This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa
File: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (raw, json)
Hash identifier: RmhvMSewm57XjZWYjQ6FqQiuRZEOLVHefEqSR3AIuXM=
Subject key identifier: 86:1A:46:D9:52:E5:02:ED:1F:7C:20:D3:B9:21:87:57:C8:74:28:68
Certificate issuer: /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial: 46CF6BC3C6A006FEA9838F860F482EC5C5962FA9
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa
Signing time: Tue 27 Jan 2026 20:27:55 +0000
ROA not before: Tue 27 Jan 2026 20:22:55 +0000
ROA not after: Tue 26 Jan 2027 20:27:55 +0000
asID: 61451
IP address blocks: 148.222.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cf:6b:c3:c6:a0:06:fe:a9:83:8f:86:0f:48:2e:c5:c5:96:2f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Validity
Not Before: Jan 27 20:22:55 2026 GMT
Not After : Jan 26 20:27:55 2027 GMT
Subject: CN=861A46D952E502ED1F7C20D3B9218757C8742868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:32:09:4e:2c:2a:ff:f4:28:cf:3a:74:7a:
a5:65:5e:1d:51:02:37:e9:e6:8f:44:96:07:39:cf:
a8:60:63:72:f3:74:7f:d3:fe:fd:f3:68:cd:f1:f7:
07:dd:17:48:d5:3a:96:99:0f:52:2a:c7:c7:b3:31:
0a:f7:61:58:ff:94:56:35:21:2c:cc:9d:e0:00:57:
45:a9:16:ff:8e:a1:70:5d:31:c8:25:c7:4b:27:b4:
14:df:e4:ef:42:4c:d7:07:4f:d4:63:44:de:54:19:
4a:5a:cd:95:73:a9:8b:02:fc:03:28:52:56:07:38:
f5:d6:92:66:8d:c7:6c:bc:ed:11:1f:88:eb:47:0d:
a8:52:1e:6f:ab:00:59:4c:ac:31:0e:ea:42:80:13:
b5:00:33:e3:38:d9:95:24:f4:0e:d6:7c:f8:68:3c:
d3:49:1a:b6:af:8d:28:20:da:1f:4e:87:0b:9e:66:
5f:20:02:35:79:64:08:55:21:6a:11:2e:81:b3:7e:
ad:a2:a5:f1:4a:32:c5:34:40:c6:10:0a:25:a1:ce:
c1:cb:ca:6d:9f:11:05:08:d8:7e:5a:32:07:ab:c6:
51:6f:60:8c:17:3c:c6:9b:ec:ff:c5:e4:7a:53:01:
e0:f7:a9:dc:42:dc:7c:5b:d5:80:24:96:f5:5b:cc:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:46:D9:52:E5:02:ED:1F:7C:20:D3:B9:21:87:57:C8:74:28:68
X509v3 Authority Key Identifier:
keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.156.0/23
Signature Algorithm: sha256WithRSAEncryption
49:32:df:04:e3:92:67:0d:5a:86:19:7d:60:de:22:43:82:7e:
6f:a1:3e:e7:6b:57:0a:19:12:fd:ae:73:0f:09:66:e7:70:6b:
82:0b:03:49:8f:32:f8:08:4f:f5:2b:6d:c6:a6:a8:41:91:b7:
d4:bf:ae:01:14:13:f8:bc:40:7c:f0:c3:90:e1:51:77:cd:70:
6c:73:c7:ec:a8:05:a5:5e:60:17:fd:a3:ab:3d:d8:35:27:62:
f2:66:67:be:7b:8f:98:88:77:9d:85:9b:fa:97:21:8f:65:f4:
e5:15:d3:f7:19:ec:a5:4b:57:53:09:0b:5f:b1:72:bd:08:ba:
4f:d1:83:ab:53:5b:d0:e1:2d:f8:26:ab:10:2c:cc:57:e6:4b:
ee:02:c2:b1:e4:81:d6:bd:d6:57:d3:0c:f0:ae:aa:a4:0e:7f:
a3:b4:23:d3:67:6f:ad:69:d7:0d:db:14:24:58:1a:e6:a9:19:
78:cc:71:a9:aa:50:89:3e:c3:2c:25:0c:aa:d3:96:78:28:a8:
9a:ce:bb:47:a7:1a:3f:00:c4:0e:a7:ca:82:0d:c9:79:a3:9e:
82:06:23:fa:1c:d2:a1:89:dc:15:23:9a:73:cb:b5:66:df:06:
99:1c:d2:2b:7f:80:34:e9:1c:bb:5f:f5:66:4f:90:1f:c0:80:
ef:e0:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:02:50 2026 by rpki-client