This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa
File: 3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier: 4OQYVdDSB+g5JudDcRZej+Fq7KcXrbxu1AK25BjkLOU=
Subject key identifier: 7D:56:AD:EA:0A:E5:29:E1:84:DD:7D:71:2E:A9:B9:A4:8D:24:07:3E
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 5931C90205D661525587B85D5987F89DCB8D02B1
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa
Signing time: Tue 06 Jan 2026 18:58:10 +0000
ROA not before: Tue 06 Jan 2026 18:53:10 +0000
ROA not after: Tue 05 Jan 2027 18:58:10 +0000
asID: 262166
IP address blocks: 168.234.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:31:c9:02:05:d6:61:52:55:87:b8:5d:59:87:f8:9d:cb:8d:02:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Jan 6 18:53:10 2026 GMT
Not After : Jan 5 18:58:10 2027 GMT
Subject: CN=7D56ADEA0AE529E184DD7D712EA9B9A48D24073E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:e5:2c:c6:ec:15:e3:ad:27:1d:93:4c:17:
b2:68:09:06:8d:29:f2:a1:dc:cb:85:ef:df:1f:dd:
95:c2:e2:e3:1f:eb:fe:46:9f:6b:d4:15:4e:fb:a0:
a5:e6:81:d7:50:6e:6f:fa:fe:4b:e4:65:31:4f:76:
37:2f:04:31:3d:dc:89:b9:24:72:c2:06:3e:a0:8e:
c2:2d:ce:66:fd:1e:65:ff:6a:35:99:03:24:df:aa:
93:74:2e:12:28:cc:4c:2a:30:7f:c6:ef:ac:1c:bf:
08:0e:dd:9f:2c:c5:45:75:a6:ef:b1:41:f9:e9:d9:
b4:95:6d:b7:6f:81:e7:5f:c9:b7:d2:b7:3e:67:1b:
01:33:30:e0:1b:48:6f:99:3a:24:86:45:1d:fd:98:
e0:57:a1:67:95:77:a8:5a:f6:da:c6:8e:d5:42:51:
68:47:a9:f5:c4:fb:66:df:a8:82:b5:d1:4f:f6:53:
eb:03:9e:c6:09:fc:c2:3b:f6:cc:7f:2c:c3:34:f9:
5e:f2:94:ee:78:66:46:df:c0:52:c5:c3:50:02:4c:
54:e4:4a:63:95:48:45:f6:f3:19:86:b7:a2:f2:e6:
ab:a2:51:84:83:9b:12:37:2a:d0:0b:23:33:20:99:
1e:26:d0:42:58:da:bc:92:4b:db:4a:0f:ff:23:f7:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:AD:EA:0A:E5:29:E1:84:DD:7D:71:2E:A9:B9:A4:8D:24:07:3E
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.154.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:5a:37:e3:a4:ca:4a:0a:f0:cc:a3:4d:09:5c:77:17:c3:00:
9f:68:39:6f:95:02:2f:39:d8:a8:7f:69:64:3b:98:e8:13:cf:
bb:fe:f7:96:67:f6:8f:78:5a:75:f8:d2:d8:d9:11:a1:22:53:
30:be:1e:31:70:6f:8a:0d:be:03:1d:92:95:89:76:16:d2:fc:
3d:8c:fd:06:7c:e2:69:5a:f2:36:d6:a3:37:a6:8c:1f:3a:d4:
98:0f:c8:57:d5:63:90:4f:8a:ba:e5:cc:b8:16:ea:a2:b4:13:
2d:1a:a7:6e:b5:01:2e:f3:13:65:84:b5:30:c2:e9:ee:b5:23:
d4:7f:80:31:a3:16:69:d3:05:17:ed:29:fa:5d:75:27:99:4e:
a9:fb:2e:60:64:02:e8:b1:b3:74:70:64:7f:c1:44:20:2a:d7:
69:a5:64:6d:3b:fb:e7:e2:a7:f7:7a:0a:63:8e:ff:b6:61:0f:
ea:f2:85:87:26:bb:61:4c:28:e3:7b:13:e1:2b:9d:09:78:c9:
bc:0c:79:ed:d3:65:fd:5e:65:cc:28:4d:0a:8b:de:dd:07:75:
49:29:c4:d8:d3:6f:17:be:34:49:f2:19:d1:f1:a7:25:07:ab:
28:cb:af:2c:6b:85:2c:c0:24:96:8a:b3:4c:53:84:68:27:ee:
0a:35:b9:b9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUWTHJAgXWYVJVh7hdWYf4ncuNArEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1
MzkyQkJDMzAeFw0yNjAxMDYxODUzMTBaFw0yNzAxMDUxODU4MTBaMDMxMTAvBgNV
BAMTKDdENTZBREVBMEFFNTI5RTE4NEREN0Q3MTJFQTlCOUE0OEQyNDA3M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSOUsxuwV460nHZNMF7JoCQaN
KfKh3MuF798f3ZXC4uMf6/5Gn2vUFU77oKXmgddQbm/6/kvkZTFPdjcvBDE93Im5
JHLCBj6gjsItzmb9HmX/ajWZAyTfqpN0LhIozEwqMH/G76wcvwgO3Z8sxUV1pu+x
Qfnp2bSVbbdvgedfybfStz5nGwEzMOAbSG+ZOiSGRR39mOBXoWeVd6ha9trGjtVC
UWhHqfXE+2bfqIK10U/2U+sDnsYJ/MI79sx/LMM0+V7ylO54ZkbfwFLFw1ACTFTk
SmOVSEX28xmGt6Ly5quiUYSDmxI3KtALIzMgmR4m0EJY2rySS9tKD/8j902LAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUfVat6grlKeGE3X1xLqm5pI0kBz4wHwYDVR0j
BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4
RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5
RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5
NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE
NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMTM1MzQy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGo
6powDQYJKoZIhvcNAQELBQADggEBAExaN+OkykoK8MyjTQlcdxfDAJ9oOW+VAi85
2Kh/aWQ7mOgTz7v+95Zn9o94WnX40tjZEaEiUzC+HjFwb4oNvgMdkpWJdhbS/D2M
/QZ84mla8jbWozemjB861JgPyFfVY5BPirrlzLgW6qK0Ey0ap261AS7zE2WEtTDC
6e61I9R/gDGjFmnTBRftKfpddSeZTqn7LmBkAuixs3RwZH/BRCAq12mlZG07++fi
p/d6CmOO/7ZhD+ryhYcmu2FMKON7E+ErnQl4ybwMee3TZf1eZcwoTQqL3t0HdUkp
xNjTbxe+NEnyGdHxpyUHqyjLryxrhSzAJJaKs0xThGgn7go1ubk=
-----END CERTIFICATE-----
Generated at Mon Jan 12 13:11:41 2026 by rpki-client