This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39382e302f32342d3234203d3e20323635363539.roa
File: 3137302e3234372e39382e302f32342d3234203d3e20323635363539.roa (raw, json)
Hash identifier: w9Xsr1lsIJ01m0TfJWAnkQ15dYGYuXOP4zNKMwlfH/o=
Subject key identifier: B8:39:2A:DE:46:79:A0:C4:D2:6F:04:E5:A5:30:9A:B0:7A:65:17:D6
Certificate issuer: /CN=259C857FBBE3D174F02EFBE0681691812000149A
Certificate serial: 5426CB71EA812E9019BF0F732F794D79B9CAABE2
Authority key identifier: 25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39382e302f32342d3234203d3e20323635363539.roa
Signing time: Tue 06 Jan 2026 20:57:06 +0000
ROA not before: Tue 06 Jan 2026 20:52:06 +0000
ROA not after: Tue 05 Jan 2027 20:57:06 +0000
asID: 265659
IP address blocks: 170.247.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl
rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:26:cb:71:ea:81:2e:90:19:bf:0f:73:2f:79:4d:79:b9:ca:ab:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259C857FBBE3D174F02EFBE0681691812000149A
Validity
Not Before: Jan 6 20:52:06 2026 GMT
Not After : Jan 5 20:57:06 2027 GMT
Subject: CN=B8392ADE4679A0C4D26F04E5A5309AB07A6517D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:7c:3a:4b:27:02:62:3e:fa:6e:73:4e:bb:
82:91:42:f7:c3:a7:62:19:f9:95:99:ca:3c:c2:d6:
c2:7e:95:b0:6b:ab:8a:73:71:3c:51:19:d5:e6:bf:
03:d9:d5:7a:a7:ed:ec:1f:d9:5e:30:05:40:3f:ad:
78:80:28:e0:db:74:3f:4f:bf:de:4f:62:91:6c:72:
8a:07:33:9d:be:02:d1:19:0a:ba:b2:a3:9e:10:46:
15:0f:af:40:8b:75:61:24:b6:a1:f9:98:68:f7:d1:
ce:83:68:b9:3a:55:95:b9:98:2d:c8:2f:24:a9:a3:
c7:5e:df:26:4e:d6:09:6f:09:3a:70:c8:02:57:59:
2b:1d:a2:8c:1f:b0:15:6c:22:ae:66:9f:72:b5:33:
be:dd:94:a9:38:1a:e0:3e:38:8a:57:b9:de:07:53:
5d:76:2f:cc:17:18:a6:7f:32:db:bc:db:f9:53:bc:
9c:59:51:af:a3:66:1f:65:44:4a:f6:d1:2c:63:61:
4a:b1:3c:f1:46:72:bf:c0:c5:fd:ee:0d:46:6a:90:
25:7d:92:e4:77:8e:20:f5:99:0f:a1:65:7a:84:5e:
c2:04:ad:94:62:a3:25:f7:d1:b5:13:17:24:0b:6c:
1a:e6:1c:07:8a:79:a3:bb:12:d7:1d:86:88:bb:5c:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:39:2A:DE:46:79:A0:C4:D2:6F:04:E5:A5:30:9A:B0:7A:65:17:D6
X509v3 Authority Key Identifier:
keyid:25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39382e302f32342d3234203d3e20323635363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.98.0/24
Signature Algorithm: sha256WithRSAEncryption
65:58:a4:56:52:b0:98:2d:ba:3f:f3:eb:70:25:8a:6b:3b:6a:
68:3f:85:a1:76:a5:75:de:38:5f:63:97:e0:aa:30:42:96:fd:
31:86:c3:73:d2:d7:63:b4:58:af:79:d0:91:b3:f2:52:64:6f:
6a:90:11:7a:1b:57:6f:e1:1e:bc:be:4a:eb:0e:3c:5b:c2:c9:
42:cc:cc:27:cb:b1:e9:db:e6:b6:20:db:48:82:33:75:53:78:
7c:ed:1d:f6:87:9f:79:a3:39:c9:2f:40:c5:31:af:93:72:8c:
e0:c0:ac:a7:47:7b:d2:6c:a0:2a:bc:93:c8:31:1e:d7:a9:06:
07:f3:ab:4b:dc:04:c3:02:03:c7:84:94:75:d8:9c:e8:81:92:
fc:da:f2:85:16:fe:91:12:d2:4f:f2:7b:de:ab:85:f5:c0:77:
04:f0:f5:1d:d7:5d:11:35:04:8d:e6:15:bd:46:64:8c:79:3a:
5a:bc:cc:77:d8:42:28:fb:83:c0:2c:3b:b7:2c:16:a0:ff:eb:
a8:42:d9:06:75:41:bd:9c:b0:0d:d7:a1:aa:ef:07:9e:b1:79:
5a:19:bd:99:49:7d:74:c3:86:a3:db:4b:88:d3:25:0f:0d:dd:
14:38:ee:b4:d8:7e:ad:fc:2c:dd:7b:73:1c:f9:5b:04:38:00:
01:61:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:00:01 2026 by rpki-client