This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa
File: 3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa (raw, json)
Hash identifier: Mo4q0EOLg7g3k9dgRtDZKmQLX2BWovRYC/gwuBKuzTs=
Subject key identifier: 3E:38:44:4A:C9:78:A9:D9:F1:40:5D:4D:53:2A:AD:53:67:14:96:4E
Certificate issuer: /CN=3424CAC085E77B82A8878925FC49A646944DB380
Certificate serial: 7E0B918DDCA5EE20DC91009417E0A37B6415402B
Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa
Signing time: Tue 06 Jan 2026 19:31:32 +0000
ROA not before: Tue 06 Jan 2026 19:26:32 +0000
ROA not after: Tue 05 Jan 2027 19:31:32 +0000
asID: 263799
IP address blocks: 168.195.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0b:91:8d:dc:a5:ee:20:dc:91:00:94:17:e0:a3:7b:64:15:40:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380
Validity
Not Before: Jan 6 19:26:32 2026 GMT
Not After : Jan 5 19:31:32 2027 GMT
Subject: CN=3E38444AC978A9D9F1405D4D532AAD536714964E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6d:4d:21:d6:2c:e6:4a:68:b8:1e:f8:e3:b1:
53:d2:2f:e7:6c:13:8f:6c:7e:2f:39:9e:14:09:56:
0e:30:60:e3:42:9a:a1:b4:e4:a7:c4:50:16:95:6b:
29:b7:38:f4:fb:5e:c3:63:77:74:99:d5:26:08:1a:
9a:05:32:7d:79:5e:87:aa:87:87:37:aa:73:63:f8:
72:e4:31:b1:c0:72:df:60:6d:27:a0:58:e1:3d:29:
0a:ca:f0:78:2c:06:d1:ab:55:b6:88:62:5a:41:44:
2f:9b:ec:06:0e:0a:d3:7f:3d:d1:a5:f2:a0:d7:6e:
aa:11:e4:72:19:f2:27:f0:9a:14:c6:45:31:03:cb:
e0:ab:39:36:20:69:50:60:9a:d5:26:c8:b9:e0:57:
67:6b:f1:2b:6e:ad:f9:66:00:69:11:ca:52:6c:a4:
a5:66:9f:fd:ea:db:09:14:74:e2:17:32:20:9c:6a:
c9:2b:a6:72:1e:38:37:d3:f2:32:e9:00:55:01:9a:
ab:fc:e6:ee:45:f2:1e:c1:1e:42:79:0f:11:d3:a2:
71:9e:f7:e3:96:88:74:8f:69:4e:04:5b:0f:ee:fc:
66:73:9e:61:c8:5b:23:fe:80:cc:dc:a7:7b:9d:48:
4f:a8:d7:6b:8c:06:7b:42:63:35:16:ef:55:27:df:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:38:44:4A:C9:78:A9:D9:F1:40:5D:4D:53:2A:AD:53:67:14:96:4E
X509v3 Authority Key Identifier:
keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:f0:93:ac:2c:5f:bb:2e:32:0a:6d:2d:ac:3b:bf:ce:2e:c9:
6c:41:6d:ae:d8:c0:e2:36:ac:ea:32:0f:e9:a3:ba:dd:65:38:
d1:03:c2:a0:2e:ab:4b:0b:91:12:e8:e3:6b:c0:e1:22:2e:18:
cc:63:cf:77:46:6a:e6:74:7d:19:93:48:c1:2a:50:e7:53:77:
1f:09:28:fd:93:66:5a:55:84:83:45:8a:da:5b:44:32:9a:2f:
11:86:23:52:8e:50:93:b6:4f:1d:8c:23:b6:a2:ce:26:d0:ac:
20:dc:c3:20:f0:e8:bc:ee:8a:36:c9:d5:10:dd:f4:9f:08:4a:
43:0f:0a:97:95:73:a2:6e:f6:80:7b:a2:da:06:f1:94:dc:d3:
36:f4:33:e4:e5:2c:7f:bc:c0:4e:be:3e:c6:aa:78:2b:7b:39:
30:8d:1c:3a:30:29:b2:4a:b4:5b:d8:7e:e2:92:0b:60:d9:c7:
b3:0b:48:cf:ca:b8:46:a4:69:49:50:f4:2e:91:dc:7c:0a:46:
b7:0f:68:73:c0:3c:fa:f1:e0:04:01:47:d1:5a:d9:b2:50:ed:
07:f1:aa:93:90:cc:f7:52:12:3f:ec:01:25:2a:d6:68:71:c1:
b1:0d:2f:16:e0:40:95:8e:1e:47:1b:1c:23:97:df:00:b8:f4:
6b:fa:55:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:25:10 2026 by rpki-client