This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136302e302f32322d3234203d3e20323632313636.roa
File: 3136382e3233342e3136302e302f32322d3234203d3e20323632313636.roa (raw, json)
Hash identifier: pGfzFyncsYTTDgys28hDS7iwPgMSzwRd06YLA5J9lRE=
Subject key identifier: 5F:77:41:9F:2A:F7:8C:E6:45:6A:5D:4D:8D:55:7E:0B:44:2D:49:0A
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 60389ED61C2F6A3A225F3773FAFDF43E6144186E
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136302e302f32322d3234203d3e20323632313636.roa
Signing time: Tue 06 Jan 2026 18:58:11 +0000
ROA not before: Tue 06 Jan 2026 18:53:11 +0000
ROA not after: Tue 05 Jan 2027 18:58:11 +0000
asID: 262166
IP address blocks: 168.234.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:38:9e:d6:1c:2f:6a:3a:22:5f:37:73:fa:fd:f4:3e:61:44:18:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Jan 6 18:53:11 2026 GMT
Not After : Jan 5 18:58:11 2027 GMT
Subject: CN=5F77419F2AF78CE6456A5D4D8D557E0B442D490A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:bb:26:25:40:90:16:5e:31:3f:ff:09:0a:
97:47:12:42:0c:fb:01:97:a0:7d:7b:57:cf:b5:34:
49:9d:54:17:a5:a9:15:cb:cc:ba:a8:82:e4:2c:6a:
3d:cd:7f:1b:97:93:be:17:cd:5e:13:e1:9e:63:1a:
23:72:09:c6:42:90:1f:95:3d:15:4f:f8:4e:84:f0:
4f:ba:ee:87:7d:e5:bb:92:6b:f4:c6:37:84:7a:f6:
0b:be:ec:e8:2f:87:46:e5:87:a9:32:63:e1:f1:c5:
f1:fd:12:72:5f:1d:26:88:5f:01:01:ae:37:00:22:
9f:9b:f1:07:56:24:b0:27:e0:ac:5f:30:2e:dd:48:
d4:dc:ed:49:4d:66:96:dc:26:94:bf:82:74:fd:c0:
f5:5a:90:8b:54:38:8c:a6:20:1a:a4:9f:c0:14:29:
3f:9d:a9:31:a8:ec:6b:b2:83:5a:25:ad:2f:e4:98:
da:dd:df:76:c4:b5:73:4f:a5:c9:3c:ef:41:1c:f3:
a5:ab:63:53:63:8d:50:2a:d3:6d:af:03:48:92:46:
e2:83:43:22:89:1a:22:6b:f0:a1:61:b5:d3:a5:aa:
64:5e:ed:a3:48:09:c1:79:bc:50:6e:99:e5:7b:82:
22:c3:55:3e:d5:a8:b9:63:61:d5:8b:7a:65:e4:2b:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:77:41:9F:2A:F7:8C:E6:45:6A:5D:4D:8D:55:7E:0B:44:2D:49:0A
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136302e302f32322d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:f8:4b:9e:cd:df:a1:7f:23:65:83:d2:8d:e7:80:06:62:93:
83:30:ce:5f:a3:f0:55:06:01:23:0e:1f:28:ad:df:de:a7:51:
c4:c0:10:0f:b2:ce:9c:ed:81:43:dc:54:08:c7:ca:cf:84:cc:
b9:53:56:00:63:32:22:f0:ad:98:11:89:16:a0:d4:e8:d1:a5:
89:1f:2f:ad:b7:5f:e5:ea:37:0a:60:ab:4f:78:05:c6:a6:3a:
33:b1:bf:e6:eb:81:38:b4:f9:45:0d:05:86:91:68:24:91:f1:
62:12:8d:ea:61:75:d7:d3:78:93:e4:af:be:6c:b5:ae:79:34:
b6:28:c4:74:26:d0:1f:66:09:e0:c6:b5:e8:35:82:0f:e0:0f:
ef:08:ef:d3:78:9b:1d:14:cd:53:7f:d9:7d:98:6a:be:c7:be:
86:13:f4:62:8a:12:a7:5f:24:10:81:c0:7c:03:7e:79:96:c2:
f9:6c:0f:35:79:9e:a0:42:7b:0e:67:9c:52:34:07:f7:cf:70:
40:68:44:61:52:66:b8:66:3e:1b:ef:71:fb:04:44:0c:3c:67:
fa:0f:e5:5e:e8:3b:e3:da:26:67:8a:44:c4:51:76:cc:bd:15:
5c:d7:3e:57:59:55:59:be:0b:8f:29:25:77:42:5f:f3:24:7a:
72:c6:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:04:48 2026 by rpki-client