This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa
File: 3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa (raw, json)
Hash identifier: tTxYgyoXiLSluvizKBoGWmzIfuVTFjJCtocNUBfZJPw=
Subject key identifier: B0:0E:53:46:63:21:C6:F0:A3:57:3D:88:AA:84:47:09:62:13:33:4E
Certificate issuer: /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Certificate serial: 1AA18A7BA00BE7DC8670EBB615E2CAA24731825C
Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa
Signing time: Tue 06 Jan 2026 19:23:43 +0000
ROA not before: Tue 06 Jan 2026 19:18:43 +0000
ROA not after: Tue 05 Jan 2027 19:23:43 +0000
asID: 265771
IP address blocks: 128.201.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 03:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a1:8a:7b:a0:0b:e7:dc:86:70:eb:b6:15:e2:ca:a2:47:31:82:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Validity
Not Before: Jan 6 19:18:43 2026 GMT
Not After : Jan 5 19:23:43 2027 GMT
Subject: CN=B00E53466321C6F0A3573D88AA8447096213334E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:a3:60:43:47:4b:b2:e8:88:54:37:09:75:
3b:02:9c:ee:a7:f3:53:6b:3a:7f:e9:cf:48:63:08:
35:95:27:6e:58:02:29:68:e2:b3:b9:cc:5c:1f:51:
a1:1d:5d:5b:72:f5:24:cc:31:6e:b0:4e:b3:f6:8d:
8c:0a:30:4c:46:01:e3:57:f0:86:97:30:ae:49:7d:
74:aa:f6:45:55:90:94:82:81:ed:a3:e4:e6:18:a0:
de:0f:c7:e8:5a:3c:e0:d5:d5:86:37:66:52:63:18:
bd:70:87:7e:b4:dd:2f:cb:f0:24:1f:8e:63:5a:85:
be:c0:14:b3:81:60:0c:4f:4a:03:6a:90:6e:19:c1:
fa:88:17:e9:5e:f7:e8:a8:6b:69:0f:9c:75:ee:62:
a0:b0:c0:8b:8f:dc:73:f3:7e:92:42:95:85:d2:c0:
df:df:73:6a:b9:d1:8c:8a:b4:23:57:c3:35:53:e9:
0a:41:07:ab:6f:64:55:b1:fc:2e:89:c6:4d:95:3a:
7a:5a:fb:b6:6a:2a:49:8a:de:b8:7c:94:a1:2c:1a:
75:49:b4:ba:a7:c1:6d:1c:32:79:7d:12:43:7a:88:
9f:63:9b:ae:9d:5b:84:e4:79:8b:ed:1e:e8:c4:27:
41:3a:25:18:87:9c:72:89:ae:2f:65:59:70:10:54:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0E:53:46:63:21:C6:F0:A3:57:3D:88:AA:84:47:09:62:13:33:4E
X509v3 Authority Key Identifier:
keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130392e302f32342d3234203d3e20323635373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:19:a9:ac:6f:75:20:3e:be:4c:d1:fc:f2:7a:03:38:bd:6b:
2d:d3:f2:73:db:3e:5d:e2:b2:d4:6b:9c:13:7e:53:a3:30:e9:
aa:8f:a2:51:10:12:10:c6:e7:7c:5a:55:41:3d:f5:50:82:6b:
15:70:d9:00:b7:8a:30:54:c0:b0:5e:d8:c9:9c:35:79:5a:03:
dd:5f:8e:e9:75:5c:8f:c1:2c:53:87:b5:95:e1:83:d6:14:59:
9f:98:e9:18:f1:24:12:7a:bc:4b:1e:24:8a:7f:74:62:1f:de:
db:a0:97:3b:e3:bd:cb:7f:0c:c2:04:12:cf:d7:0a:a6:59:39:
1f:5b:e4:3f:1c:f9:a4:79:68:de:15:0f:84:b4:51:90:be:80:
0a:39:e1:35:5f:a1:43:c5:83:84:98:46:74:41:9c:b3:e6:a3:
b5:54:9d:01:44:ce:6e:ba:12:ee:6f:76:ee:a3:37:fb:5d:24:
53:04:db:16:97:07:c5:fe:bc:92:87:96:5a:09:e2:1e:b8:c9:
a9:65:7f:eb:fc:1e:29:34:a0:63:3a:0e:45:29:cc:19:50:67:
9e:93:31:34:f0:84:ae:0c:30:23:de:58:c0:d0:db:90:7a:c6:
4d:a8:29:ec:ff:9b:ac:6d:61:08:69:03:23:08:91:fb:d0:6f:
cd:38:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 16:01:39 2026 by rpki-client