This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa
File: 3139312e3135322e302e302f31342d3234203d3e203236363131.roa (raw, json)
Hash identifier: /LMWwRfJHQOa7Qcg+8OnREl3lqMSqdo82oyHf7LRGjk=
Subject key identifier: 89:C3:EB:B7:17:6C:C9:F1:FE:A0:A5:F7:96:E3:86:F2:BF:06:14:30
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 69F85221C2555A9BF8AC0379D7BF1A7BE2D89718
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa
Signing time: Tue 06 Jan 2026 19:03:02 +0000
ROA not before: Tue 06 Jan 2026 18:58:02 +0000
ROA not after: Tue 05 Jan 2027 19:03:02 +0000
asID: 26611
IP address blocks: 191.152.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Jan 2026 09:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f8:52:21:c2:55:5a:9b:f8:ac:03:79:d7:bf:1a:7b:e2:d8:97:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Jan 6 18:58:02 2026 GMT
Not After : Jan 5 19:03:02 2027 GMT
Subject: CN=89C3EBB7176CC9F1FEA0A5F796E386F2BF061430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:51:06:e7:bc:05:6e:15:e8:7d:c2:40:e9:
e2:24:ed:00:3a:c0:8a:6f:c3:46:c8:ca:a7:47:ff:
72:4c:a5:35:85:74:b9:0d:08:51:ba:68:08:f5:9e:
21:32:70:29:8e:a2:4b:e2:1a:49:74:77:f0:e0:07:
ac:68:c3:5f:18:29:03:4a:96:30:d9:c5:3d:81:27:
34:1e:c1:0e:19:c7:c1:3c:42:65:28:a8:0c:48:0c:
2d:ba:37:06:04:c4:15:98:f1:29:35:68:19:cf:0d:
d6:33:3c:44:87:8e:f7:ec:c1:88:71:5f:38:62:11:
9a:8d:52:eb:79:e7:33:7e:6f:8b:d6:8b:b3:6c:60:
2d:e5:2d:99:d6:d1:5b:d8:4a:84:fa:60:ed:b0:e2:
15:93:58:f1:7a:30:da:ad:22:6d:fd:ec:d0:44:b1:
f2:25:af:ff:a7:4e:9a:62:03:15:d0:02:a2:2a:a2:
fb:cc:e0:c2:7d:b4:55:c4:1b:7b:4b:41:f4:ae:14:
13:e1:fa:b5:a1:61:f5:2d:1d:5c:7f:78:69:3a:1e:
11:38:15:49:2a:66:65:41:8b:04:6d:fb:2a:ce:7d:
d9:f4:f6:14:af:fa:52:f1:39:e7:77:04:bb:7a:a6:
f1:4a:71:fe:2e:07:72:0d:09:14:63:c6:02:2c:6f:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C3:EB:B7:17:6C:C9:F1:FE:A0:A5:F7:96:E3:86:F2:BF:06:14:30
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.152.0.0/14
Signature Algorithm: sha256WithRSAEncryption
b3:b0:b1:3f:88:aa:00:50:00:2f:c5:60:da:4a:5d:0a:53:0b:
99:af:d2:5d:2a:2f:cd:62:14:45:7f:81:19:dc:7a:88:80:df:
a6:a6:7f:82:70:2a:e3:3a:ee:75:d0:61:6a:a3:f0:c1:4f:ce:
e6:1c:86:6f:73:85:6e:d2:c0:49:3b:97:db:43:fc:47:2b:11:
40:14:26:b5:2e:10:dc:36:75:f7:1e:e1:e5:f1:d8:b9:24:bc:
ff:cc:c2:ae:0c:5e:ec:ce:5a:9c:fe:de:83:8f:5f:9c:de:b5:
36:87:c9:42:7a:9a:88:05:de:35:d9:59:af:4a:eb:ea:ea:bb:
83:89:d5:b4:2c:c2:25:9c:7d:44:64:20:0c:3c:11:5b:d4:2d:
60:f5:8e:fe:66:7c:74:25:94:3e:6b:72:81:76:1f:15:43:56:
ad:b1:0f:df:d6:33:c9:16:07:c9:f7:d9:d6:9b:a3:e9:5d:fc:
f1:19:4b:12:f9:ef:4b:be:5a:00:e7:80:35:14:3d:0c:3b:c3:
97:2d:bd:0a:d8:78:2e:75:c6:45:37:5d:88:da:27:75:e5:73:
60:bd:82:9b:26:b4:fa:5b:1a:17:a9:b9:67:a6:c1:ce:cc:db:
3e:df:b7:36:fa:3f:2b:c8:c7:65:45:a6:a5:ef:e1:32:8c:ca:
a2:db:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:13 2026 by rpki-client