This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37302e302f32332d3233203d3e20323633323039.roa
File: 3139312e39372e37302e302f32332d3233203d3e20323633323039.roa (raw, json)
Hash identifier: rQd3kk1Ib+Yibx0wltvnk5XUHtPK92c3e30Rlv1x7cs=
Subject key identifier: 03:95:9E:35:E9:E4:5A:0D:AA:80:49:57:F1:54:A8:1F:8F:20:DE:AE
Certificate issuer: /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial: 7A8E800B0EDE28AB821C675D098BAB59A0AEA586
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37302e302f32332d3233203d3e20323633323039.roa
Signing time: Tue 06 Jan 2026 19:23:26 +0000
ROA not before: Tue 06 Jan 2026 19:18:26 +0000
ROA not after: Tue 05 Jan 2027 19:23:26 +0000
asID: 263209
IP address blocks: 191.97.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8e:80:0b:0e:de:28:ab:82:1c:67:5d:09:8b:ab:59:a0:ae:a5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Validity
Not Before: Jan 6 19:18:26 2026 GMT
Not After : Jan 5 19:23:26 2027 GMT
Subject: CN=03959E35E9E45A0DAA804957F154A81F8F20DEAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:95:f4:c2:84:db:de:1a:98:66:56:a3:06:
86:19:35:e6:a2:45:d0:31:67:55:49:05:45:e0:37:
b0:4a:6e:51:5e:86:07:31:b0:8b:0d:c4:f7:f0:1f:
60:2b:93:b4:66:68:29:ca:71:71:ee:cc:64:83:9a:
14:b4:98:c5:1e:dc:c5:8a:be:59:e2:de:d2:ee:bf:
54:a7:3a:f1:56:1f:95:32:56:65:4f:05:55:b6:d5:
94:6f:97:50:0a:cc:b0:ae:2a:a6:d8:d4:4e:6f:ea:
ac:3a:9c:50:fd:c1:68:b3:e7:6f:a5:fe:9f:64:8b:
92:89:ed:9e:2a:d4:6d:48:11:16:9f:19:9a:6d:dd:
e3:59:78:5b:42:fd:f0:34:34:00:04:e1:d5:35:63:
09:1d:84:80:83:6e:c4:ff:bc:1d:87:01:b4:f6:b3:
73:65:aa:18:1b:94:34:1a:aa:3e:bb:4f:0b:03:0e:
ea:8e:eb:24:52:40:99:3b:c1:0e:0d:c7:bc:b3:56:
ad:ab:26:55:f4:31:1c:3b:08:27:18:f0:76:38:cb:
63:78:5b:fc:86:2b:62:b2:b5:af:25:07:92:31:02:
00:3b:62:6f:01:1b:6b:ad:7d:dc:67:81:4a:2e:3b:
75:4d:75:f6:3e:b2:0b:bc:1a:4c:85:19:30:c4:8c:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:95:9E:35:E9:E4:5A:0D:AA:80:49:57:F1:54:A8:1F:8F:20:DE:AE
X509v3 Authority Key Identifier:
keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37302e302f32332d3233203d3e20323633323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.70.0/23
Signature Algorithm: sha256WithRSAEncryption
43:b6:49:44:a1:83:9f:f1:01:bd:21:35:36:3d:2a:19:b5:48:
ed:56:ac:92:13:51:2e:00:a9:34:07:48:63:6a:58:44:ee:4d:
71:3e:85:05:e6:bd:82:86:c4:ee:76:36:05:fc:37:4a:9a:b3:
e8:4d:ea:b8:70:0c:e5:1b:31:0d:f8:5e:ac:84:67:27:2b:79:
c0:53:89:1d:b8:ee:3a:36:0f:72:43:90:03:0a:0a:ba:f8:5a:
e3:8d:c7:a2:51:2f:c1:dc:f1:69:fe:e0:46:14:e4:33:c6:27:
35:54:5c:d6:a3:7d:51:b1:61:b0:2f:03:eb:4a:48:ab:7d:17:
ab:4b:9e:6a:99:a3:94:6d:6a:69:58:92:ba:8d:cf:35:f6:7e:
5d:28:e2:7f:5c:0d:0d:41:94:17:50:c3:fd:f6:2f:6e:8d:23:
d0:36:ac:25:6b:31:de:79:2a:65:91:c7:80:cb:49:06:1f:d1:
d3:e3:cf:20:4a:f6:df:bb:3d:d0:d1:38:4f:a4:57:1d:e5:6e:
a6:5a:0c:a1:42:db:49:87:2a:b2:de:a9:20:9a:53:01:ed:23:
a5:6e:64:7e:0e:77:21:9c:3e:fc:40:46:7d:85:bb:aa:e7:b4:
bd:f8:14:dc:ee:23:8e:10:be:7f:e2:9f:c4:ac:b0:e9:15:d5:
9b:45:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:59:47 2026 by rpki-client