This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230342e302f32342d3234203d3e20323634383237.roa
File: 3137302e3234372e3230342e302f32342d3234203d3e20323634383237.roa (raw, json)
Hash identifier: c+g7mQTT1EouPZwKwNxM/zhzCEh6wqEXwpWbo70DWbU=
Subject key identifier: 5F:43:DC:36:2E:77:84:19:51:B9:01:A6:2F:12:42:AE:B9:C6:CF:69
Certificate issuer: /CN=1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA
Certificate serial: 195A44DD499F577285198E47108ECCF629FFDC8B
Authority key identifier: 1B:F2:77:94:00:E0:A8:57:89:A6:D6:0B:10:CC:1B:8D:EC:0E:7E:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230342e302f32342d3234203d3e20323634383237.roa
Signing time: Tue 06 Jan 2026 19:31:02 +0000
ROA not before: Tue 06 Jan 2026 19:26:02 +0000
ROA not after: Tue 05 Jan 2027 19:31:02 +0000
asID: 264827
IP address blocks: 170.247.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.crl
rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:5a:44:dd:49:9f:57:72:85:19:8e:47:10:8e:cc:f6:29:ff:dc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA
Validity
Not Before: Jan 6 19:26:02 2026 GMT
Not After : Jan 5 19:31:02 2027 GMT
Subject: CN=5F43DC362E77841951B901A62F1242AEB9C6CF69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:45:6b:cf:b0:17:c4:87:96:5b:c6:07:b8:
22:a5:85:8d:df:d0:6d:33:29:d4:23:58:0d:73:c5:
be:94:89:be:be:e2:16:af:56:72:58:54:37:c9:72:
85:3b:00:4d:7b:2f:25:6f:dc:f6:68:d2:3d:18:fd:
0d:04:66:7a:2a:17:61:b1:24:6c:1b:3e:20:ec:bd:
b8:ec:66:35:1b:03:38:2b:f9:41:28:bd:07:ab:e4:
89:52:e7:95:da:a3:d6:32:f1:1a:4a:27:10:9a:75:
fe:3e:75:95:de:80:25:94:e1:c9:67:b3:0e:50:cb:
e1:b7:7b:6e:52:f5:3b:b4:ec:06:e6:48:66:72:9a:
76:f6:3b:ca:e5:d2:ca:80:f7:47:3f:a1:8d:44:59:
69:be:c6:7c:f5:93:6a:a6:02:8f:c9:a7:c2:d1:db:
93:ec:e9:11:8a:3d:74:04:7d:a0:dc:95:3d:c4:fb:
15:93:9f:c7:3f:52:e2:58:05:8c:45:80:b6:70:d2:
a4:53:7a:93:b4:f6:50:91:13:ab:d3:af:56:49:ff:
38:71:ae:65:36:3e:d5:aa:63:20:2b:85:76:ef:f3:
0d:c4:54:da:f2:fe:d8:f1:95:41:d6:d2:8b:1a:28:
ef:00:db:98:91:b7:d8:68:8a:21:2c:b0:e2:a6:dd:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:DC:36:2E:77:84:19:51:B9:01:A6:2F:12:42:AE:B9:C6:CF:69
X509v3 Authority Key Identifier:
keyid:1B:F2:77:94:00:E0:A8:57:89:A6:D6:0B:10:CC:1B:8D:EC:0E:7E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230342e302f32342d3234203d3e20323634383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.204.0/24
Signature Algorithm: sha256WithRSAEncryption
24:68:a0:7f:51:6c:d7:89:c6:cd:91:ee:16:50:2c:54:1e:fd:
f4:0d:e9:0e:c2:df:09:ae:23:26:c2:66:f1:4f:56:a0:73:24:
9e:d7:04:ec:32:d5:99:0d:5d:32:11:6e:44:bb:14:78:1d:bf:
ba:4b:17:8e:06:56:7a:c8:2e:36:2e:a6:57:9f:86:0e:c3:6b:
f8:36:3f:04:a6:46:06:4e:a2:1f:9d:38:8e:55:c4:d6:7a:57:
11:f8:77:e7:c6:a6:db:34:3e:22:3a:8f:33:e5:7a:33:f6:80:
34:86:f8:2f:81:97:bb:ac:de:81:27:2d:29:3d:34:1f:56:7a:
67:9a:ec:0f:cb:e2:db:c2:be:bf:32:e6:e2:fd:de:4d:18:27:
2f:3c:98:65:59:d1:79:db:bd:b9:46:cf:75:7c:d3:fa:ff:6b:
6a:87:3d:72:6a:a4:95:66:5b:5c:91:ce:fe:97:a7:07:3b:de:
55:72:0b:d5:43:b2:3a:c7:f1:46:85:6b:36:39:7b:db:64:c2:
80:67:91:f1:20:af:73:ea:64:8c:36:92:3b:8f:2a:d5:a4:d9:
c3:26:6c:e6:ee:c9:dd:7d:4d:95:6f:e5:be:78:52:6c:52:ff:
0b:77:e7:15:44:2e:a0:87:40:cc:90:ae:01:2e:58:4e:8a:ab:
63:79:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:21:53 2026 by rpki-client