This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3137302e3233332e3137362e302f32322d3234203d3e203532323638.roa
File: 3137302e3233332e3137362e302f32322d3234203d3e203532323638.roa (raw, json)
Hash identifier: bnJS645jkeBoGyqV0qAZrB8dKWpGw9aFbnfdFihxZm4=
Subject key identifier: 28:16:FD:C9:07:CF:A8:FE:A8:07:C5:16:06:D1:C5:AB:B1:EF:83:F1
Certificate issuer: /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial: 196B67A69C3B6BAA33B4917ACFEDDD8D351420DC
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3137302e3233332e3137362e302f32322d3234203d3e203532323638.roa
Signing time: Tue 06 Jan 2026 19:42:03 +0000
ROA not before: Tue 06 Jan 2026 19:37:03 +0000
ROA not after: Tue 05 Jan 2027 19:42:03 +0000
asID: 52268
IP address blocks: 170.233.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 02:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6b:67:a6:9c:3b:6b:aa:33:b4:91:7a:cf:ed:dd:8d:35:14:20:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Validity
Not Before: Jan 6 19:37:03 2026 GMT
Not After : Jan 5 19:42:03 2027 GMT
Subject: CN=2816FDC907CFA8FEA807C51606D1C5ABB1EF83F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:b0:78:b6:09:4f:9d:86:f8:cb:55:7e:0a:
50:9b:bb:56:a1:ad:53:ab:52:88:92:5f:e6:38:a9:
bd:97:3d:df:17:e9:66:31:e0:5c:4f:5f:72:d0:c4:
46:19:dd:b2:43:7c:d3:49:2a:81:bc:1a:c5:95:e5:
1d:11:76:e3:df:b2:b0:d5:fc:75:61:61:7a:2f:e3:
b6:48:86:a5:f1:fc:1c:5c:02:38:3a:92:d6:c7:87:
8f:89:a0:75:ae:e9:75:41:1a:7a:0d:1c:52:53:b8:
97:64:79:ed:ce:4a:0f:d9:64:2d:d6:8a:95:80:cd:
67:7c:b4:01:af:45:a2:ce:12:f2:3f:a0:e8:40:18:
55:e5:a1:37:7c:26:83:35:ec:e9:5f:af:bc:f2:aa:
88:75:95:16:5c:39:b4:e9:5d:49:88:d2:9d:97:48:
5f:c4:86:cf:16:b8:63:14:46:7e:27:fe:8b:55:bd:
44:68:14:f9:ce:2d:a1:88:0f:39:2b:ea:30:87:93:
43:6e:f6:3d:b7:ff:62:fb:b6:f9:6b:d0:12:9c:d1:
40:61:c4:4c:ed:36:66:ab:2c:62:26:74:24:b7:4d:
26:bf:28:90:d5:67:02:c0:e9:25:55:11:67:60:44:
42:e4:6e:26:dd:0b:0d:5a:b1:d4:f6:f4:fc:9c:7b:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:FD:C9:07:CF:A8:FE:A8:07:C5:16:06:D1:C5:AB:B1:EF:83:F1
X509v3 Authority Key Identifier:
keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3137302e3233332e3137362e302f32322d3234203d3e203532323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.176.0/22
Signature Algorithm: sha256WithRSAEncryption
81:7f:0f:4d:44:1b:a6:da:73:7a:ab:da:1a:2b:79:3e:c4:df:
4b:aa:e8:e7:a5:9a:1e:e0:83:f9:27:3b:be:87:0a:a3:69:f2:
2b:0d:3c:f9:20:84:b3:6e:ea:77:18:a4:93:e2:8a:c3:36:aa:
e6:bb:ec:cd:48:28:e3:0d:f4:4a:a6:82:eb:f2:3b:59:8d:7d:
ae:80:23:b6:3b:aa:ee:da:90:f6:8a:10:55:a4:8c:95:ad:72:
5c:fb:ed:1e:86:8d:b3:06:48:ee:58:75:5d:94:d0:d6:80:2a:
86:a1:5e:8c:72:87:de:0a:61:e2:53:3b:fa:e1:d4:98:2a:4a:
5c:ff:24:72:12:19:e8:02:53:2a:33:d0:4b:ee:63:2e:3e:90:
04:ec:b2:0b:94:0e:31:ee:48:8d:3e:a7:0e:7c:10:1d:6f:d0:
88:0c:c5:e6:6b:09:6d:82:4d:da:40:65:17:c1:35:3d:a3:72:
46:e5:b7:f7:e7:fd:5f:9c:24:b8:27:49:5b:3e:5c:03:0c:c3:
a9:d5:af:67:5f:62:21:dc:9b:35:3c:24:90:16:ab:3a:08:64:
9f:f5:6a:d8:e0:9f:d6:32:bc:5b:aa:8d:15:5f:ce:38:3d:19:
18:04:96:ba:c3:45:30:63:8d:0b:a9:eb:b9:a8:30:f6:60:21:
9e:22:cf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:57:02 2026 by rpki-client