This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/3136312e302e3132302e302f32312d3234203d3e203631343432.roa
File: 3136312e302e3132302e302f32312d3234203d3e203631343432.roa (raw, json)
Hash identifier: e8asZBPCjBcNkors+zn4gf1FrLSddU8HqG03LsJB86w=
Subject key identifier: AD:95:EC:10:B1:DE:52:98:9B:B4:76:AE:7F:08:03:0A:0B:64:B2:23
Certificate issuer: /CN=AA01668E71E93FC51932988C8351C9140C557FEA
Certificate serial: 3E1168CAC510E634965BFD903D263929FBEAF088
Authority key identifier: AA:01:66:8E:71:E9:3F:C5:19:32:98:8C:83:51:C9:14:0C:55:7F:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/3136312e302e3132302e302f32312d3234203d3e203631343432.roa
Signing time: Tue 06 Jan 2026 19:43:26 +0000
ROA not before: Tue 06 Jan 2026 19:38:26 +0000
ROA not after: Tue 05 Jan 2027 19:43:26 +0000
asID: 61442
IP address blocks: 161.0.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.crl
rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:11:68:ca:c5:10:e6:34:96:5b:fd:90:3d:26:39:29:fb:ea:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA01668E71E93FC51932988C8351C9140C557FEA
Validity
Not Before: Jan 6 19:38:26 2026 GMT
Not After : Jan 5 19:43:26 2027 GMT
Subject: CN=AD95EC10B1DE52989BB476AE7F08030A0B64B223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9b:f0:1d:39:68:3a:e4:dd:53:7a:7c:d8:4a:
b2:f4:82:33:2f:e8:42:32:63:bf:17:59:c8:0a:58:
d6:c6:0a:8a:d4:0d:bf:24:4e:c7:4c:7b:9d:40:c1:
d2:38:75:ac:c8:43:aa:33:b1:97:20:c6:83:4b:d3:
11:6e:5a:1d:eb:d9:3c:e7:bd:b6:7a:8f:1e:00:b6:
dd:08:9e:82:e2:c8:08:89:d5:ce:2d:8d:d9:13:5f:
1d:98:4d:01:38:2e:e2:8b:66:ec:da:31:98:11:17:
97:36:af:c1:fd:8f:bb:66:cf:f8:a4:e9:67:03:b3:
00:16:bb:73:af:f9:bf:99:b2:25:80:a1:ae:9a:69:
ee:13:d7:ff:2f:75:de:33:05:e0:50:1a:76:da:c0:
e1:bd:6d:b5:f9:a6:b1:0c:03:fa:dd:57:77:0a:d6:
51:b3:b3:00:01:a9:73:18:5d:35:91:ec:12:b2:ee:
40:d6:75:3b:b8:61:67:9b:5b:db:61:11:38:c1:88:
99:fb:30:c1:93:3a:2a:b9:8e:19:44:33:5f:9a:24:
cd:21:96:ec:a5:7c:2f:7c:fb:80:5f:81:d2:f6:b1:
d6:79:57:b9:6e:30:c5:5d:fb:3e:10:c0:1f:ff:af:
94:9b:af:01:1d:56:e3:bb:fb:50:aa:48:4a:26:de:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:95:EC:10:B1:DE:52:98:9B:B4:76:AE:7F:08:03:0A:0B:64:B2:23
X509v3 Authority Key Identifier:
keyid:AA:01:66:8E:71:E9:3F:C5:19:32:98:8C:83:51:C9:14:0C:55:7F:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/AA01668E71E93FC51932988C8351C9140C557FEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA01668E71E93FC51932988C8351C9140C557FEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1B33EAEEA3E2FBA5F7585A16F9654D02308347819CDA65A2EC88DF9611307D5/0/3136312e302e3132302e302f32312d3234203d3e203631343432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.0.120.0/21
Signature Algorithm: sha256WithRSAEncryption
47:c8:23:b7:61:d8:2f:e2:47:5f:7f:56:1a:66:30:43:da:c3:
96:68:8a:56:1d:93:8b:fb:f7:47:a0:89:89:64:f5:1f:0f:27:
85:e6:b7:ad:5c:64:f0:31:e5:d2:fa:00:dd:c5:8b:e7:fe:c4:
b0:c4:91:c3:8c:38:f8:9e:26:24:10:d9:dd:ca:a3:f8:65:8d:
62:66:52:03:9e:0a:0c:fa:75:08:7a:85:dd:85:4e:60:89:80:
6e:90:a3:88:73:8c:39:67:66:34:a2:4f:b5:81:83:49:49:29:
5e:95:13:8a:ab:40:8d:84:57:b9:a7:90:82:90:84:d1:15:26:
61:97:3b:e7:76:59:94:ff:03:e7:e8:c0:5b:1d:9f:1f:ad:4b:
4c:85:87:7f:63:9c:f1:f3:e0:13:f4:03:8e:81:15:31:c6:fd:
7b:62:18:38:b9:42:c0:07:ac:72:b2:aa:5f:8a:d2:b0:1e:4c:
3e:49:ea:69:64:78:5f:1f:7c:94:d6:80:e0:87:a6:45:f8:ed:
76:82:bf:66:1d:1a:f1:5e:a7:ff:52:37:ab:fd:0b:1c:f0:51:
83:e8:67:2c:fb:b2:40:9c:92:2d:97:5f:72:73:ee:90:dd:cb:
e3:58:f5:59:44:12:98:10:ba:74:68:50:7f:8a:e2:47:98:1a:
a7:c0:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:24:20 2026 by rpki-client