This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3137302e3234372e3232302e302f32322d3232203d3e203532343439.roa
File: 3137302e3234372e3232302e302f32322d3232203d3e203532343439.roa (raw, json)
Hash identifier: txXspJXUWU46QbpBmqAd9/jDh34H/i4bGodJDG1ou4M=
Subject key identifier: 3B:C4:75:8B:07:6C:E0:74:7B:D8:8C:BA:C0:F5:1F:15:EF:C3:54:46
Certificate issuer: /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial: 2A6D32A50C300EC71B42B5A4D758981D1FDC15DC
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3137302e3234372e3232302e302f32322d3232203d3e203532343439.roa
Signing time: Tue 06 Jan 2026 19:28:18 +0000
ROA not before: Tue 06 Jan 2026 19:23:18 +0000
ROA not after: Tue 05 Jan 2027 19:28:18 +0000
asID: 52449
IP address blocks: 170.247.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 18:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6d:32:a5:0c:30:0e:c7:1b:42:b5:a4:d7:58:98:1d:1f:dc:15:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
Validity
Not Before: Jan 6 19:23:18 2026 GMT
Not After : Jan 5 19:28:18 2027 GMT
Subject: CN=3BC4758B076CE0747BD88CBAC0F51F15EFC35446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:e7:2d:e5:a0:fb:c7:b1:75:17:e3:84:ec:
07:77:ee:9d:8b:3b:93:ad:46:2d:5e:74:75:1b:5c:
14:b8:8e:77:b2:90:53:66:c1:8f:fd:42:ee:8d:ac:
7c:2d:42:8b:b2:c5:69:73:af:39:2f:72:35:9b:ca:
50:bf:06:6f:17:e4:c9:37:75:8f:af:ba:d2:2e:70:
7f:c2:8c:29:e6:cd:22:0f:95:5b:7b:bb:1b:36:c8:
59:46:45:e0:78:70:4c:ae:9e:94:d8:20:f4:03:a4:
23:9d:ad:ec:4d:56:ba:f6:e6:5d:04:52:3f:c4:0d:
30:1b:51:e1:8f:5b:69:79:6f:9f:24:43:6f:1d:80:
fc:6d:5a:35:7e:ef:b5:d7:35:cd:e1:36:d7:f9:a8:
6d:bd:5b:56:09:0c:32:52:72:20:87:5d:ad:7a:ec:
88:d5:c1:96:d6:00:9e:45:1a:f3:4d:2d:3b:4a:8c:
87:61:3f:5f:e4:de:d4:f2:0a:c0:0f:89:97:95:16:
c4:32:83:ab:25:44:dc:fb:c2:6f:57:66:9e:a9:f6:
48:cf:ae:03:b7:39:61:04:66:ac:12:26:55:43:c1:
a4:6d:80:25:5e:1f:ba:39:94:a0:a2:12:40:d8:74:
cc:2d:39:fb:d4:06:73:d6:2a:66:e9:99:90:91:33:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C4:75:8B:07:6C:E0:74:7B:D8:8C:BA:C0:F5:1F:15:EF:C3:54:46
X509v3 Authority Key Identifier:
keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3137302e3234372e3232302e302f32322d3232203d3e203532343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.220.0/22
Signature Algorithm: sha256WithRSAEncryption
08:f5:30:7a:47:f0:47:12:bf:41:13:30:76:63:8a:d6:66:f8:
df:0c:58:96:d2:7e:62:73:f1:4a:11:e1:a5:3d:9a:24:48:d0:
0e:70:a8:bb:dc:e4:56:6e:9a:43:1f:bd:ad:43:8a:ca:82:57:
23:58:4e:6c:29:9f:8f:36:af:b3:7b:e2:94:a8:ec:da:f1:77:
ee:83:eb:b5:b6:24:58:9c:a1:18:1a:fc:68:a2:45:92:a2:c3:
5c:78:0e:ea:d8:34:04:7f:75:0d:40:45:d9:28:6e:68:52:f8:
8f:f9:58:54:85:aa:ff:dc:92:db:03:32:7f:70:65:64:81:3c:
38:92:84:18:cd:91:69:2d:78:4e:5c:35:0f:f4:8f:8c:6c:4b:
0e:cf:a1:84:26:e3:99:7e:c1:a4:80:d9:92:fe:19:3e:aa:32:
55:30:6f:9f:16:7b:12:3a:36:ef:56:c3:1e:be:68:94:0e:7a:
13:bd:9c:41:40:5d:d4:05:8f:63:65:29:9f:24:25:28:ed:d8:
52:7d:98:6b:68:05:06:90:e4:7a:55:3f:c6:39:b2:52:c3:77:
af:20:72:e0:b4:30:b0:ec:5c:fc:3d:40:b3:ba:11:f8:5e:3f:
09:82:84:4e:41:2c:71:cf:1c:45:9e:a0:4d:1a:76:6c:f8:be:
ac:e4:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:27:43 2026 by rpki-client