This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e203136363239.roa
File: 3139302e32312e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier: ZU284vxipQ5TSHHo1qSGEzGgCe/Qss83w3OTTGvxl8M=
Subject key identifier: 56:A5:FA:48:50:FE:37:05:0D:C9:28:90:D9:6A:AE:F9:73:A0:EA:CC
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 08E7CED8AA923ACD6C69B863E71AFCB6EBDCB527
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e203136363239.roa
Signing time: Tue 06 Jan 2026 19:24:53 +0000
ROA not before: Tue 06 Jan 2026 19:19:53 +0000
ROA not after: Tue 05 Jan 2027 19:24:53 +0000
asID: 16629
IP address blocks: 190.21.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 20:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e7:ce:d8:aa:92:3a:cd:6c:69:b8:63:e7:1a:fc:b6:eb:dc:b5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Jan 6 19:19:53 2026 GMT
Not After : Jan 5 19:24:53 2027 GMT
Subject: CN=56A5FA4850FE37050DC92890D96AAEF973A0EACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:14:75:76:c0:47:d4:46:f7:bc:ee:2a:3c:
a4:4a:cc:01:e8:c0:fa:39:c5:ee:22:16:50:15:c4:
33:05:aa:06:f7:9c:4f:9e:3e:4e:ac:ec:fe:15:8c:
bd:40:e2:f1:a6:c4:e4:3a:c0:63:01:d6:cc:3e:a0:
1f:cf:7f:e8:8b:e8:3a:2a:2e:92:5c:03:a7:e3:a9:
51:c1:ce:bc:0a:20:ff:b2:c0:b8:cc:6e:e3:d7:e9:
9f:3f:02:6b:ee:65:7c:45:f9:2b:33:ab:e5:83:4c:
c8:ed:9c:85:8c:0d:40:d3:67:46:08:67:51:b3:59:
3a:01:7a:3e:ec:53:3f:39:6a:0c:a2:f7:8b:a5:72:
d8:b7:11:3c:95:04:ce:4b:8c:17:6b:c0:75:d3:7c:
0b:41:1f:62:c9:ce:34:74:e7:b0:29:34:42:bc:96:
bc:56:25:62:2c:4b:fb:48:00:d0:f7:03:fd:a7:a6:
12:a4:a9:11:58:4f:90:8e:6b:cd:ba:04:47:40:45:
48:91:a4:23:00:d5:17:02:6b:5a:a6:f5:6b:c2:a5:
49:80:2f:f4:81:df:93:eb:4a:60:03:72:1a:f5:13:
f2:4c:54:da:06:ae:10:8e:83:d7:f2:21:95:50:17:
7d:33:18:7c:ea:fd:b1:5f:e2:b5:0a:41:71:37:d5:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A5:FA:48:50:FE:37:05:0D:C9:28:90:D9:6A:AE:F9:73:A0:EA:CC
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e203136363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.21.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:d3:a1:04:8c:fc:b7:4a:7f:66:eb:87:21:62:43:7d:01:65:
7a:0e:12:4d:9a:19:c3:37:58:82:65:d6:a2:71:cf:55:14:ac:
41:d2:48:43:17:ed:28:fc:a8:9f:c6:4f:45:bc:4f:bc:24:e4:
9e:a3:d7:bc:62:3a:ea:5c:d8:d9:13:75:37:07:ad:a8:70:f0:
01:48:fd:01:03:1e:19:ba:df:d7:52:9c:86:65:d2:73:57:8c:
32:3b:33:e1:21:c4:9a:d0:a2:b5:15:d1:0f:22:d8:66:04:c6:
77:3f:c6:42:5a:7c:e3:ce:27:1a:cf:81:02:ff:2d:f2:3e:45:
27:07:1d:43:96:44:5b:f2:95:4f:54:58:ec:c2:18:18:a8:e6:
b9:ad:51:b7:48:a9:1b:2f:95:49:08:af:61:15:9c:8d:00:53:
ca:31:9a:8c:03:0a:18:4c:49:54:b2:b9:66:42:99:5e:32:6b:
7c:8f:fa:7f:bf:b8:8b:4b:bb:c2:ab:ea:49:34:99:17:f9:27:
44:72:4e:9e:c0:4e:34:8a:e9:19:37:2a:3c:e8:56:aa:c2:53:
ea:a4:2a:c2:68:6a:68:2d:93:34:8b:a5:f7:78:5f:fc:6e:48:
5e:06:f1:33:34:f9:4a:a9:a9:fd:91:c9:24:eb:49:55:62:5f:
38:b8:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:41 2026 by rpki-client