This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3137302e38342e3136382e302f32322d3234203d3e203532333038.roa
File: 3137302e38342e3136382e302f32322d3234203d3e203532333038.roa (raw, json)
Hash identifier: CNKu6tNbZgfZ8vFbbtqG+WJcr1azofOBZezIWYWKs/I=
Subject key identifier: 73:0C:29:75:29:52:7A:62:B9:59:C0:07:14:78:6C:F4:38:42:12:A1
Certificate issuer: /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial: 389F2AE1744B40CC7A17491D871C07875841022C
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3137302e38342e3136382e302f32322d3234203d3e203532333038.roa
Signing time: Tue 06 Jan 2026 19:21:47 +0000
ROA not before: Tue 06 Jan 2026 19:16:47 +0000
ROA not after: Tue 05 Jan 2027 19:21:47 +0000
asID: 52308
IP address blocks: 170.84.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Jan 2026 09:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:9f:2a:e1:74:4b:40:cc:7a:17:49:1d:87:1c:07:87:58:41:02:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Validity
Not Before: Jan 6 19:16:47 2026 GMT
Not After : Jan 5 19:21:47 2027 GMT
Subject: CN=730C297529527A62B959C00714786CF4384212A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:45:a1:88:bd:f1:a3:b9:8c:4f:48:98:5c:
91:bd:b4:23:41:4e:8f:d8:34:e6:e3:94:9a:55:1f:
2e:7d:5f:ff:fe:c8:09:f1:d8:cd:52:17:32:b3:a8:
26:6d:60:2a:18:51:bd:d2:94:43:41:7a:38:27:a9:
de:a7:58:3c:d4:de:5e:d2:c5:75:d5:e6:91:e6:c5:
97:18:6e:cc:0c:aa:4c:0e:10:94:a6:0d:bc:52:45:
d9:fc:5c:84:60:48:88:bd:5c:4d:e8:f4:40:c5:28:
34:b5:f1:3d:30:7b:51:67:99:d7:ec:eb:12:eb:2e:
4a:4c:36:d7:c4:96:14:d6:7b:18:2b:11:d4:9b:31:
9a:ff:30:f1:f3:8f:e0:ea:fb:03:0e:36:9a:52:e5:
2d:ae:69:2a:a8:b5:50:2f:59:54:0b:1a:83:a8:1e:
96:a8:61:c9:ec:3b:42:60:0c:67:26:ea:50:9d:28:
56:b3:17:e3:58:2f:6b:be:64:5f:65:b1:b6:d5:e3:
5d:ea:54:00:f9:79:56:17:7b:45:1c:82:55:c0:8c:
10:91:4d:76:5a:f4:93:65:b0:93:72:13:6f:89:3d:
ee:21:10:62:db:d4:8a:a4:15:eb:fb:d4:72:e3:13:
87:b1:5d:57:49:d1:f0:b9:73:d2:fa:62:b1:71:93:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0C:29:75:29:52:7A:62:B9:59:C0:07:14:78:6C:F4:38:42:12:A1
X509v3 Authority Key Identifier:
keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3137302e38342e3136382e302f32322d3234203d3e203532333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:7f:f4:e0:55:0f:75:74:ca:de:d9:ac:e6:09:52:f7:c5:28:
a7:37:34:02:87:41:26:2a:0d:e3:a6:6a:ea:8e:a5:79:61:0b:
b5:af:bd:f7:c2:b7:6f:20:94:c8:7a:9d:80:71:50:ba:a8:e3:
3b:7d:58:0c:1b:4c:73:8e:35:d0:5e:12:31:30:d2:3c:ae:c2:
c1:28:16:98:0d:db:c0:d2:9d:ba:b0:08:13:ae:31:ea:6a:5c:
d0:7c:bc:1f:a0:43:aa:de:a5:1f:99:de:ec:51:dd:e0:0a:76:
e3:7f:83:f0:b5:7c:59:b1:0c:17:15:99:25:bb:e3:33:67:e3:
ef:bd:d7:41:20:d2:ef:7b:fd:7b:54:d5:9e:70:89:de:cc:72:
53:61:f8:15:90:75:ea:6c:1c:e8:0c:75:e0:64:b8:b1:70:45:
b5:59:a1:d7:f2:44:a4:54:ed:af:f8:58:2e:0d:57:29:ff:0c:
f9:59:5d:71:a4:14:96:60:6a:23:f5:9f:e4:11:eb:60:9f:46:
44:51:a3:e8:84:b2:6e:ef:86:f3:b5:c9:37:aa:af:62:35:1e:
36:61:e8:80:0c:20:9d:f1:93:08:9e:0a:0a:64:cd:a0:7e:53:
48:b5:32:b8:a4:74:a8:41:43:b0:37:da:b0:35:04:68:35:64:
75:52:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:47:49 2026 by rpki-client