This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39382e302f32342d3234203d3e203231353735.roa
File: 3134382e3130322e39382e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier: T+OvPbxJXVU+JlVghDg8udgQWMTePL59mR+nqDRGD+s=
Subject key identifier: 83:97:9F:5B:23:4B:37:7B:32:C0:1A:3F:18:43:D8:7F:40:F1:DB:C4
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 4C43B73C5174897CDF347D683818908447A47CCE
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39382e302f32342d3234203d3e203231353735.roa
Signing time: Tue 06 Jan 2026 19:36:02 +0000
ROA not before: Tue 06 Jan 2026 19:31:02 +0000
ROA not after: Tue 05 Jan 2027 19:36:02 +0000
asID: 21575
IP address blocks: 148.102.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:43:b7:3c:51:74:89:7c:df:34:7d:68:38:18:90:84:47:a4:7c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Jan 6 19:31:02 2026 GMT
Not After : Jan 5 19:36:02 2027 GMT
Subject: CN=83979F5B234B377B32C01A3F1843D87F40F1DBC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:ee:50:0d:45:07:2e:c8:ba:de:91:f5:89:
bd:ae:3f:b3:c8:32:65:4b:e9:09:d1:98:e4:78:11:
7e:ff:11:0f:a5:c7:16:a9:f0:e7:8e:ab:c5:e7:5e:
04:74:af:1e:8d:37:62:fc:4d:9b:c4:76:f3:0d:1e:
1d:4f:9c:5f:05:8a:a4:5c:56:a8:8a:11:11:14:29:
6e:a5:06:7a:b3:a4:4b:14:4a:64:6b:5f:a2:78:2f:
ff:83:4d:00:e1:56:b2:1f:3d:e7:c9:ad:ae:52:bc:
72:1f:d7:75:7f:ae:80:1c:c1:5b:51:98:1b:f3:ac:
98:55:dd:ac:39:7e:48:11:41:5b:2a:e2:9a:53:d1:
0b:33:11:4b:23:54:ef:52:22:e0:b0:80:b8:08:9c:
c5:22:84:1b:ec:1b:59:93:92:37:ed:35:f5:5a:f6:
a5:e5:ff:d1:e0:2c:82:58:d3:20:fe:f3:76:fc:fc:
99:05:4e:af:c7:c2:0f:44:b4:8c:24:e6:a6:c4:c0:
c6:90:af:f9:e3:72:0a:e0:0f:ab:2b:10:5e:5c:6f:
17:4b:b0:7e:8c:e6:a1:0f:52:86:db:b3:10:61:50:
49:e1:03:06:82:68:f9:a1:68:1c:cf:13:b7:c4:6c:
2e:ef:cb:dc:f8:5b:14:7a:9c:f8:d1:b9:93:b6:73:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:9F:5B:23:4B:37:7B:32:C0:1A:3F:18:43:D8:7F:40:F1:DB:C4
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39382e302f32342d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.98.0/24
Signature Algorithm: sha256WithRSAEncryption
98:33:cd:df:7b:34:7f:8f:2d:7e:bb:58:99:83:2a:b4:c0:68:
c9:bf:d0:64:60:52:b8:9b:04:00:a7:2d:29:92:e3:88:17:0c:
55:f7:28:f3:3c:1b:04:74:fe:4a:87:33:e4:96:2d:a4:10:54:
96:cf:e0:d6:25:d4:63:dc:6c:aa:15:f5:1c:9b:e6:07:29:77:
b9:e8:96:48:91:5a:29:a3:1e:01:5c:bd:60:64:64:fd:bb:d3:
a5:4c:81:58:9d:10:49:e2:eb:b1:9f:8a:f6:45:2f:eb:5a:1f:
46:c1:96:cb:17:62:be:53:e8:d4:dd:f4:9a:c0:1e:4b:5b:6c:
53:1f:5a:4c:a8:df:30:27:91:98:89:c7:a6:ab:35:42:5b:74:
40:eb:5d:d9:00:76:5b:7a:55:9b:37:5a:21:01:b8:59:05:4f:
79:8f:b1:97:89:bb:a0:d3:40:55:c8:08:a5:da:cb:2c:f2:3b:
b7:d6:7b:39:80:d0:c0:a5:a9:21:0d:d5:72:50:b9:65:67:e3:
92:96:39:40:25:d1:da:de:be:b7:6b:e8:2a:00:59:12:05:90:
19:7e:36:67:42:bd:d3:0d:ac:ad:66:76:46:1e:42:dc:a9:89:
10:01:6c:bb:48:5f:4a:3e:e7:f5:b4:36:67:e6:73:a5:75:0b:
9d:b2:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:01:54 2026 by rpki-client