This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e33322e302f31392d3232203d3e203236363131.roa
File: 3139312e3135362e33322e302f31392d3232203d3e203236363131.roa (raw, json)
Hash identifier: 2VpnyQ7hk1wd/GkSBX7q0O74MNeSKJRJg1WVlxfj5Ec=
Subject key identifier: AF:DF:38:F3:93:98:A1:30:CD:96:E3:79:32:AB:A6:FD:2A:18:4E:14
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 51F05427C4BF2F6EFFF9283B594332DE24D7D005
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e33322e302f31392d3232203d3e203236363131.roa
Signing time: Tue 06 Jan 2026 19:03:12 +0000
ROA not before: Tue 06 Jan 2026 18:58:12 +0000
ROA not after: Tue 05 Jan 2027 19:03:12 +0000
asID: 26611
IP address blocks: 191.156.32.0/19 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Jan 2026 09:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f0:54:27:c4:bf:2f:6e:ff:f9:28:3b:59:43:32:de:24:d7:d0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Jan 6 18:58:12 2026 GMT
Not After : Jan 5 19:03:12 2027 GMT
Subject: CN=AFDF38F39398A130CD96E37932ABA6FD2A184E14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:0b:d2:98:92:4e:12:e7:53:ed:da:00:7d:
5b:40:7c:4e:e9:6f:bd:5b:f7:b0:fe:87:a3:00:41:
ba:a2:9c:e4:42:e9:a9:1a:4e:fd:a6:d9:92:c2:72:
9d:ab:73:60:45:11:66:5e:d7:8a:49:67:a4:0e:ab:
04:36:6b:09:eb:aa:c1:ca:94:8e:e0:6d:ad:c7:e6:
c3:41:69:3e:2d:98:c5:8c:67:6e:ba:df:29:c7:70:
d4:c4:d8:c8:a7:a5:70:36:83:8d:8c:b4:00:ca:b8:
94:e1:34:98:4e:c7:4b:c7:95:66:15:8f:80:d6:94:
ce:9f:35:21:f7:76:d8:60:5e:94:27:6a:c1:30:9f:
e5:df:4d:a6:ed:29:10:63:f8:e7:08:72:d6:8d:a2:
66:9d:44:6a:68:9e:7a:b1:c6:e8:da:a4:71:6e:dc:
d9:45:68:96:79:83:dc:a2:fc:03:44:59:0d:dd:be:
65:2e:14:63:85:e9:c9:ed:9d:2d:93:5d:33:3a:e1:
d2:8f:8b:90:1f:d5:3d:d5:af:fd:00:0f:4d:ec:2e:
93:b2:01:75:0a:63:e3:74:04:51:de:80:e8:65:d2:
f9:17:42:f5:b9:d4:3e:fb:d3:83:df:23:e4:59:05:
32:81:37:bd:1a:c1:d8:20:20:c2:80:e2:9c:da:10:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DF:38:F3:93:98:A1:30:CD:96:E3:79:32:AB:A6:FD:2A:18:4E:14
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e33322e302f31392d3232203d3e203236363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.156.32.0/19
Signature Algorithm: sha256WithRSAEncryption
04:c9:4f:c7:a8:5c:f6:e8:03:27:39:14:72:da:a0:2c:7c:94:
ec:4e:fe:1f:97:51:c4:9c:97:93:1a:0e:14:f4:f9:cd:66:09:
e6:48:35:a8:1c:47:e2:dd:b4:f2:83:44:53:61:cd:1a:f0:22:
7e:27:0e:4c:97:05:9f:12:44:75:c6:91:a6:e7:02:b1:ba:24:
76:7f:89:78:5d:8c:14:42:1e:7c:6a:4d:0e:f6:35:6d:ee:7b:
54:7b:c2:7a:12:5c:ce:35:dc:37:cc:b0:e0:45:56:61:5e:7e:
97:df:ea:9e:17:4c:8a:4e:58:ce:dd:3d:c7:19:11:c1:19:29:
d1:a8:5c:00:bc:2d:c8:27:33:2d:d8:ed:1e:2d:cf:77:ba:d3:
97:e5:10:3b:42:41:33:5c:64:e5:82:be:4a:c4:23:a5:94:be:
67:e0:6c:ed:ea:24:5b:57:b9:e3:c0:31:f0:ca:fa:8a:1f:aa:
d3:90:aa:41:04:c5:bd:d8:88:c0:33:40:76:81:17:39:f3:bb:
45:44:d1:ef:d7:af:70:a9:df:00:8d:af:88:42:d9:83:44:41:
15:41:de:9a:d7:a0:bf:08:22:d1:83:2f:e8:97:c5:82:71:d1:
e3:e0:e5:ae:c4:82:ab:a3:54:85:02:81:e6:e6:0c:a4:96:51:
72:54:54:d2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUfBUJ8S/L27/+Sg7WUMy3iTX0AUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNjAxMDYxODU4MTJaFw0yNzAxMDUxOTAzMTJaMDMxMTAvBgNV
BAMTKEFGREYzOEYzOTM5OEExMzBDRDk2RTM3OTMyQUJBNkZEMkExODRFMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbugvSmJJOEudT7doAfVtAfE7p
b71b97D+h6MAQbqinORC6akaTv2m2ZLCcp2rc2BFEWZe14pJZ6QOqwQ2awnrqsHK
lI7gba3H5sNBaT4tmMWMZ2663ynHcNTE2MinpXA2g42MtADKuJThNJhOx0vHlWYV
j4DWlM6fNSH3dthgXpQnasEwn+XfTabtKRBj+OcIctaNomadRGponnqxxujapHFu
3NlFaJZ5g9yi/ANEWQ3dvmUuFGOF6cntnS2TXTM64dKPi5Af1T3Vr/0AD03sLpOy
AXUKY+N0BFHegOhl0vkXQvW51D7704PfI+RZBTKBN70awdggIMKA4pzaEPxVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUr98485OYoTDNluN5Mqum/SoYThQwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzEzNTM2MmUzMzMyMmUz
MDJmMzEzOTJkMzIzMjIwM2QzZTIwMzIzNjM2MzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb+cIDAN
BgkqhkiG9w0BAQsFAAOCAQEABMlPx6hc9ugDJzkUctqgLHyU7E7+H5dRxJyXkxoO
FPT5zWYJ5kg1qBxH4t208oNEU2HNGvAificOTJcFnxJEdcaRpucCsbokdn+JeF2M
FEIefGpNDvY1be57VHvCehJczjXcN8yw4EVWYV5+l9/qnhdMik5Yzt09xxkRwRkp
0ahcALwtyCczLdjtHi3Pd7rTl+UQO0JBM1xk5YK+SsQjpZS+Z+Bs7eokW1e548Ax
8Mr6ih+q05CqQQTFvdiIwDNAdoEXOfO7RUTR79evcKnfAI2viELZg0RBFUHemteg
vwgi0YMv6JfFgnHR4+DlrsSCq6NUhQKB5uYMpJZRclRU0g==
-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:56 2026 by rpki-client