This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e39362e302f31392d3232203d3e2033363430.roa
File: 3135382e39372e39362e302f31392d3232203d3e2033363430.roa (raw, json)
Hash identifier: JcDKCbDNQYDId9a2unTPOqsUBErkZ0sLycfy89phZ/g=
Subject key identifier: AE:0F:EB:37:FB:84:E9:4B:4B:1A:76:0C:1B:47:1C:64:F3:ED:11:97
Certificate issuer: /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial: 59E366D6BD8B9C364FBDB079F50D0C9496BE1EE2
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e39362e302f31392d3232203d3e2033363430.roa
Signing time: Tue 06 Jan 2026 20:54:08 +0000
ROA not before: Tue 06 Jan 2026 20:49:08 +0000
ROA not after: Tue 05 Jan 2027 20:54:08 +0000
asID: 3640
IP address blocks: 158.97.96.0/19 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 07:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e3:66:d6:bd:8b:9c:36:4f:bd:b0:79:f5:0d:0c:94:96:be:1e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Validity
Not Before: Jan 6 20:49:08 2026 GMT
Not After : Jan 5 20:54:08 2027 GMT
Subject: CN=AE0FEB37FB84E94B4B1A760C1B471C64F3ED1197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:d8:7a:5e:3e:fe:3a:c3:d4:dc:cf:04:f9:
23:b2:5b:55:2a:be:24:56:c7:e7:d6:8c:d3:51:94:
b8:1d:a3:d8:43:48:10:4f:b8:91:0e:13:e4:35:2a:
c9:8b:03:9b:00:78:f5:30:bb:7d:31:ee:86:96:1a:
db:7b:bd:84:1d:b7:83:94:3c:bf:77:85:58:5f:74:
0e:bc:35:55:92:65:97:71:e1:45:84:ca:7c:4f:74:
05:60:13:87:08:b9:09:b5:02:06:8d:51:bc:c1:bf:
cb:92:3b:65:14:5b:33:f6:7b:9c:f8:5c:18:ba:51:
e6:44:cc:2e:04:09:e7:6b:e2:7b:ae:5f:d1:b8:e6:
a2:d9:c9:de:31:82:78:3c:64:dc:5a:36:a6:9c:57:
15:98:ae:a4:aa:f4:14:80:35:61:7c:d8:02:5c:6f:
f5:4a:1e:87:06:13:98:36:f8:e1:d7:25:55:5b:83:
b8:8c:67:af:e1:d6:3a:b6:1b:91:71:28:78:05:07:
ac:27:c5:f4:6b:cf:6c:1f:92:42:42:61:76:a7:83:
33:69:94:46:a0:69:7d:3a:c7:31:5e:94:f8:99:3b:
9b:a8:da:c0:6e:a7:ab:ae:84:9a:3d:1f:b2:bf:cc:
5a:ce:d8:de:47:67:d0:78:11:89:2e:a9:41:15:ff:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0F:EB:37:FB:84:E9:4B:4B:1A:76:0C:1B:47:1C:64:F3:ED:11:97
X509v3 Authority Key Identifier:
keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e39362e302f31392d3232203d3e2033363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.97.96.0/19
Signature Algorithm: sha256WithRSAEncryption
33:22:45:1a:71:a3:47:aa:89:9e:96:8a:b9:ff:38:4a:52:86:
4a:5e:1e:85:27:6a:0b:d6:4d:1e:e0:a1:23:2e:88:4c:ff:5a:
c4:36:b3:61:20:83:36:66:99:ec:e4:55:bb:35:52:fe:b0:f1:
63:55:43:5d:f2:dd:4b:51:2b:8f:79:5c:8e:cc:d0:7a:27:eb:
97:a6:f7:af:2a:65:a2:70:15:94:f4:ad:96:82:cd:e9:8a:4b:
64:b0:64:8e:d8:3a:8b:17:45:30:67:3a:15:91:52:01:36:b5:
71:7e:94:f9:2c:57:5e:05:64:dd:c9:f3:f1:f3:f2:6b:53:1e:
d3:19:1d:03:20:5e:69:00:37:d1:48:9b:db:cb:e5:75:1c:58:
47:5c:77:ce:8a:a0:8a:a6:98:04:fd:10:70:db:60:6d:20:c7:
2d:fe:f2:fe:4c:5d:32:ec:57:20:48:59:0b:a0:d5:0d:77:ad:
bc:cc:d6:f6:a2:fb:77:0a:ea:10:5a:ca:75:1f:30:cf:37:56:
40:5a:48:17:c3:2c:37:94:4f:4b:75:72:11:91:0f:8d:aa:50:
58:ca:6a:7a:42:31:00:ea:9b:57:e2:10:34:aa:21:2c:3f:11:
2e:22:6c:4c:2c:7d:ce:a0:2a:c9:a8:34:21:ec:45:b1:9b:65:
cb:7d:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:52:12 2026 by rpki-client