This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e31382e302f32332d3234203d3e203130363230.roa
File: 3139312e3135362e31382e302f32332d3234203d3e203130363230.roa (raw, json)
Hash identifier: D8poZbYQJGrQ1IutaSn/DaNgYsyPbYQZIbSXBBqp6NY=
Subject key identifier: 6B:0A:7B:F5:B2:E8:88:20:C5:F8:2B:4A:C4:12:63:43:AC:F7:8E:06
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 5BA2E259A2C05546B727CC03342CB592EBB42EBA
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e31382e302f32332d3234203d3e203130363230.roa
Signing time: Tue 06 Jan 2026 19:02:54 +0000
ROA not before: Tue 06 Jan 2026 18:57:54 +0000
ROA not after: Tue 05 Jan 2027 19:02:54 +0000
asID: 10620
IP address blocks: 191.156.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Jan 2026 21:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a2:e2:59:a2:c0:55:46:b7:27:cc:03:34:2c:b5:92:eb:b4:2e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Jan 6 18:57:54 2026 GMT
Not After : Jan 5 19:02:54 2027 GMT
Subject: CN=6B0A7BF5B2E88820C5F82B4AC4126343ACF78E06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:07:de:3b:f1:4a:bb:e9:08:f6:22:7e:0e:
48:8b:cf:1b:b5:b8:68:16:4b:dd:91:4a:98:e4:05:
6b:4a:81:f4:a1:6b:59:4b:73:bb:77:e2:64:a4:ff:
1f:40:83:dc:1f:67:41:8d:25:1c:eb:b2:96:d6:82:
a6:5e:91:f1:e0:be:90:62:9d:32:53:6e:8f:4e:d9:
95:a7:d8:37:9b:3c:99:21:fe:7d:69:e7:7c:7c:36:
a0:c9:af:58:5c:f1:7d:32:36:a5:8f:d4:f4:54:53:
bf:7b:4e:2d:72:4f:a1:b0:5f:ab:51:68:c6:75:6d:
98:20:97:ea:e0:32:e0:03:ef:df:c7:5b:9d:d6:57:
77:a2:1f:06:d2:8d:92:34:aa:90:85:73:63:b7:82:
6a:8a:7c:97:78:a9:22:25:9d:dd:a6:3d:63:42:49:
fa:23:a0:56:c9:21:ef:23:41:07:86:0f:bf:6c:16:
3e:2a:22:11:91:33:37:4a:7a:78:05:4c:c2:24:4d:
b6:61:e8:13:88:39:44:01:57:9c:a2:44:00:c1:c5:
12:36:f9:c3:78:08:eb:12:dd:a0:f7:2b:af:c1:49:
15:6f:9e:bf:10:42:d5:eb:a0:90:95:e1:d5:bd:c8:
3b:ae:94:20:00:80:cf:bd:e1:5a:fe:93:db:99:63:
8a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0A:7B:F5:B2:E8:88:20:C5:F8:2B:4A:C4:12:63:43:AC:F7:8E:06
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e31382e302f32332d3234203d3e203130363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.156.18.0/23
Signature Algorithm: sha256WithRSAEncryption
76:5e:0f:9d:92:96:de:20:a7:75:fd:06:97:e4:6c:02:25:7f:
73:29:27:80:50:f3:a0:cb:3a:76:3b:11:68:a1:3a:01:93:26:
f4:95:4d:6e:8d:61:dd:f9:5b:48:79:dd:44:5d:6c:07:a9:e6:
8e:df:79:7a:c5:11:ba:9a:f6:03:50:3b:d4:27:59:e4:35:ab:
cb:12:da:c3:41:a5:cb:8f:74:8a:e9:70:9b:15:1f:16:09:43:
04:ac:84:bb:67:07:12:6d:c5:6a:1b:37:73:3a:80:9c:18:26:
f5:05:87:ae:88:c9:78:0c:96:61:30:6f:2f:93:cc:60:60:36:
2f:70:92:fc:4e:5f:70:11:49:70:05:3f:c7:07:1e:5c:b1:95:
35:84:fd:cf:b7:4b:52:88:f3:c0:11:4b:45:30:d2:1f:fa:a7:
ba:d6:20:05:fa:52:c5:4b:29:78:9c:ea:c1:44:d9:fc:3a:d8:
ff:4b:d0:0e:5d:e2:67:d3:07:c4:93:95:07:79:02:b7:fc:ac:
2f:0d:24:6d:80:21:52:87:1d:65:8a:e5:9e:d1:ff:ab:b1:21:
2a:f8:e2:d6:34:4c:e2:01:3a:7f:f4:ab:6b:73:4d:b3:8b:20:
21:b1:3b:47:84:43:5f:dc:40:02:4e:79:29:84:a5:f6:6b:43:
0c:89:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 08:39:58 2026 by rpki-client