This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33382e302f32332d3234203d3e203237373733.roa
File: 3139302e39392e33382e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier: wA34+SotaDxn1yOoxfCS7JHqBeX2EfMQ+0KLlr4QXFM=
Subject key identifier: 50:10:1C:3F:17:B3:BC:56:EB:1C:77:7E:8C:D2:D2:34:01:BB:D7:59
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 6A33E46F1B81F4C99D53AA89E738E80D2662A55C
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33382e302f32332d3234203d3e203237373733.roa
Signing time: Tue 06 Jan 2026 20:53:14 +0000
ROA not before: Tue 06 Jan 2026 20:48:14 +0000
ROA not after: Tue 05 Jan 2027 20:53:14 +0000
asID: 27773
IP address blocks: 190.99.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 21:28:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:33:e4:6f:1b:81:f4:c9:9d:53:aa:89:e7:38:e8:0d:26:62:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Jan 6 20:48:14 2026 GMT
Not After : Jan 5 20:53:14 2027 GMT
Subject: CN=50101C3F17B3BC56EB1C777E8CD2D23401BBD759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:34:61:a7:2e:2b:cc:5c:e0:b1:19:4f:79:
79:07:ea:4e:70:62:24:a6:74:0e:9e:af:72:df:36:
ec:e2:0d:b6:18:d6:cd:fd:4f:9d:40:44:62:e5:6f:
8b:f2:c0:14:1e:2c:6b:89:e3:f9:57:8a:14:19:63:
ff:c5:e3:66:72:6f:e3:57:c7:46:e1:16:15:c5:46:
2d:57:f6:f7:75:bc:12:c4:f6:b6:71:24:a3:7c:ad:
51:3f:da:fa:5f:7e:24:ae:55:50:27:fd:c3:eb:d0:
22:af:40:a5:6f:eb:6e:d6:ab:a4:82:18:01:4b:13:
60:46:3b:8e:b2:d4:ac:fd:bc:e2:01:e0:d6:48:74:
bf:1d:56:bf:77:19:b9:29:34:14:a2:fd:9d:72:57:
7a:d4:3d:3c:d9:ed:3b:95:ee:8b:2d:d2:75:6d:90:
ca:07:8a:cf:0c:8d:56:7a:02:06:b1:74:10:bf:02:
d2:d1:a0:95:3b:60:f7:ea:31:99:74:58:e2:cc:78:
7b:2e:d4:cc:fd:4d:8b:e6:59:68:23:31:99:6c:83:
90:a4:f7:37:48:53:35:49:a8:f6:27:6e:26:4b:33:
ac:1d:53:09:3c:21:9b:4a:b1:91:23:c3:b1:7d:ce:
39:1d:5d:a2:68:b1:8c:ea:df:7d:88:e7:4e:12:05:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:1C:3F:17:B3:BC:56:EB:1C:77:7E:8C:D2:D2:34:01:BB:D7:59
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33382e302f32332d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.38.0/23
Signature Algorithm: sha256WithRSAEncryption
54:8f:0f:62:23:02:81:b3:cf:45:72:78:b1:fa:c1:db:42:49:
04:10:82:56:3d:dd:8a:96:e5:99:69:dd:4b:fc:89:6d:44:d7:
8b:b9:2b:4d:5f:5a:9d:ad:5e:7f:52:6d:e5:3a:0d:7c:4d:e1:
99:e6:39:b6:b7:3e:8c:2e:71:4e:7f:fe:9d:68:2f:f7:84:ed:
86:53:5e:95:22:70:ab:1c:59:02:20:dc:b4:6b:8b:01:f6:77:
e4:3a:9a:ab:ea:fd:e7:f6:9a:55:e3:19:7e:67:1b:08:41:4f:
5b:b7:1f:75:c7:6d:1e:8c:2f:53:ac:24:29:60:e2:bf:ec:35:
bf:cf:33:57:c9:03:75:2d:db:36:d1:37:b7:42:71:c4:e9:cb:
60:90:64:85:e7:a1:7b:16:c4:26:bc:74:a2:89:68:8b:12:dd:
ed:fb:79:e4:23:70:4f:c3:16:37:27:6a:95:c0:67:c9:65:1c:
10:e7:d8:02:60:6a:c6:67:39:1d:37:0b:06:ef:66:06:61:8e:
25:4f:e1:fd:1d:47:0b:4d:64:11:0f:25:a0:fa:a0:03:c7:68:
16:f3:65:b2:c0:98:39:11:63:a6:4d:76:aa:5f:62:f0:23:dd:
41:37:eb:05:fb:67:e8:92:7c:80:89:9b:00:ac:59:d3:71:b9:
d1:48:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:58:00 2026 by rpki-client