6B:C3:8F:28:16:05
Certificate issuer: /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial: 0AF0713C4C8B348ECE33E140FA89B2824C0AADE4
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3133322e3235312e3232342e302f31392d3234203d3e203237383339.roa
Signing time: Tue 06 Jan 2026 19:13:06 +0000
ROA not before: Tue 06 Jan 2026 19:08:06 +0000
ROA not after: Tue 05 Jan 2027 19:13:06 +0000
asID: 27839
IP address blocks: 132.251.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f0:71:3c:4c:8b:34:8e:ce:33:e1:40:fa:89:b2:82:4c:0a:ad:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Validity
Not Before: Jan 6 19:08:06 2026 GMT
Not After : Jan 5 19:13:06 2027 GMT
Subject: CN=7388E320CCC201213F8B8E6846A16BC38F281605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:03:93:69:03:71:91:ab:6c:5f:e0:d9:3d:
68:9c:c9:be:62:6b:b4:90:7b:a6:32:59:7a:aa:dc:
8f:eb:8c:8d:19:54:0b:45:05:16:25:d9:c0:22:c3:
ac:5d:e3:34:62:ff:96:f6:5c:6c:98:c3:24:b2:e5:
1c:7e:97:f6:d2:63:9f:34:33:7b:ad:76:f3:95:bd:
46:db:92:d4:44:02:df:2e:99:ed:e2:41:2d:e7:8e:
76:a1:b9:ca:58:f2:a2:98:48:0e:d6:ea:c7:b0:c1:
29:d7:e0:f2:36:2f:cc:e8:7a:56:c5:81:3b:7d:5a:
ba:9c:11:f8:4c:f8:1e:5b:d3:d7:bd:c1:d2:00:7f:
e7:4a:78:30:90:0c:c1:31:35:34:ad:c4:56:ff:f7:
e2:86:ad:9f:46:41:be:cc:af:5e:4f:fc:29:f1:8b:
26:c2:e5:a3:b3:c0:c6:43:07:6c:bf:87:7c:5d:ac:
6d:13:83:4f:94:14:ec:8e:58:fe:ad:3f:9d:8d:4e:
19:4c:fb:6f:c2:08:73:32:49:f1:b9:cb:18:c6:59:
19:7e:24:78:34:22:79:4f:bc:39:24:7a:f7:86:28:
ee:c2:4b:7c:05:72:ff:f3:dd:2b:8d:3a:ea:1d:87:
94:c9:1d:e9:46:a5:8f:a1:df:67:4a:d0:3b:42:75:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:88:E3:20:CC:C2:01:21:3F:8B:8E:68:46:A1:6B:C3:8F:28:16:05
X509v3 Authority Key Identifier:
keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3133322e3235312e3232342e302f31392d3234203d3e203237383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.251.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:93:f3:00:d8:b6:b4:7b:13:d3:da:bd:f0:67:c3:67:a0:aa:
63:5d:f9:7c:6b:c6:3d:31:ee:98:35:9f:12:95:15:fc:18:99:
60:11:00:78:43:90:94:05:2c:8b:8c:ce:a2:09:aa:3a:50:2c:
9e:56:64:9e:20:22:5f:ef:d6:44:b8:11:92:69:c0:99:05:a8:
fe:db:d0:b7:e7:e9:9e:1f:cd:05:63:19:41:0f:9a:a9:ad:cf:
d7:80:ad:0c:64:7e:f7:1e:c0:ce:9c:93:c7:85:c1:3a:09:4f:
46:72:96:04:55:53:f4:2b:55:82:f4:c8:41:be:bf:a3:23:4a:
21:4e:75:4c:fc:ed:93:63:2e:17:5a:74:1e:ec:de:1e:f2:79:
30:cf:62:8e:3f:2d:49:82:78:80:63:60:67:d5:c1:65:e4:8a:
f6:48:d7:03:f1:93:08:d8:45:37:0e:43:72:aa:03:44:de:e9:
db:ca:8d:f2:ac:c5:d5:f5:69:f9:bd:e6:a5:5b:f7:67:22:4a:
55:65:88:8a:da:18:0c:23:b4:bf:8a:ac:b5:19:e6:50:3b:89:
35:bc:dd:56:a5:82:7b:e9:57:3a:ae:2b:ba:03:b9:ad:3c:94:
8c:c6:80:37:ba:74:22:43:2b:f4:16:29:4c:f7:66:d8:9f:d8:
a5:f0:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:58:24 2026 by rpki-client