This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32322d3232203d3e20323633323039.roa
File: 3139312e39372e37362e302f32322d3232203d3e20323633323039.roa (raw, json)
Hash identifier: PKJzleMo8IjrZHHOHPk4F3CfM6gSS8m33gr8dMDMBSg=
Subject key identifier: 5D:11:BA:61:E6:A6:44:1E:F9:86:11:01:5F:4C:8E:A3:4A:DB:2F:D3
Certificate issuer: /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial: 246DE4CE249A741B74E758206F9F3E27ABE03888
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32322d3232203d3e20323633323039.roa
Signing time: Tue 06 Jan 2026 19:23:29 +0000
ROA not before: Tue 06 Jan 2026 19:18:29 +0000
ROA not after: Tue 05 Jan 2027 19:23:29 +0000
asID: 263209
IP address blocks: 191.97.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 22:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6d:e4:ce:24:9a:74:1b:74:e7:58:20:6f:9f:3e:27:ab:e0:38:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Validity
Not Before: Jan 6 19:18:29 2026 GMT
Not After : Jan 5 19:23:29 2027 GMT
Subject: CN=5D11BA61E6A6441EF98611015F4C8EA34ADB2FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:e8:1b:0a:09:72:4e:9b:92:5a:08:a3:57:
f0:ac:6e:07:d5:e5:97:0e:29:6e:00:17:62:0c:15:
65:77:2e:50:78:87:8b:f0:ea:ee:5f:f6:19:90:f0:
19:de:71:67:38:4f:66:8a:e0:db:77:b8:38:a3:c1:
7e:23:f2:12:fc:d5:b6:31:b1:62:28:6a:b5:1b:fd:
5d:3d:39:b7:0f:c4:fb:67:d6:36:2f:63:e5:ff:30:
22:c1:47:e8:e7:10:d2:0b:92:85:33:a6:33:ca:60:
57:39:1b:66:9e:64:cc:f3:13:5a:56:63:94:f1:e9:
77:8b:c5:f1:d1:16:f8:4f:88:3f:ad:6f:f4:f8:cf:
91:cf:71:df:a9:6d:34:a2:8f:6b:c8:d5:ae:53:91:
7c:38:d3:a2:43:d3:86:74:3b:b4:19:3c:d8:44:39:
80:75:d8:bd:9a:71:a3:41:6c:92:8e:f1:41:1c:4d:
72:dd:a6:57:46:12:65:59:e7:fc:6e:f0:1c:20:df:
ae:9b:e6:ed:81:32:a2:99:00:70:c6:01:d4:ab:a1:
1c:e2:eb:77:b3:73:23:f5:68:70:ee:f8:90:58:db:
db:19:1d:7a:8f:46:18:7e:e8:3c:85:39:06:29:5e:
79:5a:5a:e6:ee:d3:80:f7:e5:8b:20:11:2d:33:a7:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:11:BA:61:E6:A6:44:1E:F9:86:11:01:5F:4C:8E:A3:4A:DB:2F:D3
X509v3 Authority Key Identifier:
keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32322d3232203d3e20323633323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.76.0/22
Signature Algorithm: sha256WithRSAEncryption
84:98:e5:0b:c6:c6:8c:67:85:3d:56:23:e0:4f:c9:a9:76:93:
d8:45:c1:b3:9f:d6:80:7e:17:e5:ab:e4:84:d7:05:f0:4d:b9:
a1:3c:f4:86:00:85:46:b7:62:30:0d:9a:39:bb:99:40:74:84:
65:a8:e1:f1:88:2e:86:37:2b:90:c9:f1:9a:39:15:76:f6:e3:
de:50:e7:d8:b5:c7:b7:07:78:06:8a:f9:e7:8e:f4:9e:10:55:
8e:2c:b5:b6:dc:9e:20:40:0e:f9:b4:28:45:0c:d7:45:88:f7:
58:07:45:dd:7c:33:57:bc:18:ee:43:b7:c9:a6:5e:83:a4:bd:
a4:63:09:cf:92:fb:c6:b8:70:6f:6a:ef:4b:8c:5b:d7:3f:da:
20:5d:ad:f9:ef:1b:94:dc:17:1a:d5:3d:a4:f2:d6:5e:b4:03:
86:4f:c7:44:84:3c:55:a7:17:ba:fc:15:f1:94:fb:bc:a7:df:
4c:40:d4:fc:60:10:7d:47:8c:32:b8:f0:5e:d2:9d:a6:9f:17:
78:d0:cc:f0:41:99:64:4c:13:74:87:d2:86:52:79:ba:52:d0:
d6:cc:20:12:49:08:c7:52:0f:7e:48:bb:ce:a2:45:0a:f3:cb:
aa:0a:a0:a7:d4:e4:1a:2f:c9:36:13:e8:6a:67:d1:ca:a0:6e:
57:e7:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 14:40:19 2026 by rpki-client