This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa
File: 3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa (raw, json)
Hash identifier: KsRXuXUX3sQGnSdVlG2rk+sDaByFM9jgtExztJ1/r+A=
Subject key identifier: 1B:3D:34:61:C8:D7:DF:45:B3:0A:CB:36:2B:AD:BD:B5:8C:FD:D8:07
Certificate issuer: /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial: 76D0549D7AF57E5B5EF5F0627C38F94F4763F9BF
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa
Signing time: Tue 06 Jan 2026 19:00:49 +0000
ROA not before: Tue 06 Jan 2026 18:55:49 +0000
ROA not after: Tue 05 Jan 2027 19:00:49 +0000
asID: 52507
IP address blocks: 168.197.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 20:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d0:54:9d:7a:f5:7e:5b:5e:f5:f0:62:7c:38:f9:4f:47:63:f9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
Validity
Not Before: Jan 6 18:55:49 2026 GMT
Not After : Jan 5 19:00:49 2027 GMT
Subject: CN=1B3D3461C8D7DF45B30ACB362BADBDB58CFDD807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:b1:08:87:6d:a8:26:61:85:16:17:5b:36:
87:ea:05:73:15:75:86:03:16:b3:2c:d8:14:4d:bb:
10:0d:8b:20:55:55:04:f3:a1:8b:42:e6:c2:e5:95:
9e:4c:da:50:80:1a:25:0b:91:83:80:18:76:2d:cf:
8c:29:23:ce:81:6e:d4:20:e1:0a:09:6c:1b:43:77:
1e:96:9c:73:05:6f:32:97:ec:0e:ba:16:67:eb:81:
18:ea:ed:8b:74:22:85:79:3a:91:e2:93:75:17:f4:
02:a9:50:ae:04:52:09:aa:ac:b0:ef:4b:5d:8c:2c:
d6:9c:a8:03:de:ea:e1:67:fe:3a:1c:cc:6e:df:b6:
8f:9e:e0:c2:f5:56:e1:27:7b:6f:98:60:3f:74:64:
63:7b:da:9f:97:14:fa:a1:90:e5:f1:5a:1e:3b:07:
fd:b0:56:5a:7b:dc:3c:70:8b:e6:2c:e4:48:98:1e:
e5:60:b3:bd:c0:dd:45:53:07:c6:26:b4:ce:c2:44:
7a:79:40:98:8e:cd:8a:a7:b5:34:98:f2:5a:90:b1:
ae:b3:69:22:a0:6b:4c:57:df:e8:3f:61:1c:14:b8:
c8:f0:7f:b3:53:7f:37:c3:fc:b0:5f:74:83:7d:d3:
1d:84:14:c0:53:c1:78:e5:70:2d:70:3e:35:97:1a:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:34:61:C8:D7:DF:45:B3:0A:CB:36:2B:AD:BD:B5:8C:FD:D8:07
X509v3 Authority Key Identifier:
keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.251.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5e:c8:16:4f:29:34:bb:44:9f:29:f5:cf:d2:ae:4e:32:71:
07:3a:68:ec:66:76:9d:e3:a8:7a:cb:4f:96:b5:88:70:9b:8a:
90:49:f7:25:8f:ef:75:0b:f4:e4:ac:b9:63:01:ed:c3:f1:cd:
d7:32:e5:ab:a3:e7:df:5e:13:01:73:a4:7a:8e:a5:ab:c6:31:
ea:7c:7e:63:2a:33:fc:d4:de:94:b0:95:a5:80:43:63:8a:5d:
db:9b:6d:d9:12:05:13:13:66:04:39:d0:ac:b4:0f:03:ec:b9:
4d:64:d4:9f:61:68:0d:5d:81:09:9b:bb:8b:1d:19:8a:a5:ee:
e3:3b:9c:66:ac:26:0e:b4:68:fc:1a:e1:5d:75:b6:4d:f3:6c:
f4:1f:dd:ea:bf:a4:4e:7e:ef:76:f9:a9:3c:4c:11:b6:b4:12:
48:88:a4:53:be:5b:d1:bd:89:d7:ec:a2:90:81:f4:40:73:d9:
fb:f1:22:88:b3:a9:3c:42:0b:d4:9c:2b:bf:ec:ea:9a:54:f9:
af:59:e3:6b:fd:7e:31:28:2d:23:85:83:e1:00:84:b9:6e:6d:
d5:eb:db:5a:7f:d3:6d:53:df:66:45:74:c7:4c:79:84:1c:1f:
d8:53:4e:59:38:f6:4b:a7:b6:b8:8f:55:10:fa:5d:06:ab:1a:
ee:d2:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:57:07 2026 by rpki-client