This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa
File: 3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier: tjVzeqUwhp6O/Nq91ngwJBDCQ5e9hcAy2FlJGppgFu8=
Subject key identifier: 78:C2:25:2B:E6:24:60:26:C5:2B:20:D7:DA:C2:5D:07:9C:02:35:CB
Certificate issuer: /CN=B3AC8703592539ADD492A1BDC08E997B67459567
Certificate serial: 51ECBA799B9FAEDEE1E91F24B0B5CA19DAB93FA6
Authority key identifier: B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa
Signing time: Tue 06 Jan 2026 19:20:30 +0000
ROA not before: Tue 06 Jan 2026 19:15:30 +0000
ROA not after: Tue 05 Jan 2027 19:20:30 +0000
asID: 61466
IP address blocks: 168.205.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl
rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ec:ba:79:9b:9f:ae:de:e1:e9:1f:24:b0:b5:ca:19:da:b9:3f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3AC8703592539ADD492A1BDC08E997B67459567
Validity
Not Before: Jan 6 19:15:30 2026 GMT
Not After : Jan 5 19:20:30 2027 GMT
Subject: CN=78C2252BE6246026C52B20D7DAC25D079C0235CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:ba:23:c0:f0:1f:67:d5:9c:2c:76:de:56:
08:0a:1b:d5:df:94:9f:0a:ea:52:b8:8d:e0:e5:43:
07:88:c9:58:7c:85:f0:2a:e6:9a:b9:fc:52:29:f0:
31:79:0f:b4:18:8a:30:d1:92:f0:23:eb:12:ac:8b:
d4:0a:8f:4f:cf:1e:39:54:00:64:02:f5:f5:d0:79:
9f:42:c9:7c:a6:67:e6:d1:64:ba:c7:0e:ff:c4:32:
42:43:16:b0:94:71:51:56:1c:f8:70:5e:54:5d:59:
b1:60:5f:a0:0f:d2:66:f1:95:0e:60:a1:5f:d6:d3:
12:be:93:f5:99:05:e0:43:1a:14:ee:d9:47:47:22:
12:81:91:01:1a:49:36:71:84:0d:66:94:71:38:39:
7b:19:3b:e4:30:c6:21:c3:ad:97:2a:2c:77:e4:89:
bb:a7:0e:a4:e2:03:1a:cd:13:20:3e:c2:3d:09:c6:
8f:f9:61:21:cb:ef:ef:df:ac:0f:0d:d9:a3:e1:48:
c8:51:3a:59:81:31:e1:1f:fc:8d:4a:62:fa:13:67:
df:7c:d5:73:ac:10:62:55:0c:54:79:e4:16:45:a9:
c4:38:95:89:f0:4b:08:f8:4a:3d:ab:6b:e6:45:9b:
5f:a4:83:16:5b:2d:3b:0b:22:22:01:5b:8f:40:94:
6f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:25:2B:E6:24:60:26:C5:2B:20:D7:DA:C2:5D:07:9C:02:35:CB
X509v3 Authority Key Identifier:
keyid:B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.204.0/22
Signature Algorithm: sha256WithRSAEncryption
65:25:a7:6e:03:d5:1a:50:5f:45:ef:0c:45:e8:92:e4:7a:0a:
ad:13:88:bc:95:a4:3c:2a:f3:27:7b:95:28:39:13:2f:62:d1:
de:89:34:72:27:65:c3:86:36:87:01:c2:ca:e4:ea:03:b6:c2:
2e:df:3d:18:53:fb:74:f0:9b:73:44:fd:4a:86:9e:a1:fc:6d:
bc:02:78:96:7c:9c:8a:f0:ae:26:9f:3b:1d:e4:c4:82:02:08:
a8:4f:ff:1d:54:5c:96:1b:ca:3b:dc:d1:a1:70:0a:f6:ca:26:
45:e8:66:ba:25:9f:7c:ae:c2:07:36:97:50:73:cb:43:36:28:
f8:c6:00:cb:af:aa:80:7e:e5:2c:4b:80:6a:21:f4:80:06:0b:
63:c8:a1:ba:a8:9c:93:6f:08:b0:a7:6e:82:d2:db:3b:d6:e7:
e0:f9:de:33:71:be:9b:85:83:aa:05:ea:d3:b9:e5:dd:36:20:
37:8b:12:99:32:1d:fb:8c:49:d8:d6:96:a6:38:3e:ac:1b:28:
51:cf:71:f6:f3:9b:99:2a:0f:02:cc:f1:a2:01:15:7a:c8:8c:
a8:ac:c5:06:dd:08:28:b8:c6:57:f7:ef:e6:ac:94:d1:30:bb:
ef:9f:ae:20:8a:96:d9:e8:31:52:4a:a1:ca:9f:c9:ca:c1:b0:
33:af:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:31:54 2026 by rpki-client