This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3132382e302f31382d3234203d3e203139343232.roa
File: 3138362e382e3132382e302f31382d3234203d3e203139343232.roa (raw, json)
Hash identifier: utB5V7QaNxZTC51RNzD1BoRdeeHXFm5cjGwJvMr6FJQ=
Subject key identifier: 7D:34:C7:9E:84:50:FC:64:70:47:6B:36:EE:12:6B:A2:CD:8F:EF:7C
Certificate issuer: /CN=88041F15365A423BC08F92BC69A5F909644042C2
Certificate serial: 24F8DC935BE0CA2DE461F0B61DDB44E520FE8AE8
Authority key identifier: 88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3132382e302f31382d3234203d3e203139343232.roa
Signing time: Wed 10 Dec 2025 07:54:32 +0000
ROA not before: Wed 10 Dec 2025 07:49:32 +0000
ROA not after: Wed 09 Dec 2026 07:54:32 +0000
asID: 19422
IP address blocks: 186.8.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl
rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 04:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f8:dc:93:5b:e0:ca:2d:e4:61:f0:b6:1d:db:44:e5:20:fe:8a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88041F15365A423BC08F92BC69A5F909644042C2
Validity
Not Before: Dec 10 07:49:32 2025 GMT
Not After : Dec 9 07:54:32 2026 GMT
Subject: CN=7D34C79E8450FC6470476B36EE126BA2CD8FEF7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:2a:91:31:10:b5:a4:04:d8:1d:4c:14:24:
73:16:ac:3c:82:d3:53:e9:53:9a:32:b6:8c:d0:6c:
bb:91:10:65:59:9f:37:39:22:ea:79:88:3a:29:e0:
e1:0b:57:c6:55:75:1d:36:e5:48:34:6e:20:0e:db:
a2:67:26:fd:b3:85:04:49:70:1d:34:3e:cf:8b:24:
0c:f1:5c:63:e6:38:93:8d:a6:fc:9c:b1:41:6a:14:
7d:51:28:33:a0:2b:29:90:25:6f:0a:95:eb:8d:f4:
cb:80:f8:bf:ab:85:18:8e:1d:40:3e:05:60:4f:10:
05:e5:d1:16:6b:c2:53:15:28:98:ff:bb:f6:34:a0:
79:0d:e9:51:44:af:16:0b:eb:15:59:2d:26:98:dd:
14:65:e0:fa:35:73:71:de:07:a1:db:8a:dd:e7:ee:
29:75:b4:82:4e:06:75:c5:17:01:04:48:60:31:9f:
f1:88:b8:80:3d:b0:1c:37:74:31:5d:8b:e1:b5:75:
bb:5a:5e:22:6e:f3:86:1b:1c:5e:35:d0:4e:7d:5a:
0e:31:1f:e6:b8:db:38:c4:e5:a8:eb:60:57:16:27:
80:43:35:05:ba:a2:c3:64:28:be:31:3a:fc:06:a0:
91:1d:84:54:cb:d5:dd:cc:b4:b3:5c:5a:cb:8c:9b:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:34:C7:9E:84:50:FC:64:70:47:6B:36:EE:12:6B:A2:CD:8F:EF:7C
X509v3 Authority Key Identifier:
keyid:88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3132382e302f31382d3234203d3e203139343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.8.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3f:82:bf:61:67:ef:bb:6b:41:c0:7b:a8:96:13:3b:30:ef:09:
9d:fd:f3:0c:2c:55:0f:21:e9:9e:f5:ed:02:d3:b4:49:92:39:
b3:ce:e8:a7:57:74:e0:dd:59:e8:ce:a3:97:a0:25:c6:6b:f7:
2d:43:62:c3:18:18:f6:cd:42:7d:12:da:62:b2:8c:8f:c1:98:
90:cf:f4:e9:52:f6:75:80:6f:85:b4:85:61:b8:5b:da:88:80:
87:5c:d1:5c:da:de:df:b6:b2:4e:df:d8:c5:64:e7:28:e9:1a:
4e:05:fa:05:94:88:ca:ba:a6:d2:41:43:e6:66:04:62:90:bd:
5a:1a:00:74:b6:4a:cf:31:6c:60:b9:75:9f:ad:37:fc:f4:60:
31:4c:44:8e:34:35:80:f8:33:01:64:00:8a:ea:41:7e:91:5b:
a1:e5:3f:87:ff:44:1a:1c:91:07:02:2b:aa:da:16:88:e8:d6:
9b:df:e1:62:51:56:6d:19:1e:17:22:63:86:9f:d0:f3:d6:b3:
3f:4b:00:12:f6:f4:1e:67:60:ea:bc:b6:6d:8c:f8:31:19:66:
db:0c:b5:55:10:ab:c3:db:58:dd:0a:e2:36:e4:30:ac:01:f3:
ff:43:3c:be:57:81:4f:72:67:69:61:52:cc:40:b7:97:cc:3e:
f0:5b:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 07:40:23 2025 by rpki-client