This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134342e302f32322d3234203d3e20323634383337.roa
File: 3137302e38312e3134342e302f32322d3234203d3e20323634383337.roa (raw, json)
Hash identifier: IJSmH6BhGk4dA7yDiJRiZw4vMUpOnoMC/yoEmp0RBWE=
Subject key identifier: E2:43:95:61:9B:A3:39:2D:91:EF:02:49:7B:C9:93:17:4C:37:D0:28
Certificate issuer: /CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Certificate serial: 07761FB17B73AF5236D3FECCF12846C9E05EBD73
Authority key identifier: 4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134342e302f32322d3234203d3e20323634383337.roa
Signing time: Tue 06 Jan 2026 19:17:15 +0000
ROA not before: Tue 06 Jan 2026 19:12:15 +0000
ROA not after: Tue 05 Jan 2027 19:17:15 +0000
asID: 264837
IP address blocks: 170.81.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 07:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:76:1f:b1:7b:73:af:52:36:d3:fe:cc:f1:28:46:c9:e0:5e:bd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Validity
Not Before: Jan 6 19:12:15 2026 GMT
Not After : Jan 5 19:17:15 2027 GMT
Subject: CN=E24395619BA3392D91EF02497BC993174C37D028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:05:2b:0e:9e:07:d4:41:29:4d:a2:36:ce:
e0:35:d0:6e:19:64:1b:87:a4:9a:ec:a8:81:4e:1f:
7e:74:eb:b5:40:26:a2:8e:ce:eb:75:4a:62:4b:c3:
89:a9:80:cc:43:8c:f5:9e:b3:89:1b:f2:52:2a:c8:
33:f7:40:0b:3c:25:07:f7:b7:46:f8:0f:6c:f5:e0:
f4:83:87:ac:0a:de:bd:45:ac:c9:40:f0:0c:49:d6:
29:b2:11:f8:b8:5f:39:80:6b:13:e8:77:ac:11:df:
7b:f0:fb:c9:d9:40:e7:a4:aa:cb:15:bf:5a:27:86:
f7:1f:aa:68:9d:24:b5:03:46:ff:56:5f:db:24:6d:
c8:6b:6e:5e:5a:5f:d6:76:13:31:9c:bf:65:4a:e3:
18:5c:6f:31:ac:55:9a:ab:fd:fd:7b:2d:c8:20:3e:
32:72:91:61:2c:0c:44:72:51:17:a3:1f:07:e5:c1:
13:f6:f1:bb:10:6b:63:57:06:20:e5:3a:0b:2c:93:
7d:e0:66:84:13:83:b1:75:0c:42:50:a5:cc:2b:29:
3c:21:02:d6:6e:5b:b3:30:be:67:89:50:9a:de:2b:
95:4a:29:1b:79:55:1f:3f:98:e7:1f:64:b6:a6:a4:
3a:0c:4f:e9:eb:b2:24:f5:0f:41:2a:5b:61:74:3a:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:43:95:61:9B:A3:39:2D:91:EF:02:49:7B:C9:93:17:4C:37:D0:28
X509v3 Authority Key Identifier:
keyid:4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134342e302f32322d3234203d3e20323634383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.144.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b3:c6:02:8d:cc:af:a0:92:82:f0:4c:0b:2d:8c:64:21:94:
4c:6d:c3:f2:ef:1d:cf:70:89:1c:a1:51:75:8d:05:a7:bb:17:
35:b6:a0:a3:93:33:b8:51:ca:06:40:48:c3:ec:c9:a8:0c:4f:
83:c9:ca:5b:e9:7f:bc:c2:d3:c6:fe:59:74:a9:ff:fe:f6:54:
33:ab:1b:0a:7a:f1:c5:b1:0c:2e:17:0b:c8:39:96:80:38:63:
41:11:ac:f7:e2:be:c6:d4:e2:3d:e5:d4:75:63:fb:9e:f4:12:
14:44:a9:d6:e9:e9:23:57:64:d3:13:b0:34:ac:61:5c:a0:d2:
4b:34:b9:e8:1d:48:29:f8:ba:ae:dc:73:d8:bf:7b:2c:1b:11:
7b:9d:cd:dc:05:05:64:2e:08:31:67:c0:31:3e:81:d9:d8:ca:
57:db:10:59:61:83:8b:29:fd:3a:bc:08:ab:fd:eb:21:e1:16:
ea:1f:71:bd:4d:11:e3:3c:b1:17:3d:23:80:85:db:5e:4f:ee:
e5:a6:88:01:d5:05:a2:0c:77:62:07:84:db:32:06:9a:54:1f:
e4:57:46:df:84:db:a9:47:76:3c:b4:ab:01:58:21:e3:52:d2:
12:97:c7:68:b1:33:b3:b5:a7:08:fd:8d:79:41:8f:c3:2c:35:
1c:66:44:b6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUB3YfsXtzr1I20/7M8ShGyeBevXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYxQUY1NEM0NkYyOUIxN0U3NThFOUY5NDYzRENGOTY1
MEM3MUE4RjAeFw0yNjAxMDYxOTEyMTVaFw0yNzAxMDUxOTE3MTVaMDMxMTAvBgNV
BAMTKEUyNDM5NTYxOUJBMzM5MkQ5MUVGMDI0OTdCQzk5MzE3NEMzN0QwMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpgUrDp4H1EEpTaI2zuA10G4Z
ZBuHpJrsqIFOH35067VAJqKOzut1SmJLw4mpgMxDjPWes4kb8lIqyDP3QAs8JQf3
t0b4D2z14PSDh6wK3r1FrMlA8AxJ1imyEfi4XzmAaxPod6wR33vw+8nZQOekqssV
v1onhvcfqmidJLUDRv9WX9skbchrbl5aX9Z2EzGcv2VK4xhcbzGsVZqr/f17Lcgg
PjJykWEsDERyURejHwflwRP28bsQa2NXBiDlOgssk33gZoQTg7F1DEJQpcwrKTwh
AtZuW7MwvmeJUJreK5VKKRt5VR8/mOcfZLampDoMT+nrsiT1D0EqW2F0Oj/5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU4kOVYZujOS2R7wJJe8mTF0w30CgwHwYDVR0j
BBgwFoAUTxr1TEbymxfnWOn5Rj3PllDHGo8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjM2MzhDOERGNjkzMDAyRUI4QzA1MUE3NzhGQ0ZFMkNF
NzU3QjczNUUxQ0ZBNjY4QjNGNjAxRTdDRjYxN0Q3LzAvNEYxQUY1NEM0NkYyOUIx
N0U3NThFOUY5NDYzRENGOTY1MEM3MUE4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RjFBRjU0QzQ2RjI5QjE3RTc1
OEU5Rjk0NjNEQ0Y5NjUwQzcxQThGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYzNjM4QzhERjY5MzAwMkVCOEMwNTFBNzc4RkNGRTJDRTc1N0I3MzVF
MUNGQTY2OEIzRjYwMUU3Q0Y2MTdENy8wLzMxMzczMDJlMzgzMTJlMzEzNDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzgzMzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlGQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA2s8YCjcyvoJKC8EwLLYxkIZRMbcPy7x3PcIkc
oVF1jQWnuxc1tqCjkzO4UcoGQEjD7MmoDE+Dycpb6X+8wtPG/ll0qf/+9lQzqxsK
evHFsQwuFwvIOZaAOGNBEaz34r7G1OI95dR1Y/ue9BIURKnW6ekjV2TTE7A0rGFc
oNJLNLnoHUgp+Lqu3HPYv3ssGxF7nc3cBQVkLggxZ8AxPoHZ2MpX2xBZYYOLKf06
vAir/esh4RbqH3G9TRHjPLEXPSOAhdteT+7lpogB1QWiDHdiB4TbMgaaVB/kV0bf
hNupR3Y8tKsBWCHjUtISl8dosTOztacI/Y15QY/DLDUcZkS2
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:20:05 2026 by rpki-client