This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e302e302f31382d3138203d3e2033363430.roa
File: 3135382e39372e302e302f31382d3138203d3e2033363430.roa (raw, json)
Hash identifier: 4f7el9b1xfRErC+dCsmtv+tv3KuBTRBSPDewub307Y0=
Subject key identifier: 28:EB:52:42:67:65:F2:72:7F:CF:08:6B:FF:4F:0F:10:87:A9:D7:8C
Certificate issuer: /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial: 024F25E577776B42928C9D4D543CCA2DD61CA7B8
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e302e302f31382d3138203d3e2033363430.roa
Signing time: Tue 06 Jan 2026 20:54:07 +0000
ROA not before: Tue 06 Jan 2026 20:49:07 +0000
ROA not after: Tue 05 Jan 2027 20:54:07 +0000
asID: 3640
IP address blocks: 158.97.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4f:25:e5:77:77:6b:42:92:8c:9d:4d:54:3c:ca:2d:d6:1c:a7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Validity
Not Before: Jan 6 20:49:07 2026 GMT
Not After : Jan 5 20:54:07 2027 GMT
Subject: CN=28EB52426765F2727FCF086BFF4F0F1087A9D78C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:07:84:2f:44:60:2f:52:d7:49:7b:0e:12:
4d:df:6e:97:c9:2d:86:28:01:5b:c6:b6:5f:0a:4d:
a8:5c:a2:a3:3d:83:d2:92:db:5a:04:e2:45:a2:ad:
fc:6c:1c:85:57:32:4c:11:fd:97:bb:dc:ea:83:53:
27:f8:4b:a1:5d:14:3c:9a:8b:7d:02:6f:0b:0f:9f:
21:be:e1:7b:e9:e4:0a:2c:54:ca:ff:31:8b:fb:ae:
eb:35:ad:b1:1d:6e:dd:58:ef:0c:78:c2:21:20:ce:
ad:89:43:b7:e4:10:d5:e3:94:89:11:df:ee:ae:7a:
06:87:d0:3c:9d:a3:01:1d:37:b7:87:f4:30:b8:67:
bb:e9:94:43:75:ed:b3:2f:bc:6e:1f:31:9b:57:49:
ef:30:e0:a7:8f:31:38:a5:a1:f9:39:40:a7:98:8d:
5a:83:49:00:f4:21:59:24:9a:1f:3c:5b:3d:e7:08:
d0:e2:76:e3:af:08:a1:5d:d7:4b:a6:26:d1:02:b5:
01:0b:93:22:57:95:5b:49:70:28:18:7f:58:a2:91:
da:0e:69:ea:02:60:56:5c:77:76:ea:ed:e3:c6:b4:
68:ef:32:cb:47:b7:e2:02:ff:40:58:f9:fb:54:fa:
4f:90:11:bc:8e:8f:b9:09:7f:d1:f1:c4:13:d2:a9:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:52:42:67:65:F2:72:7F:CF:08:6B:FF:4F:0F:10:87:A9:D7:8C
X509v3 Authority Key Identifier:
keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e302e302f31382d3138203d3e2033363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.97.0.0/18
Signature Algorithm: sha256WithRSAEncryption
63:fb:5e:38:3e:46:8f:78:2c:05:c0:73:a8:74:b2:5e:80:c7:
cf:bd:95:26:9f:dc:16:04:0c:83:e7:f6:77:99:8c:c7:ed:f3:
e2:a1:70:5f:11:bb:c1:29:2a:8a:2d:6e:02:37:50:4b:cc:30:
fa:6f:fd:78:5d:26:69:2c:08:b1:e7:88:c4:14:a2:ef:a2:c8:
3d:33:12:be:b3:bc:8b:c9:c6:2c:92:38:73:e6:e0:12:23:c2:
f5:36:37:c1:b9:79:40:ec:a1:11:15:a4:b8:67:27:1c:0d:94:
53:ec:41:a9:02:df:62:70:a1:30:b4:50:80:19:11:ac:e9:a9:
3c:b3:ba:dc:df:32:8a:a9:98:bb:d7:15:dc:9b:bc:2e:2c:0e:
3f:db:52:e5:3d:2f:cd:bc:57:27:8e:3b:27:f6:2b:9a:55:05:
f3:74:8f:7a:a4:29:5e:e2:ca:70:56:bc:96:63:4c:35:d3:97:
49:e4:57:b5:b5:2e:21:19:35:8e:5e:6f:ab:4c:4c:04:0f:33:
a6:37:29:7e:70:a5:a9:56:53:55:e2:c3:e6:19:41:0d:45:10:
20:97:21:dc:bf:c5:49:32:c9:c2:cb:a4:10:bb:b8:3b:c0:5d:
ce:f9:3b:22:25:dd:03:b0:61:8d:a6:3e:9b:a2:09:f5:e7:40:
99:bd:15:f4
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUAk8l5Xd3a0KSjJ1NVDzKLdYcp7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQzRjFCNkNDRDhFQzRDMDVENkQ5QzI5OERDRTgyMUEy
RDQ0NDQxOTAeFw0yNjAxMDYyMDQ5MDdaFw0yNzAxMDUyMDU0MDdaMDMxMTAvBgNV
BAMTKDI4RUI1MjQyNjc2NUYyNzI3RkNGMDg2QkZGNEYwRjEwODdBOUQ3OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2geEL0RgL1LXSXsOEk3fbpfJ
LYYoAVvGtl8KTahcoqM9g9KS21oE4kWirfxsHIVXMkwR/Ze73OqDUyf4S6FdFDya
i30CbwsPnyG+4Xvp5AosVMr/MYv7rus1rbEdbt1Y7wx4wiEgzq2JQ7fkENXjlIkR
3+6uegaH0DydowEdN7eH9DC4Z7vplEN17bMvvG4fMZtXSe8w4KePMTilofk5QKeY
jVqDSQD0IVkkmh88Wz3nCNDiduOvCKFd10umJtECtQELkyJXlVtJcCgYf1iikdoO
aeoCYFZcd3bq7ePGtGjvMstHt+IC/0BY+ftU+k+QEbyOj7kJf9HxxBPSqerZAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUKOtSQmdl8nJ/zwhr/08PEIep14wwHwYDVR0j
BBgwFoAUpD8bbM2OxMBdbZwpjc6CGi1ERBkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDU0NzhDOUM1MTUzODVFOTRGODJFM0FCMzg1NDNBNzhC
QzQ3Q0RFQzZFNTA1QTI5MUZCQkQ2MDI0REIyMzM1LzAvQTQzRjFCNkNDRDhFQzRD
MDVENkQ5QzI5OERDRTgyMUEyRDQ0NDQxOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDNGMUI2Q0NEOEVDNEMwNUQ2
RDlDMjk4RENFODIxQTJENDQ0NDE5LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA1NDc4QzlDNTE1Mzg1RTk0RjgyRTNBQjM4NTQzQTc4QkM0N0NERUM2
RTUwNUEyOTFGQkJENjAyNERCMjMzNS8wLzMxMzUzODJlMzkzNzJlMzAyZTMwMmYz
MTM4MmQzMTM4MjAzZDNlMjAzMzM2MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBp5hADANBgkqhkiG
9w0BAQsFAAOCAQEAY/teOD5Gj3gsBcBzqHSyXoDHz72VJp/cFgQMg+f2d5mMx+3z
4qFwXxG7wSkqii1uAjdQS8ww+m/9eF0maSwIseeIxBSi76LIPTMSvrO8i8nGLJI4
c+bgEiPC9TY3wbl5QOyhERWkuGcnHA2UU+xBqQLfYnChMLRQgBkRrOmpPLO63N8y
iqmYu9cV3Ju8LiwOP9tS5T0vzbxXJ447J/YrmlUF83SPeqQpXuLKcFa8lmNMNdOX
SeRXtbUuIRk1jl5vq0xMBA8zpjcpfnClqVZTVeLD5hlBDUUQIJch3L/FSTLJwsuk
ELu4O8Bdzvk7IiXdA7BhjaY+m6IJ9edAmb0V9A==
-----END CERTIFICATE-----
Generated at Mon Jan 12 12:14:00 2026 by rpki-client