This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa
File: 3133382e302e3132332e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier: T/1K1HqJBNTPvzAHFLZHCFCj1sRFpy45xEJy4PavdcE=
Subject key identifier: 48:32:F4:22:DC:70:10:0B:F5:3B:76:AD:C5:75:82:57:96:44:DB:84
Certificate issuer: /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial: 46ED676B2785C9EB874B261180008FD76BDDCCC6
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa
Signing time: Tue 06 Jan 2026 19:46:15 +0000
ROA not before: Tue 06 Jan 2026 19:41:15 +0000
ROA not after: Tue 05 Jan 2027 19:46:15 +0000
asID: 64139
IP address blocks: 138.0.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 01:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ed:67:6b:27:85:c9:eb:87:4b:26:11:80:00:8f:d7:6b:dd:cc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Validity
Not Before: Jan 6 19:41:15 2026 GMT
Not After : Jan 5 19:46:15 2027 GMT
Subject: CN=4832F422DC70100BF53B76ADC57582579644DB84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:c4:72:fd:c5:82:8e:f4:5b:04:7c:d5:42:
34:cf:d3:46:45:0a:f7:67:de:ad:a2:a8:15:43:07:
35:40:8d:4e:00:5e:92:6a:d9:73:8b:06:a6:74:4f:
22:b9:1c:87:05:5b:d7:9a:2f:f9:3f:84:ef:7a:90:
f3:c6:c4:32:f6:76:cd:66:4c:d6:54:47:01:b6:5d:
d1:38:a3:e4:38:29:64:3a:01:ae:ac:e1:41:b6:70:
47:07:cb:62:7c:5f:8b:b7:6d:93:4e:48:c9:f5:a3:
33:56:fa:e3:72:b3:44:43:85:00:de:c8:a5:69:f3:
6c:69:47:3d:ac:5e:e1:94:24:cb:0a:9f:1e:70:02:
8c:db:b7:a3:70:e6:53:90:a4:8a:8d:76:89:90:6c:
9d:40:00:0a:b0:2a:d7:69:1f:8c:a8:09:d1:dd:47:
41:fa:6a:03:78:1d:a1:b2:f5:ff:d3:64:f3:54:55:
e5:c2:fc:77:3f:a5:b0:ad:cf:51:be:b6:6a:30:9a:
e5:04:80:e1:98:d8:f0:97:1e:6e:e6:a3:4a:6b:3e:
97:0b:92:e5:fc:2a:44:40:42:41:5f:a8:68:c1:de:
f1:f0:c3:26:14:89:b1:f3:62:c0:be:b6:31:9b:57:
3a:5c:54:73:56:cc:96:ee:b9:1a:15:ca:05:9c:a3:
75:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:32:F4:22:DC:70:10:0B:F5:3B:76:AD:C5:75:82:57:96:44:DB:84
X509v3 Authority Key Identifier:
keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.123.0/24
Signature Algorithm: sha256WithRSAEncryption
20:10:ce:07:e1:25:d7:83:91:96:fc:9c:0e:d2:94:cd:65:5a:
53:0f:99:e8:79:2e:0b:32:fc:0d:ad:be:34:a9:12:a4:c0:1c:
b6:e9:07:cf:be:38:c6:92:3b:ae:b2:a5:49:47:38:6f:b8:94:
72:a2:13:a1:47:b8:96:a7:b0:8d:e9:29:c9:90:f7:98:26:f4:
b4:2b:31:57:60:45:e9:4c:e9:d7:38:25:e1:13:94:07:10:76:
e9:c6:36:37:a9:3e:44:97:0c:9a:38:ad:d4:d1:17:e2:a8:cb:
7b:7b:d9:06:f1:ef:54:26:6f:1d:eb:41:8d:6d:ea:71:e0:a9:
de:72:d9:68:8f:4a:8f:b5:b3:ac:4a:0a:4a:9b:bc:c9:39:76:
ce:41:cf:9b:7c:23:9e:86:c4:28:21:86:51:c6:7d:67:ca:a8:
aa:44:18:b2:7b:77:4e:49:39:b4:75:0f:48:1c:e4:d8:88:85:
21:50:46:54:d2:66:55:1e:09:15:aa:d1:28:47:ec:db:58:5b:
8c:e2:f1:53:37:ff:5e:3d:2e:6f:da:cf:80:67:87:89:22:a3:
53:42:7b:53:28:20:ed:24:b5:e1:33:23:ac:23:a1:de:c3:52:
c1:02:93:9a:b0:eb:af:3b:5f:c2:cb:b7:eb:0e:21:6f:ed:13:
69:74:3f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:23:01 2026 by rpki-client