This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133362e302f32342d3234203d3e20323730303038.roa
File: 3138392e3132372e3133362e302f32342d3234203d3e20323730303038.roa (raw, json)
Hash identifier: UaZKfdGKxB7PyYBDCYNOrFFPTUF6BZIxyZzBrqhS9wU=
Subject key identifier: E5:CE:04:B7:CB:C3:D4:02:77:B9:60:41:4F:6F:5E:ED:E0:19:47:99
Certificate issuer: /CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
Certificate serial: 74A8A5C43D6563BE39AC747502D1188A7630E042
Authority key identifier: 0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133362e302f32342d3234203d3e20323730303038.roa
Signing time: Thu 08 Jan 2026 20:59:32 +0000
ROA not before: Thu 08 Jan 2026 20:54:32 +0000
ROA not after: Thu 07 Jan 2027 20:59:32 +0000
asID: 270008
IP address blocks: 189.127.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl
rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a8:a5:c4:3d:65:63:be:39:ac:74:75:02:d1:18:8a:76:30:e0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
Validity
Not Before: Jan 8 20:54:32 2026 GMT
Not After : Jan 7 20:59:32 2027 GMT
Subject: CN=E5CE04B7CBC3D40277B960414F6F5EEDE0194799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:1d:ef:bc:0b:fa:73:ab:64:8b:e0:ea:af:
90:25:1a:5a:f1:25:5d:08:b1:1e:aa:ec:fc:46:17:
3d:11:15:f3:4d:3b:ee:6a:76:84:ea:eb:01:5a:60:
ef:73:e5:7f:e5:1c:52:5f:69:6b:51:63:3f:0f:da:
85:e6:a4:33:c0:13:52:de:c2:3c:3a:b3:76:1c:28:
ff:37:2c:2e:6e:5d:5f:99:b2:3e:25:a0:37:f5:6f:
50:88:5d:b8:4c:7d:63:fc:08:f5:0f:41:17:a9:e7:
0b:ad:87:67:03:db:cc:47:80:50:17:ca:9b:48:08:
24:f4:72:78:57:0f:5c:d2:ba:b6:91:94:41:7e:c2:
8a:f9:6e:fe:7d:52:86:a4:0f:8b:96:ad:5f:a2:cf:
7a:49:7b:5c:c4:6f:66:8a:f9:e3:53:fa:4b:3e:a2:
2f:d7:45:25:8f:43:4b:4c:13:af:02:4d:71:b0:38:
38:57:52:fb:0f:45:c3:37:08:b7:e5:40:22:47:d6:
75:23:af:ad:71:e4:f2:4f:67:45:57:b1:ef:5f:2d:
12:16:13:e8:c9:99:29:47:64:00:04:7b:c3:2e:f5:
64:29:e7:24:fb:2a:51:cb:1e:e6:1e:09:62:be:d1:
56:c2:50:ed:d9:0c:6f:57:e1:fc:2c:5e:04:5f:2b:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:04:B7:CB:C3:D4:02:77:B9:60:41:4F:6F:5E:ED:E0:19:47:99
X509v3 Authority Key Identifier:
keyid:0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133362e302f32342d3234203d3e20323730303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.136.0/24
Signature Algorithm: sha256WithRSAEncryption
29:45:30:cd:92:e8:07:3b:2f:ba:ef:72:ce:fd:c2:07:59:3c:
63:ff:8b:16:8b:80:4f:47:91:55:18:32:28:57:0d:4e:8d:ad:
de:d9:a3:e2:6f:3d:27:83:ed:0d:b1:76:be:a8:64:d2:74:05:
2a:fc:8f:5a:d2:94:b8:62:21:9b:63:aa:b2:14:8d:d4:44:ef:
c7:34:4d:61:b1:c9:db:ce:48:70:af:d7:62:39:59:cc:64:bf:
bb:a5:04:96:aa:05:7a:52:3a:10:b1:6e:e9:b4:67:5b:16:ec:
d0:57:90:c8:bb:ec:f2:98:f9:05:b8:2f:be:d4:1b:49:96:cf:
34:cc:11:93:dd:b2:fa:c7:f2:53:0a:83:34:ff:46:56:59:14:
a1:18:54:3f:64:77:15:2b:f3:cc:74:b1:ea:bf:70:f8:8c:4d:
e9:32:22:62:45:72:a7:24:67:35:ae:cf:77:22:31:a1:dc:be:
28:bf:be:0e:29:42:18:da:92:a9:4b:bc:b4:0c:88:49:ac:5f:
f8:a8:cd:e6:2a:45:30:22:c2:c0:b1:36:72:48:16:00:96:ea:
09:1c:29:e4:f4:3b:94:4c:6b:02:3f:78:7e:1e:7b:88:a7:73:
a9:87:99:0e:2e:83:72:ec:b5:e9:dc:8c:2b:de:68:80:a5:6f:
e0:73:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:05:28 2026 by rpki-client