This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3133382e3230342e342e302f32322d3234203d3e20323633373737.roa
File: 3133382e3230342e342e302f32322d3234203d3e20323633373737.roa (raw, json)
Hash identifier: idps67kVg4RVW4eK7TEsTOPhNJIK6DE4HMCp6ryUP0o=
Subject key identifier: 27:48:D9:22:62:0A:5A:0D:EB:88:DD:EB:F7:EC:B7:0D:64:51:A4:FC
Certificate issuer: /CN=765D05128298873F41D1D65632AB25BDBE113398
Certificate serial: 3C8FDF19357F9062E7EE777D5BEBD5E6E6106851
Authority key identifier: 76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3133382e3230342e342e302f32322d3234203d3e20323633373737.roa
Signing time: Tue 06 Jan 2026 19:09:07 +0000
ROA not before: Tue 06 Jan 2026 19:04:07 +0000
ROA not after: Tue 05 Jan 2027 19:09:07 +0000
asID: 263777
IP address blocks: 138.204.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl
rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 17:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8f:df:19:35:7f:90:62:e7:ee:77:7d:5b:eb:d5:e6:e6:10:68:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765D05128298873F41D1D65632AB25BDBE113398
Validity
Not Before: Jan 6 19:04:07 2026 GMT
Not After : Jan 5 19:09:07 2027 GMT
Subject: CN=2748D922620A5A0DEB88DDEBF7ECB70D6451A4FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:b9:ac:25:7e:9d:fd:da:b8:69:70:10:7d:
c2:87:86:83:38:c0:7c:11:d1:98:ee:4a:9a:2f:6a:
b2:8f:37:9f:a0:94:23:52:1f:88:5e:58:93:4c:9a:
dc:fd:5b:fe:93:27:8c:8d:29:ae:98:58:f9:30:a8:
d4:62:0d:82:b8:dd:94:97:c9:f6:9a:1b:8e:d9:78:
ae:3b:d9:b2:14:cc:d3:c1:28:13:e3:ad:63:7a:d2:
a8:b1:2f:24:9e:64:bb:3b:bc:b9:b6:2c:8f:c6:d8:
d6:8c:0f:19:8c:6a:ff:af:0f:ea:49:c2:75:8c:8a:
ae:42:dc:0c:de:f7:05:23:dc:77:df:a3:0e:90:53:
c1:c7:30:f3:b3:1d:1e:8a:49:36:6b:90:23:2e:58:
b8:88:9e:47:e2:90:f6:71:86:17:9b:3d:78:b2:89:
76:cd:a7:07:cd:4f:b1:7e:ab:ff:08:94:85:6d:52:
54:70:2b:29:c1:96:b1:23:12:60:63:8b:7c:e8:8b:
7c:86:8f:0e:69:52:09:4f:38:7a:54:fe:20:50:5a:
ae:6f:ea:aa:02:5f:ef:07:5f:00:c3:c7:b3:52:26:
6d:e5:fb:16:1c:a0:c3:d6:74:14:ed:f4:42:10:0c:
90:cd:69:75:b7:8c:ad:9a:3d:e6:98:c7:39:33:f9:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:D9:22:62:0A:5A:0D:EB:88:DD:EB:F7:EC:B7:0D:64:51:A4:FC
X509v3 Authority Key Identifier:
keyid:76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3133382e3230342e342e302f32322d3234203d3e20323633373737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:aa:87:af:32:d6:69:8f:f3:e8:0f:8f:35:fd:90:a4:49:6f:
61:92:19:c4:20:7a:4d:c0:37:a2:19:b0:ce:d4:e6:d5:39:02:
68:59:cf:01:4d:64:52:63:b4:ab:6d:04:2a:c2:00:fd:0b:ee:
33:ff:18:e9:1d:7f:60:b0:63:2a:55:8a:e1:7b:0e:fb:8f:3c:
51:2b:fb:25:b5:6a:4e:5d:c8:5d:22:0b:11:c4:02:eb:d9:33:
32:6d:0c:00:7e:68:0f:c4:aa:a8:08:95:c0:d4:ff:fe:b4:23:
ab:ef:30:d5:d7:41:7e:ba:90:6b:f8:34:87:dc:bd:b0:f5:ba:
32:2a:a0:87:ac:29:ce:78:bc:10:d8:f6:4d:9d:0c:4f:de:9d:
a7:de:24:90:6a:df:17:8b:2c:68:6a:a7:99:a0:69:db:ad:5c:
4c:5a:68:26:05:24:bb:55:81:29:15:23:31:cf:b4:b3:d3:34:
85:22:2f:c7:bb:9c:91:c8:78:09:0d:f4:93:18:d3:e6:a5:9a:
29:cf:2c:e9:c4:ed:26:e2:5b:a6:b6:9e:2b:f6:79:5f:b7:ee:
ce:24:03:6f:e8:d4:6b:74:8f:5a:43:14:63:03:12:03:80:8b:
72:2f:c6:4e:22:b2:9a:24:84:45:0d:ea:59:4b:b5:0f:25:d9:
35:6e:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:16 2026 by rpki-client