This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3235302e302f32332d3234203d3e203237373432.roa
File: 3139302e3134332e3235302e302f32332d3234203d3e203237373432.roa (raw, json)
Hash identifier: RJLJ7ErAaccnvPgwmnOkX0NkdRnqououVXRe/JlBHX0=
Subject key identifier: 0F:94:DE:33:DA:7F:D1:B5:5F:E0:CD:20:38:34:35:3C:D5:40:6A:3C
Certificate issuer: /CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
Certificate serial: 6BB39AF4890762E1E564728DA3024B6AE306E877
Authority key identifier: 9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3235302e302f32332d3234203d3e203237373432.roa
Signing time: Wed 19 Nov 2025 17:53:12 +0000
ROA not before: Wed 19 Nov 2025 17:48:12 +0000
ROA not after: Wed 18 Nov 2026 17:53:12 +0000
asID: 27742
IP address blocks: 190.143.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl
rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 14:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b3:9a:f4:89:07:62:e1:e5:64:72:8d:a3:02:4b:6a:e3:06:e8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
Validity
Not Before: Nov 19 17:48:12 2025 GMT
Not After : Nov 18 17:53:12 2026 GMT
Subject: CN=0F94DE33DA7FD1B55FE0CD203834353CD5406A3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:c9:41:de:0c:b9:f1:7b:ef:ac:3d:2b:9a:
e6:ef:ea:28:6c:be:7c:73:db:1e:6d:1d:6c:c2:e2:
ec:b2:3d:11:fa:f2:95:ce:7f:a2:2c:77:b1:84:d0:
f4:f9:4c:b8:a3:43:46:b3:35:70:4d:d3:6c:21:10:
5f:32:10:0b:54:3a:ee:5b:a2:46:5f:d0:9a:67:69:
6d:e5:91:b5:52:ad:5a:f7:d7:b8:0e:99:b4:a3:53:
8d:50:d9:dd:e7:33:51:4e:61:c5:0f:39:f3:6c:c0:
a6:94:ef:39:14:eb:98:39:8a:9a:7e:6f:31:59:46:
f2:5c:08:c2:1e:27:14:c2:41:1a:c7:ed:c5:f7:91:
22:e1:81:6a:3b:78:88:03:96:68:e9:8a:a6:b8:a6:
d7:f2:8d:f4:9e:75:3d:5d:30:6a:6e:9f:16:38:e1:
f3:42:e3:af:bd:34:54:2d:0e:33:a8:56:4e:90:bc:
0d:93:bf:03:4b:7d:ef:ca:ac:4b:0b:79:e3:c1:4f:
50:bb:b9:e8:4e:db:fc:68:43:c9:c2:4f:20:df:f2:
34:04:81:e7:3e:95:2e:d3:27:83:d8:13:b7:72:f4:
7c:59:bb:e6:45:9e:9f:b8:07:f5:45:ff:b0:1b:72:
c8:3d:c8:ef:fd:aa:c0:2b:84:65:db:19:24:c4:e9:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:94:DE:33:DA:7F:D1:B5:5F:E0:CD:20:38:34:35:3C:D5:40:6A:3C
X509v3 Authority Key Identifier:
keyid:9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3235302e302f32332d3234203d3e203237373432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.250.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:94:6b:49:6a:7d:8d:69:0b:17:7f:76:f1:15:df:d9:66:11:
9c:74:a7:3f:f9:fb:b2:cb:fa:20:9a:47:ba:97:4a:cd:b7:3a:
8c:92:7f:02:1f:57:51:f8:3e:4b:97:1e:97:a7:64:21:e7:80:
30:7e:69:06:00:eb:80:01:d8:bb:ed:4f:2f:aa:b6:65:55:e9:
7b:11:09:23:bc:54:f4:92:62:7d:40:cb:08:14:98:ae:7d:31:
cb:21:9d:17:6b:34:07:aa:91:55:3d:ce:68:a0:88:53:3b:81:
e7:2e:c5:45:56:9b:02:1e:ac:d5:15:7f:be:17:29:27:30:a3:
1d:40:01:6d:1a:d6:7f:f6:86:88:66:28:93:cb:dd:c9:12:4b:
e4:2b:b3:9f:c5:3d:52:7f:e1:ee:3a:11:07:a9:62:8f:1c:f8:
0d:50:63:94:f3:30:c3:5d:67:52:f1:0b:35:05:93:93:81:37:
00:ca:b1:ef:1a:ca:5d:fd:12:47:3b:0d:3e:e7:f4:bf:09:ee:
98:38:93:ea:10:87:15:c7:f2:8a:93:b7:2a:a7:0d:71:c2:93:
b8:98:b3:bb:11:d3:81:17:e4:d0:df:65:b9:c1:ac:1b:25:89:
e8:0a:89:c6:94:13:3d:49:b5:a8:be:5b:0d:ac:ee:ee:1e:4e:
5b:24:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 10:30:19 2025 by rpki-client