This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3136382e3232382e3133322e302f32322d3234203d3e20323632313539.roa
File: 3136382e3232382e3133322e302f32322d3234203d3e20323632313539.roa (raw, json)
Hash identifier: 9CfNck9FuKkghBOviQ/xN7+sbJw+iNig1iG/jkrwiRw=
Subject key identifier: 5F:84:0C:4A:91:86:CB:DD:9E:14:38:0D:1D:7E:6E:C3:24:F1:80:61
Certificate issuer: /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial: 67FD4CD1AA13B1D370B7EE11C6F8408B3A296B94
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3136382e3232382e3133322e302f32322d3234203d3e20323632313539.roa
Signing time: Tue 06 Jan 2026 18:57:23 +0000
ROA not before: Tue 06 Jan 2026 18:52:23 +0000
ROA not after: Tue 05 Jan 2027 18:57:23 +0000
asID: 262159
IP address blocks: 168.228.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:fd:4c:d1:aa:13:b1:d3:70:b7:ee:11:c6:f8:40:8b:3a:29:6b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Validity
Not Before: Jan 6 18:52:23 2026 GMT
Not After : Jan 5 18:57:23 2027 GMT
Subject: CN=5F840C4A9186CBDD9E14380D1D7E6EC324F18061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:4e:6a:8f:00:eb:89:d6:83:22:c0:1b:07:
3e:80:5c:11:b9:10:1a:ab:d3:cd:72:d2:8c:32:de:
e1:63:d3:02:c3:3e:ea:36:83:f0:9f:50:3e:e0:05:
6a:e7:e9:8e:6d:5b:18:7f:bf:08:c6:96:f5:0e:eb:
75:a8:3f:ab:ad:cf:d5:11:78:7d:c5:c0:80:76:75:
da:1a:e3:ed:a8:31:0d:a6:57:8d:52:f2:55:52:7b:
3e:a0:76:43:4b:2d:d7:5d:5d:67:41:35:8f:3b:1c:
27:e3:ce:49:d9:cc:65:8c:a9:3e:53:52:cc:99:d1:
1a:b1:0f:37:94:a8:f0:b6:67:42:42:ad:9d:0b:1c:
77:91:3f:b7:81:bc:8b:f5:c5:b5:23:2b:c0:2b:85:
0a:e7:69:21:ef:94:f5:68:98:c2:95:33:9c:42:93:
cd:12:e7:35:83:c7:c7:5b:32:29:79:14:c9:d5:d4:
e3:f6:2a:02:05:16:9b:f2:f6:40:fc:8e:b3:51:b7:
06:41:55:af:7b:4a:0c:3b:4e:3f:c8:da:83:e0:49:
2a:60:a8:4c:96:5a:a5:aa:62:20:e3:6c:b6:d8:f2:
59:b3:f2:b9:49:cb:97:34:40:d6:e2:3b:b3:e5:b4:
17:13:5f:b8:12:46:2d:84:0a:60:f0:eb:69:5d:ad:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:84:0C:4A:91:86:CB:DD:9E:14:38:0D:1D:7E:6E:C3:24:F1:80:61
X509v3 Authority Key Identifier:
keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3136382e3232382e3133322e302f32322d3234203d3e20323632313539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:d3:b8:82:4f:d9:b7:c0:61:c5:70:62:5b:2f:2b:67:94:4c:
9b:e6:99:9e:c7:0a:4a:4f:0f:f9:40:6b:4b:cc:3d:d1:89:4c:
a1:11:c7:a1:db:e3:74:6c:4d:5d:92:08:ac:c6:44:6b:5a:5f:
db:14:8e:e2:21:a4:c0:0e:df:04:30:34:11:f5:ce:54:04:9f:
10:99:2c:62:c8:ae:68:bd:d6:e3:73:68:5e:b5:d9:9f:c6:4d:
4c:c8:ae:b3:78:bd:27:90:f0:19:7f:41:1e:71:0f:7d:61:c3:
3b:e2:cf:a0:64:33:72:c3:f2:27:1d:b9:f3:41:86:14:10:9e:
c4:1a:78:52:59:49:81:66:86:6e:1c:3d:76:7f:bd:69:5e:96:
3e:bb:03:54:9d:26:cf:40:05:d5:9c:8a:36:b5:d2:b4:1c:1a:
96:71:bb:8a:93:22:4a:5c:ed:81:46:85:07:f9:0d:4c:df:0f:
95:8a:88:00:88:ec:07:0a:6e:1f:70:19:55:d1:31:42:fb:45:
f0:3e:4c:c6:34:1e:39:85:03:38:50:c2:a3:c2:3e:9f:f8:dc:
7a:6e:03:f7:d6:38:cd:78:86:5b:78:12:34:af:43:c5:d9:76:
7c:fd:fa:46:5f:bf:94:a3:e8:b2:5b:4d:6d:89:17:2c:54:cc:
5d:07:f5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:37:35 2026 by rpki-client