This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e203134323539.roa
File: 3137302e3233392e36342e302f32322d3234203d3e203134323539.roa (raw, json)
Hash identifier: qX/thnShQXthXBGtxtxOEnWK3zVHgreQcWfjknRQyCs=
Subject key identifier: 25:BB:75:7D:3B:C6:F3:A7:5F:D7:A8:AD:41:08:C0:46:99:80:FA:D1
Certificate issuer: /CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
Certificate serial: 1CA201065860643685B703EAE1FDA3C7B2B92EA9
Authority key identifier: 09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e203134323539.roa
Signing time: Tue 06 Jan 2026 19:29:51 +0000
ROA not before: Tue 06 Jan 2026 19:24:51 +0000
ROA not after: Tue 05 Jan 2027 19:29:51 +0000
asID: 14259
IP address blocks: 170.239.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl
rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Jan 2026 21:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a2:01:06:58:60:64:36:85:b7:03:ea:e1:fd:a3:c7:b2:b9:2e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
Validity
Not Before: Jan 6 19:24:51 2026 GMT
Not After : Jan 5 19:29:51 2027 GMT
Subject: CN=25BB757D3BC6F3A75FD7A8AD4108C0469980FAD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:aa:a0:1a:ae:82:74:22:b2:e0:59:1a:0a:
7a:f9:f1:0c:9e:56:90:aa:8e:5b:c3:b0:e7:ae:d6:
4d:1e:bf:1b:4d:20:9f:4d:2c:05:85:c5:bc:f7:64:
bf:57:da:02:ef:af:ab:32:23:4b:ac:2c:c8:66:aa:
32:95:7e:02:f9:6e:8d:13:03:71:4e:4a:ce:15:80:
15:f5:b7:6c:f2:c9:a6:6c:35:b8:3f:53:e4:e9:83:
df:2d:a4:b5:d9:3f:31:aa:a8:35:2d:fd:45:83:68:
6b:4b:e0:78:19:cc:36:59:a4:46:9f:22:45:59:8b:
67:96:c6:10:1b:b2:50:01:72:6d:b9:8b:57:e8:f0:
50:da:f5:1d:6b:b8:3f:e4:96:86:41:38:2c:15:91:
66:cc:ee:1a:f9:04:05:cd:ab:40:6d:9a:25:fa:05:
55:ae:4c:17:b9:84:2c:75:31:2a:a6:e4:8d:a0:c0:
4f:36:63:c6:37:62:25:06:2b:8c:45:f3:4a:6a:ac:
17:61:e7:a6:fc:84:0b:d8:0d:92:94:dc:57:cc:c1:
ad:8f:76:cc:da:05:36:ba:1d:59:1f:d2:dc:35:16:
22:29:f8:a3:9d:02:a8:19:74:d9:b5:3f:4c:ac:fa:
84:61:3c:71:4c:58:67:53:08:01:28:4e:9e:52:a3:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BB:75:7D:3B:C6:F3:A7:5F:D7:A8:AD:41:08:C0:46:99:80:FA:D1
X509v3 Authority Key Identifier:
keyid:09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e203134323539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:1e:43:4b:ab:6f:10:04:63:a1:e3:b3:41:6c:cd:01:5d:f0:
a9:ef:d2:b7:71:e5:7b:87:f1:7a:9b:3c:c2:30:f2:9f:0d:46:
42:3e:95:1d:52:34:07:2a:1a:76:10:8b:45:d0:78:e7:fa:28:
8e:6b:6e:30:b2:ac:ca:c8:ab:f8:fd:16:26:8e:27:9e:ba:e3:
ed:4a:83:be:ac:65:19:69:39:1b:5c:74:de:62:8b:75:a9:3b:
e8:4a:00:a9:af:6b:de:4e:a8:fd:0a:36:4e:3e:75:1c:34:43:
16:0b:2a:e1:d3:92:87:41:f6:1c:21:dc:3f:1c:da:5b:68:82:
44:17:13:be:2a:5b:47:1a:c6:24:84:41:9e:ac:07:ae:3d:64:
92:1f:48:ff:81:e1:62:df:fe:89:99:86:41:0d:c9:b6:83:18:
d9:80:36:f9:50:38:c6:41:47:ff:f8:f1:ba:7b:fe:a2:ad:b3:
cf:ff:5e:5e:89:75:35:c3:1b:56:0f:64:fe:0f:0d:8a:a0:4c:
df:df:32:60:b7:07:17:d5:bd:5d:bd:0a:95:ff:9d:1b:c1:47:
4a:51:f7:42:0b:38:e6:47:9d:c0:5c:63:c3:48:93:17:b0:6e:
c0:aa:f2:b0:5d:4f:22:c6:5c:37:d6:d3:2d:5b:4c:b7:1d:f0:
f5:29:85:c0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHKIBBlhgZDaFtwPq4f2jx7K5LqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0RDJCNEQ2MjNFMzdBRjE5Rjk0ODFBRDIyNTU0MzAz
ODBFOUNCRDAeFw0yNjAxMDYxOTI0NTFaFw0yNzAxMDUxOTI5NTFaMDMxMTAvBgNV
BAMTKDI1QkI3NTdEM0JDNkYzQTc1RkQ3QThBRDQxMDhDMDQ2OTk4MEZBRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhqqgGq6CdCKy4FkaCnr58Qye
VpCqjlvDsOeu1k0evxtNIJ9NLAWFxbz3ZL9X2gLvr6syI0usLMhmqjKVfgL5bo0T
A3FOSs4VgBX1t2zyyaZsNbg/U+Tpg98tpLXZPzGqqDUt/UWDaGtL4HgZzDZZpEaf
IkVZi2eWxhAbslABcm25i1fo8FDa9R1ruD/kloZBOCwVkWbM7hr5BAXNq0BtmiX6
BVWuTBe5hCx1MSqm5I2gwE82Y8Y3YiUGK4xF80pqrBdh56b8hAvYDZKU3FfMwa2P
dszaBTa6HVkf0tw1FiIp+KOdAqgZdNm1P0ys+oRhPHFMWGdTCAEoTp5So4I/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUJbt1fTvG86df16itQQjARpmA+tEwHwYDVR0j
BBgwFoAUCU0rTWI+N68Z+Uga0iVUMDgOnL0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wREY1QzUzNTM4QjhFNjREQjg5RDkxNTJCOENCQTM1QUE4
NDBCN0FGQTdGNTU0OTNDOTVGQzdFRkUwNTBFMjlELzAvMDk0RDJCNEQ2MjNFMzdB
RjE5Rjk0ODFBRDIyNTU0MzAzODBFOUNCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTREMkI0RDYyM0UzN0FGMTlG
OTQ4MUFEMjI1NTQzMDM4MEU5Q0JELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMERGNUM1MzUzOEI4RTY0REI4OUQ5MTUyQjhDQkEzNUFBODQwQjdBRkE3
RjU1NDkzQzk1RkM3RUZFMDUwRTI5RC8wLzMxMzczMDJlMzIzMzM5MmUzNjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNDMyMzUzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrvQDAN
BgkqhkiG9w0BAQsFAAOCAQEAbh5DS6tvEARjoeOzQWzNAV3wqe/St3Hle4fxeps8
wjDynw1GQj6VHVI0ByoadhCLRdB45/oojmtuMLKsysir+P0WJo4nnrrj7UqDvqxl
GWk5G1x03mKLdak76EoAqa9r3k6o/Qo2Tj51HDRDFgsq4dOSh0H2HCHcPxzaW2iC
RBcTvipbRxrGJIRBnqwHrj1kkh9I/4HhYt/+iZmGQQ3JtoMY2YA2+VA4xkFH//jx
unv+oq2zz/9eXol1NcMbVg9k/g8NiqBM398yYLcHF9W9Xb0Klf+dG8FHSlH3Qgs4
5kedwFxjw0iTF7BuwKrysF1PIsZcN9bTLVtMtx3w9SmFwA==
-----END CERTIFICATE-----
Generated at Sun Jan 11 15:12:25 2026 by rpki-client