This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37382e302f32342d3234203d3e20323733303431.roa
File: 3136382e3233342e37382e302f32342d3234203d3e20323733303431.roa (raw, json)
Hash identifier: I42nHjT3Kn76+C4rDSuZ2kLixEe7b2f6lpxQ3N+dIvs=
Subject key identifier: 65:5D:E0:8F:65:01:CD:1F:F1:91:25:F3:6D:8B:EC:56:67:58:2F:CE
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 5057F88B23FA080A350AB902B9D20A3A1AA7EB5E
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37382e302f32342d3234203d3e20323733303431.roa
Signing time: Tue 06 Jan 2026 18:58:10 +0000
ROA not before: Tue 06 Jan 2026 18:53:10 +0000
ROA not after: Tue 05 Jan 2027 18:58:10 +0000
asID: 273041
IP address blocks: 168.234.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:57:f8:8b:23:fa:08:0a:35:0a:b9:02:b9:d2:0a:3a:1a:a7:eb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Jan 6 18:53:10 2026 GMT
Not After : Jan 5 18:58:10 2027 GMT
Subject: CN=655DE08F6501CD1FF19125F36D8BEC5667582FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:bc:ba:2d:8e:61:81:66:c0:b8:b4:8c:f9:
3f:ee:53:7e:23:e5:ac:63:89:fd:fd:ee:ed:a8:c0:
f5:e1:87:44:34:55:8f:4a:ba:e9:3e:b4:78:dc:29:
1e:0d:63:4b:ae:64:fb:ba:dc:65:d3:64:fd:31:8b:
40:de:be:62:e1:80:cc:b3:6a:59:f2:e7:b3:3f:77:
e8:b6:f9:52:84:3a:1e:73:c5:cd:d8:e7:87:9a:cc:
01:8b:36:d5:f5:3f:0b:a5:8f:c2:b6:07:71:b9:0a:
0a:54:5b:75:30:8c:a4:37:b4:11:bd:79:dd:45:8a:
15:fc:98:04:36:1a:bd:7a:3a:ec:ae:80:50:bc:3e:
97:81:84:8b:18:a0:62:98:5b:12:b4:e0:b7:e2:13:
3a:9c:05:93:8f:64:fd:d4:61:91:7c:e5:9b:a6:9e:
23:11:35:f7:49:55:ec:b5:40:30:0c:42:db:f3:c1:
ae:cb:a2:0d:f9:17:8f:df:92:fe:76:af:9f:7d:6d:
74:5e:e7:cd:95:d0:eb:1d:68:7e:b6:42:c6:a8:a4:
9f:a3:a7:cd:bf:95:14:de:01:b8:b3:c0:63:bc:de:
cc:40:f8:31:b5:1c:41:93:03:b3:b5:05:e5:c3:67:
29:6a:ed:67:bf:6b:7f:86:e9:36:9a:eb:56:47:31:
c5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5D:E0:8F:65:01:CD:1F:F1:91:25:F3:6D:8B:EC:56:67:58:2F:CE
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37382e302f32342d3234203d3e20323733303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.78.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0c:12:0f:a9:ba:b2:2f:15:67:ab:c1:29:7a:14:dd:51:e0:
36:f7:e8:80:84:a7:18:d9:43:cd:0d:cf:be:e4:2f:0d:ed:01:
43:4a:a4:d7:7f:bc:30:52:72:91:22:cc:bc:92:29:8b:fe:dd:
ab:0c:90:9e:18:4f:68:fb:04:34:22:21:a8:4a:d2:63:bc:65:
90:f8:3c:b7:70:1a:15:1a:7e:c5:10:77:ee:e9:02:3a:f8:e7:
5b:b5:97:a0:10:fc:ef:19:56:a9:70:b1:0b:a5:3f:eb:d7:96:
20:5a:68:ac:4e:85:04:5a:59:34:00:28:59:98:af:2d:4a:68:
f2:53:05:8f:cb:7b:70:eb:55:03:e3:75:3d:36:82:7d:74:e6:
ce:8b:fa:75:94:b6:86:3c:35:bf:0d:27:b5:f6:7c:b6:10:0b:
8f:25:e2:cf:f0:f8:e7:da:3e:ff:22:cc:49:5b:8c:04:42:e0:
b4:48:5a:14:c8:23:2f:9f:41:97:b6:80:02:2d:d8:77:c0:db:
98:f1:52:57:cb:3d:d7:96:75:5a:aa:5f:a5:16:28:f8:07:1f:
31:87:72:96:35:36:58:92:c7:bf:52:93:3f:2c:1c:af:76:2b:
77:c3:c2:db:f6:1c:c2:3e:06:d3:99:60:70:37:7f:32:83:69:
ee:f0:5c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:09:15 2026 by rpki-client