This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3233362e3139322e302f31382d3138203d3e203133343839.roa
File: 3230312e3233362e3139322e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier: OcUX5zgkOimq7Tx4TDZCUkodvBXaIVPwIed73qnUZ3U=
Subject key identifier: 40:1C:8C:AD:22:F6:3C:D9:98:5A:0C:5A:DB:EA:F2:D9:0B:60:C1:66
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 7174C494606BCB302353F85E88E10E9AE64CF2FA
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3233362e3139322e302f31382d3138203d3e203133343839.roa
Signing time: Tue 06 Jan 2026 19:27:53 +0000
ROA not before: Tue 06 Jan 2026 19:22:53 +0000
ROA not after: Tue 05 Jan 2027 19:27:53 +0000
asID: 13489
IP address blocks: 201.236.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 07:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:74:c4:94:60:6b:cb:30:23:53:f8:5e:88:e1:0e:9a:e6:4c:f2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Jan 6 19:22:53 2026 GMT
Not After : Jan 5 19:27:53 2027 GMT
Subject: CN=401C8CAD22F63CD9985A0C5ADBEAF2D90B60C166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5c:a7:5b:b9:6d:d6:b8:1c:49:33:69:e4:b4:
40:a9:90:65:b9:74:be:e5:8b:c8:b4:d9:77:f8:a8:
b3:fd:c1:b8:2c:3f:63:5d:cc:29:f4:24:73:f5:4f:
78:37:77:3a:85:9d:bd:5c:f6:fe:58:05:24:47:e5:
8a:ce:d2:71:7c:49:58:d4:42:0d:20:dd:13:89:6f:
a1:c7:df:7a:a3:d0:6c:fa:dc:f8:bc:39:5f:b4:52:
41:e3:23:01:05:f5:d0:3b:ef:36:bb:0a:f0:3e:0d:
8d:2a:5a:e8:c4:6b:9a:21:5a:29:a0:b6:23:2d:fb:
2d:43:9d:30:54:96:16:46:86:eb:c0:11:6e:5c:b1:
fb:e8:ea:76:4b:c0:3c:c7:c5:ce:9c:2e:84:b8:bc:
73:df:af:c5:1f:b5:58:c8:6a:11:f5:37:f1:f5:f1:
d2:9d:34:7d:26:75:36:20:9b:70:c8:40:5d:0a:02:
0e:32:fa:85:99:d5:4c:1a:e5:f5:38:30:bc:df:8c:
f8:a0:ca:8f:c5:e0:da:8a:26:cd:db:a0:2f:0c:de:
d2:97:30:e9:89:00:d1:ce:6f:e3:03:1a:26:9a:37:
73:4e:a0:d1:be:b0:be:cb:90:d5:6a:fd:36:f4:34:
6e:99:73:d4:a2:6f:a3:06:3e:d2:1c:78:49:02:6a:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1C:8C:AD:22:F6:3C:D9:98:5A:0C:5A:DB:EA:F2:D9:0B:60:C1:66
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3233362e3139322e302f31382d3138203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:85:cd:77:a1:57:9f:1b:fc:90:ca:76:0d:b0:1e:53:74:a9:
a2:39:13:ba:91:5b:54:8f:46:50:ee:15:34:70:c9:cd:3b:dd:
a7:9d:c8:d0:b7:d4:c2:db:03:78:3e:1a:ca:35:ac:14:2b:02:
1f:df:1d:67:ba:4a:65:ae:b4:a4:e4:73:6c:3b:3f:4a:e2:bd:
f6:ff:0f:68:ee:e5:b8:bb:4b:4c:f5:a3:bd:ae:98:09:d7:22:
68:70:df:29:35:3d:fc:31:b7:5d:e1:ec:28:86:76:ec:19:b9:
8f:77:e0:8a:ee:06:fc:f3:63:e7:b6:26:78:f1:b8:37:ca:b3:
59:8d:c5:a1:b2:a4:b5:16:62:9b:ba:4a:69:aa:11:74:20:de:
28:fe:87:2c:24:5e:61:a6:71:e5:af:7f:f9:3a:4e:37:a4:c6:
71:ff:43:31:6e:e3:02:45:29:8f:d9:93:59:90:ee:cc:d2:3c:
7a:e8:b6:62:2f:e5:9f:0a:57:46:0e:88:bf:11:b9:d5:82:c0:
b4:81:53:49:9c:6b:fa:8c:ab:c4:83:88:aa:fd:17:9f:a1:ee:
0d:52:da:a0:7c:30:d9:6f:ad:d4:81:47:03:f9:9c:68:34:a3:
19:4a:85:08:7f:44:3e:b7:e9:9a:ef:df:1e:31:21:fc:6b:0e:
aa:f7:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 02:27:15 2026 by rpki-client