This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/3133382e3230342e3136302e302f32322d3234203d3e20323633383131.roa
File: 3133382e3230342e3136302e302f32322d3234203d3e20323633383131.roa (raw, json)
Hash identifier: nGEJxM7wJt/adgiMM9NAOghZn6PtIE2079NNwlAzNc8=
Subject key identifier: 01:1B:25:73:40:A3:5F:A5:91:88:0A:B0:F1:5E:FC:A9:70:A2:7D:B8
Certificate issuer: /CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9
Certificate serial: 671A4AC14084866D001AC30A935BFFD2EAC649B6
Authority key identifier: 65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/3133382e3230342e3136302e302f32322d3234203d3e20323633383131.roa
Signing time: Tue 06 Jan 2026 19:12:35 +0000
ROA not before: Tue 06 Jan 2026 19:07:35 +0000
ROA not after: Tue 05 Jan 2027 19:12:35 +0000
asID: 263811
IP address blocks: 138.204.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl
rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 01:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:1a:4a:c1:40:84:86:6d:00:1a:c3:0a:93:5b:ff:d2:ea:c6:49:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9
Validity
Not Before: Jan 6 19:07:35 2026 GMT
Not After : Jan 5 19:12:35 2027 GMT
Subject: CN=011B257340A35FA591880AB0F15EFCA970A27DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:b5:60:9d:62:64:0a:c3:d3:0e:e9:cd:ee:
c3:53:9c:d3:6b:52:6d:8c:44:98:7b:73:86:d9:58:
c9:7e:87:7f:28:e8:1d:a0:4d:04:20:5f:de:b8:b1:
ae:87:9b:d8:86:bb:2b:78:f0:ab:d2:7a:b5:0c:4b:
bf:91:3c:a3:80:4f:24:fc:f8:f6:3e:de:15:08:f5:
9e:87:41:cc:62:f4:c9:a9:ce:b9:a6:fc:6b:ce:84:
5a:23:db:be:ed:da:7e:da:9b:7d:21:e1:eb:0f:1a:
ff:cb:72:d5:23:a6:d2:ab:bd:b3:a2:53:41:cd:41:
6b:fe:91:d6:92:05:02:e0:cc:3d:5e:41:12:ff:50:
40:dc:c1:ef:15:14:28:e2:87:1c:40:d6:54:83:7d:
50:a1:91:94:ae:63:7e:bd:e7:ee:c5:7d:7d:c4:9e:
a0:99:b9:65:4f:c4:44:47:52:ad:a5:fc:e1:ed:9d:
06:f4:5f:1f:23:68:af:96:b6:c3:e3:a0:d3:cd:e3:
d2:e2:4f:4e:b9:bc:bf:e1:07:a7:d3:59:72:a3:7e:
71:22:d7:96:b7:48:b4:52:ee:4e:93:2b:06:56:59:
d3:ee:6f:73:83:f8:fa:a0:96:2c:ac:cc:43:48:53:
01:a2:ac:18:dd:4a:81:e3:ea:ad:26:85:79:a0:5a:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:25:73:40:A3:5F:A5:91:88:0A:B0:F1:5E:FC:A9:70:A2:7D:B8
X509v3 Authority Key Identifier:
keyid:65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/3133382e3230342e3136302e302f32322d3234203d3e20323633383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.160.0/22
Signature Algorithm: sha256WithRSAEncryption
11:7c:db:f7:3d:a2:b4:1f:12:74:ff:6f:b8:c9:c4:d3:1a:bd:
90:0b:54:2d:14:b1:f1:69:ca:6b:b6:2e:d8:c6:b8:e0:2d:64:
25:44:e0:a2:88:84:ac:d6:ce:1b:1d:9c:36:52:0b:42:5f:51:
57:d5:1f:6e:4f:fb:60:a1:32:1b:39:c2:63:08:1f:6e:7e:41:
53:ed:bf:67:79:39:18:1d:56:cb:2e:2f:94:8c:d1:c6:b0:c4:
47:d7:df:37:f8:24:f8:2d:85:0d:a8:9e:98:35:d0:8d:99:bb:
bf:29:09:07:84:ec:6d:ba:ab:ea:b5:33:40:64:cb:2e:2e:bb:
fc:b8:b3:6c:e7:e6:1a:1e:f7:c6:23:90:85:7d:8b:9d:d9:cc:
d4:f9:3c:c0:21:8f:5e:40:3f:2c:25:d5:61:ee:c8:00:38:c2:
5a:7c:4c:a4:af:6f:b6:b1:94:ae:3e:13:43:ff:ed:0b:5b:da:
8d:79:50:ab:75:f5:98:6c:ad:78:c7:f0:81:6b:cf:28:b0:56:
63:2a:34:38:9b:86:20:36:73:11:b9:3e:ca:f2:a1:3c:6a:c8:
f0:de:07:4a:2d:c6:57:1b:31:c3:78:0c:fb:97:f9:0d:78:23:
6d:75:89:85:33:f2:cd:63:fb:2c:2f:0e:9c:3f:ec:9b:d1:f2:
d4:38:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 15:26:21 2026 by rpki-client