This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e39362e302f32302d3234203d3e203236363131.roa
File: 3139312e3135362e39362e302f32302d3234203d3e203236363131.roa (raw, json)
Hash identifier: CFbDbU7ahsm+PINng6HIjazrec3z5rxx8MsryvIxX7Y=
Subject key identifier: 28:C6:EA:AC:04:69:51:10:9E:F4:05:1A:13:B4:C6:FB:FE:E4:0C:68
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 32C49AA40A1ABECDFFB1B6CFDAE791FDC460259A
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e39362e302f32302d3234203d3e203236363131.roa
Signing time: Tue 06 Jan 2026 19:02:53 +0000
ROA not before: Tue 06 Jan 2026 18:57:53 +0000
ROA not after: Tue 05 Jan 2027 19:02:53 +0000
asID: 26611
IP address blocks: 191.156.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Jan 2026 09:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c4:9a:a4:0a:1a:be:cd:ff:b1:b6:cf:da:e7:91:fd:c4:60:25:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Jan 6 18:57:53 2026 GMT
Not After : Jan 5 19:02:53 2027 GMT
Subject: CN=28C6EAAC046951109EF4051A13B4C6FBFEE40C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:a0:a0:0f:5a:4a:9e:98:8d:48:eb:85:f3:
19:2e:f6:33:c3:49:a3:67:52:04:28:09:69:a4:bb:
3b:75:7f:0a:7c:5f:c6:ab:80:fb:f5:8c:2d:fb:5e:
79:e0:15:be:fe:fc:2d:c9:af:80:42:04:af:cf:e1:
74:8d:77:1a:65:f0:90:e6:3e:2c:f9:41:a9:b9:2a:
86:58:53:88:98:74:0a:4b:70:f8:18:4a:ad:23:cd:
b0:d9:75:e9:c0:45:34:4d:a3:18:77:ed:ca:4d:00:
d5:ef:25:f0:f5:1a:f2:52:67:3d:94:22:64:9f:f9:
fe:89:aa:34:8f:b6:fe:0b:e1:77:ff:68:71:6b:51:
67:59:cb:de:9a:d8:33:d3:ab:55:a4:07:47:87:94:
41:97:d8:44:c0:bf:4e:41:bc:31:22:e2:52:b3:b7:
eb:a0:4d:89:67:94:83:be:f3:6d:64:78:94:41:d4:
b7:64:db:a3:93:36:a5:93:53:99:f8:44:a9:f0:81:
e0:66:82:ee:9c:27:b2:38:0c:41:3d:a0:ec:84:ce:
6e:cb:dc:1f:8c:8b:3b:13:28:c8:04:ed:77:4e:a7:
59:55:19:cc:8c:00:88:f0:92:56:18:5a:79:a5:dc:
9a:d1:46:ce:31:a4:5e:5b:c5:93:77:76:da:5d:cf:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C6:EA:AC:04:69:51:10:9E:F4:05:1A:13:B4:C6:FB:FE:E4:0C:68
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e39362e302f32302d3234203d3e203236363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.156.96.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:97:b5:56:64:e5:ce:63:36:bd:81:08:dc:e1:dc:fe:d4:50:
1c:97:af:04:54:c6:f6:bc:a6:35:8a:de:d0:70:6f:59:39:45:
70:9a:93:e9:66:e2:4a:c4:62:8d:0a:b4:c1:53:35:bb:1b:90:
7e:6b:07:05:ad:5a:67:57:da:57:c7:e1:86:90:18:6d:6a:dd:
41:6c:05:28:52:27:4d:4f:4d:6f:69:68:55:0b:b3:8a:56:47:
5c:4c:e2:8e:2e:48:7a:c4:4e:9e:54:ae:2d:16:71:d6:63:32:
c7:ae:f8:ac:14:5f:a8:ae:55:b0:6f:38:ae:7a:9f:02:d6:00:
ba:13:c3:7d:83:77:ae:84:3f:99:4e:07:26:16:4d:83:92:da:
e3:87:a6:01:62:23:f3:83:77:de:be:68:64:d8:e6:60:ae:d9:
c9:2b:df:e8:c5:16:33:5a:67:a2:60:a4:a4:56:0a:d2:a9:33:
4d:13:39:56:4c:b1:ba:0c:e4:45:e5:72:ec:57:84:1b:27:59:
83:23:99:3e:06:cd:06:8b:dc:ad:47:8b:60:d0:61:5c:52:bd:
5e:0f:3c:c0:f4:32:e5:34:ea:62:38:37:14:7f:63:4f:03:f7:
09:cf:71:fd:d8:f0:23:29:ae:a6:8b:2c:62:bc:73:1f:b8:cd:
22:f5:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:56 2026 by rpki-client