This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa
File: 3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa (raw, json)
Hash identifier: Jb0zTn9ulY19v+zol0I6Nx0Y68HlT1R7l9itFDBtZJ4=
Subject key identifier: 35:48:DC:D8:71:B5:E0:E1:F1:0D:0E:08:8F:68:92:A5:2D:F3:AE:49
Certificate issuer: /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial: 7D989A264DD8537A540A7A1141D33AF0A778BD7D
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa
Signing time: Tue 06 Jan 2026 19:05:21 +0000
ROA not before: Tue 06 Jan 2026 19:00:21 +0000
ROA not after: Tue 05 Jan 2027 19:05:21 +0000
asID: 28114
IP address blocks: 168.195.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 02:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:98:9a:26:4d:d8:53:7a:54:0a:7a:11:41:d3:3a:f0:a7:78:bd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Validity
Not Before: Jan 6 19:00:21 2026 GMT
Not After : Jan 5 19:05:21 2027 GMT
Subject: CN=3548DCD871B5E0E1F10D0E088F6892A52DF3AE49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:98:3a:cb:80:0f:3a:2c:f4:d8:bb:be:cc:
1f:d7:ab:1c:60:9b:8e:08:02:1e:7a:e3:11:2f:20:
cf:51:65:14:7f:05:ea:a6:c3:88:e2:ea:1c:d3:25:
67:e9:b1:09:0b:2f:29:dd:4c:54:14:5a:73:5b:f7:
11:c8:09:7d:29:9e:91:d4:c5:59:98:19:d1:7a:32:
1f:36:44:e6:f6:fc:2c:62:12:7d:85:b0:d7:76:55:
2f:bc:81:5f:cc:46:a7:da:3c:39:71:73:e5:3f:01:
51:9a:f8:a1:41:d7:39:5a:64:d7:c1:39:d3:06:17:
70:96:d2:14:a3:58:c1:40:1b:76:dd:bd:15:da:be:
17:99:f0:fc:cd:6a:f5:0e:b7:22:83:1f:65:81:a5:
e8:b1:f9:1d:55:a4:f3:41:a0:8e:ce:9a:42:1a:1e:
26:19:90:26:c1:ef:18:b8:ef:68:c7:e1:ee:12:33:
fc:7f:fd:4b:a3:81:8e:4a:72:5a:c6:54:eb:32:71:
63:79:b4:b8:0a:18:45:ab:5e:09:59:50:96:02:f0:
fa:30:a2:e0:7b:0c:ec:a2:81:e6:33:c6:c1:8a:f6:
4d:69:63:33:84:6f:50:50:fc:6d:09:5f:ba:4e:ae:
b5:21:46:f7:1a:85:00:c4:cf:b9:5a:d8:a6:02:55:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:48:DC:D8:71:B5:E0:E1:F1:0D:0E:08:8F:68:92:A5:2D:F3:AE:49
X509v3 Authority Key Identifier:
keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.108.0/22
Signature Algorithm: sha256WithRSAEncryption
73:69:7f:4a:8c:e9:47:47:de:e0:25:b5:d7:ae:8e:aa:ea:f5:
3e:78:bd:a0:55:e5:60:05:21:8c:f2:a0:d3:7f:4c:ea:da:5e:
40:54:54:e5:0b:19:60:65:d1:52:79:23:f2:a1:63:38:c5:39:
d4:5b:b1:2d:18:1a:94:1f:a1:fc:62:65:8a:ae:6c:bb:e4:48:
4d:27:42:a6:82:33:15:67:a4:7d:a2:27:8b:28:c1:68:57:d5:
b2:fa:d0:17:e6:93:3c:2a:97:ec:b1:20:de:29:36:1c:48:3f:
18:ad:ac:47:1c:ee:94:92:c8:b4:30:bf:d1:97:ca:99:8c:ac:
1b:86:b9:8e:06:9e:e0:9a:7d:19:44:2c:aa:1c:ea:49:3e:b4:
0e:5d:72:61:ea:3f:cc:bd:79:f0:a8:1e:5a:ea:4c:66:0f:84:
d2:ce:c4:2a:ae:9e:ab:0f:47:a4:d4:34:cc:ee:4c:62:59:52:
6d:2a:f2:ca:a7:18:d0:c5:7a:f0:c7:7a:1f:42:11:75:13:c9:
d8:32:98:c9:a2:86:96:6a:9b:ee:5f:a0:79:f3:c2:5c:fd:9a:
84:b7:a9:a3:54:34:40:79:e9:71:1a:f1:c0:bc:b5:2c:9c:08:
0c:35:a0:a3:4d:70:a0:00:07:11:eb:b0:78:0c:e3:fa:6f:0f:
05:a2:7d:f0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfZiaJk3YU3pUCnoRQdM68Kd4vX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNjAxMDYxOTAwMjFaFw0yNzAxMDUxOTA1MjFaMDMxMTAvBgNV
BAMTKDM1NDhEQ0Q4NzFCNUUwRTFGMTBEMEUwODhGNjg5MkE1MkRGM0FFNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEN5g6y4APOiz02Lu+zB/Xqxxg
m44IAh564xEvIM9RZRR/Beqmw4ji6hzTJWfpsQkLLyndTFQUWnNb9xHICX0pnpHU
xVmYGdF6Mh82ROb2/CxiEn2FsNd2VS+8gV/MRqfaPDlxc+U/AVGa+KFB1zlaZNfB
OdMGF3CW0hSjWMFAG3bdvRXavheZ8PzNavUOtyKDH2WBpeix+R1VpPNBoI7OmkIa
HiYZkCbB7xi472jH4e4SM/x//UujgY5KclrGVOsycWN5tLgKGEWrXglZUJYC8Pow
ouB7DOyigeYzxsGK9k1pYzOEb1BQ/G0JX7pOrrUhRvcahQDEz7la2KYCVQDVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNUjc2HG14OHxDQ4Ij2iSpS3zrkkwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzYzODJlMzEzOTM1MmUzMTMwMzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4MzEzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqMNs
MA0GCSqGSIb3DQEBCwUAA4IBAQBzaX9KjOlHR97gJbXXro6q6vU+eL2gVeVgBSGM
8qDTf0zq2l5AVFTlCxlgZdFSeSPyoWM4xTnUW7EtGBqUH6H8YmWKrmy75EhNJ0Km
gjMVZ6R9oieLKMFoV9Wy+tAX5pM8KpfssSDeKTYcSD8YraxHHO6Uksi0ML/Rl8qZ
jKwbhrmOBp7gmn0ZRCyqHOpJPrQOXXJh6j/MvXnwqB5a6kxmD4TSzsQqrp6rD0ek
1DTM7kxiWVJtKvLKpxjQxXrwx3ofQhF1E8nYMpjJooaWapvuX6B588Jc/ZqEt6mj
VDRAeelxGvHAvLUsnAgMNaCjTXCgAAcR67B4DOP6bw8Fon3w
-----END CERTIFICATE-----
Generated at Mon Jan 12 15:52:06 2026 by rpki-client