This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3234302e302f32312d3234203d3e203139343232.roa
File: 3138362e382e3234302e302f32312d3234203d3e203139343232.roa (raw, json)
Hash identifier: 6IF1PYDju1cMu7+NaNMdy/CfeQyc0iBunDXZhJk0CVM=
Subject key identifier: 23:C2:09:23:FB:15:DE:B1:F5:A2:2D:90:FF:BC:D5:BD:C6:A7:DC:C8
Certificate issuer: /CN=88041F15365A423BC08F92BC69A5F909644042C2
Certificate serial: 1BCC7E61FDBA3B0B55CB9764BF33DD6DD0538B98
Authority key identifier: 88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3234302e302f32312d3234203d3e203139343232.roa
Signing time: Wed 10 Dec 2025 07:54:32 +0000
ROA not before: Wed 10 Dec 2025 07:49:32 +0000
ROA not after: Wed 09 Dec 2026 07:54:32 +0000
asID: 19422
IP address blocks: 186.8.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl
rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 04:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:cc:7e:61:fd:ba:3b:0b:55:cb:97:64:bf:33:dd:6d:d0:53:8b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88041F15365A423BC08F92BC69A5F909644042C2
Validity
Not Before: Dec 10 07:49:32 2025 GMT
Not After : Dec 9 07:54:32 2026 GMT
Subject: CN=23C20923FB15DEB1F5A22D90FFBCD5BDC6A7DCC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:fc:87:9f:d0:76:88:3f:2a:a3:2f:cb:b1:
8e:f6:1c:3f:2c:33:73:38:0c:61:43:13:95:54:10:
2c:46:6d:ea:be:ad:f5:9a:62:68:d2:f9:f0:23:75:
0a:05:2d:82:ea:9a:d2:b1:b1:2d:da:10:df:02:8b:
96:6c:d5:ea:5f:12:23:1e:17:30:30:d3:e8:5c:87:
dd:80:3a:28:f1:06:30:18:8b:9f:83:ae:66:9b:41:
f5:8d:16:bc:73:2c:de:4f:c7:86:d5:b3:91:63:f5:
77:51:1f:de:d5:b3:e5:fb:04:aa:e4:65:a1:41:08:
1f:dc:40:b3:47:22:f9:84:c4:c6:bf:73:c2:66:d6:
a5:13:96:c1:83:b0:85:a3:c9:73:f0:a0:0a:a0:95:
8b:86:97:12:e5:4b:97:12:ee:2e:4a:56:80:02:62:
4b:38:76:c0:9b:88:b1:b3:9a:c8:43:66:73:5b:46:
b0:67:5a:ae:ed:cf:f8:88:77:b8:92:45:98:28:fb:
e0:f5:c7:1a:90:8a:25:9f:24:c2:1a:c6:65:dd:2c:
d0:d6:0d:2c:48:ef:ff:c2:ff:9e:12:ba:59:5f:c2:
cd:65:fd:ec:aa:23:e0:56:95:32:91:99:fe:a0:d9:
c3:08:d5:16:83:e1:70:73:9c:9d:2d:e5:a0:90:b3:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:09:23:FB:15:DE:B1:F5:A2:2D:90:FF:BC:D5:BD:C6:A7:DC:C8
X509v3 Authority Key Identifier:
keyid:88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3234302e302f32312d3234203d3e203139343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.8.240.0/21
Signature Algorithm: sha256WithRSAEncryption
60:47:07:8b:f7:0f:7f:bf:df:2b:e2:c3:8f:4a:cb:71:91:83:
a2:6b:2c:b2:0a:0e:84:bb:76:2f:c1:0c:21:75:29:5a:2f:ea:
a9:e8:22:d1:4a:7c:1e:28:ee:1f:6e:b5:95:c3:0f:92:c1:65:
b4:99:c4:cb:d7:fb:a6:b8:6f:79:de:72:0a:e6:f5:36:f2:a9:
c0:e2:52:26:8e:21:a2:b2:49:22:cf:2b:5e:bb:d3:96:ab:de:
33:82:b2:7a:8b:a8:79:65:6b:bc:fa:b7:7f:b6:4c:84:64:da:
19:70:58:ec:99:1e:d9:de:bd:04:36:a7:e4:b2:88:59:fe:93:
74:c6:c4:f3:a0:ae:92:9e:7f:3e:6f:04:6e:7c:18:7e:1c:94:
6d:f9:bd:e0:23:21:95:8a:cb:03:fc:e2:46:82:e1:f8:b8:58:
a6:0e:27:ec:d5:bb:86:18:0b:c3:99:d9:f1:bf:f6:02:f7:a6:
43:6d:e2:e4:67:f7:c0:bb:6d:fd:0d:ed:87:6a:b2:4c:f9:ad:
79:f8:64:68:40:88:b6:7d:fd:6b:57:67:ac:9a:1f:71:c7:f8:
81:e4:f4:ba:7e:00:e6:d2:6b:e9:3f:19:48:58:37:75:ec:e0:
7a:e8:59:4b:51:06:a8:f6:40:6f:89:9c:61:a8:5b:46:94:64:
ba:37:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 07:41:22 2025 by rpki-client