This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/3137302e3234362e33362e302f32322d3232203d3e20323635363533.roa
File: 3137302e3234362e33362e302f32322d3232203d3e20323635363533.roa (raw, json)
Hash identifier: wr4T+2XZyWp0ha3d/fEZXr3aeviHUXYSNbZVhMNluJ0=
Subject key identifier: 78:6C:0B:E1:FE:91:38:58:6D:E7:49:11:85:D7:19:4A:27:E2:01:5D
Certificate issuer: /CN=C0F6964EC633B0BAF89882075AF904AE53B0AD07
Certificate serial: 72A87BC28C6F7BEFA804617853460AFBD8036748
Authority key identifier: C0:F6:96:4E:C6:33:B0:BA:F8:98:82:07:5A:F9:04:AE:53:B0:AD:07
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/3137302e3234362e33362e302f32322d3232203d3e20323635363533.roa
Signing time: Tue 06 Jan 2026 19:15:42 +0000
ROA not before: Tue 06 Jan 2026 19:10:42 +0000
ROA not after: Tue 05 Jan 2027 19:15:42 +0000
asID: 265653
IP address blocks: 170.246.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.crl
rsync://repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a8:7b:c2:8c:6f:7b:ef:a8:04:61:78:53:46:0a:fb:d8:03:67:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0F6964EC633B0BAF89882075AF904AE53B0AD07
Validity
Not Before: Jan 6 19:10:42 2026 GMT
Not After : Jan 5 19:15:42 2027 GMT
Subject: CN=786C0BE1FE9138586DE7491185D7194A27E2015D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:9a:4c:81:a9:84:8d:4a:cd:ec:c2:2f:0e:
4d:1b:99:da:5e:50:72:d1:99:d4:bc:da:55:af:f4:
41:c4:85:0d:07:36:ef:23:ed:e5:42:4f:96:aa:01:
a7:f6:d3:fb:43:51:e0:83:51:6c:0b:9f:ea:f5:d3:
38:c0:24:06:7e:60:3a:75:d1:6b:a4:5b:8d:ef:1f:
75:2d:e3:5e:9f:fc:fe:69:92:52:bd:bf:ad:6c:ce:
5a:ee:0a:81:f6:20:65:99:84:b1:27:40:9a:97:4b:
5e:35:23:38:d6:4b:3e:bb:06:31:7c:85:77:00:b5:
24:d2:12:d5:e8:f8:ff:69:5c:4a:9f:df:dc:d1:57:
55:9d:18:56:19:9d:6a:b7:00:b6:91:22:df:6f:e6:
7a:80:56:f2:bb:48:15:a0:72:77:10:87:7f:69:30:
ee:aa:53:f8:e9:d7:75:6a:e0:ce:ff:8b:e9:4e:8a:
62:b7:51:5d:33:9c:09:8e:05:18:76:08:1d:c2:df:
6f:49:91:77:92:e8:6d:9e:62:1a:1f:ee:f4:12:48:
9b:ac:0d:29:48:89:32:59:77:55:8a:0f:c0:c8:18:
bd:b3:5a:ee:5c:91:48:c5:e9:cc:bf:b1:b7:96:c0:
64:72:59:61:34:3b:a1:54:97:30:54:8d:45:07:4b:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6C:0B:E1:FE:91:38:58:6D:E7:49:11:85:D7:19:4A:27:E2:01:5D
X509v3 Authority Key Identifier:
keyid:C0:F6:96:4E:C6:33:B0:BA:F8:98:82:07:5A:F9:04:AE:53:B0:AD:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/3137302e3234362e33362e302f32322d3232203d3e20323635363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.36.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:02:f7:89:85:80:e0:04:c3:8a:7e:02:d8:1e:4f:54:4b:64:
c2:2f:03:87:93:45:a1:e2:08:51:96:8f:9d:48:44:95:99:84:
d9:d6:03:85:ab:22:31:77:f7:f0:37:69:41:d4:a0:09:f4:d5:
d9:ca:f0:87:45:1b:80:37:1b:c4:bf:15:04:a8:0d:62:06:25:
ee:41:cf:39:2a:a2:b6:17:20:9b:fa:b7:46:33:fd:ff:80:22:
0d:c1:d4:fb:d5:51:c9:bb:17:25:5c:97:35:3b:af:24:6d:1a:
5d:e6:6a:de:96:80:10:5e:f1:10:cf:ba:21:dc:34:29:60:c6:
6f:3e:69:c3:fb:89:56:7f:69:50:e1:73:ba:3d:ce:c0:94:8c:
a5:62:0f:eb:8a:8b:c3:fa:b2:de:ee:f9:d7:da:35:25:0d:29:
ef:58:75:d0:8f:99:df:39:a4:cb:2d:73:c3:01:8a:76:30:fe:
4c:d2:23:c2:dc:93:01:68:ec:f2:97:79:b5:4e:60:3c:cc:c4:
a7:7a:99:76:e0:98:a3:9d:6c:d7:68:a4:ed:11:2a:b3:95:ec:
42:41:91:30:4a:71:1a:50:75:11:fe:b1:4f:b0:8f:c6:5e:1f:
ae:4b:6c:0e:cd:82:d8:fb:da:71:ab:18:28:de:8b:be:d2:2e:
60:85:55:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:11:45 2026 by rpki-client