This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/3133322e3235352e382e302f32322d3234203d3e20323635383233.roa
File: 3133322e3235352e382e302f32322d3234203d3e20323635383233.roa (raw, json)
Hash identifier: pOP8peRMnlGCSLm0e+19X8Ob35Zk6KlD5FYDzh+KIUc=
Subject key identifier: 70:E7:A6:C0:7E:05:63:B0:EF:60:87:74:C1:4B:C9:99:CA:1E:81:B2
Certificate issuer: /CN=147B7D55918A2F6911996FA0232FC4A257FC3C1B
Certificate serial: 68C1B49185871A78906DF2441666F9CD25F98F7D
Authority key identifier: 14:7B:7D:55:91:8A:2F:69:11:99:6F:A0:23:2F:C4:A2:57:FC:3C:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/3133322e3235352e382e302f32322d3234203d3e20323635383233.roa
Signing time: Tue 06 Jan 2026 19:33:49 +0000
ROA not before: Tue 06 Jan 2026 19:28:49 +0000
ROA not after: Tue 05 Jan 2027 19:33:49 +0000
asID: 265823
IP address blocks: 132.255.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.crl
rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c1:b4:91:85:87:1a:78:90:6d:f2:44:16:66:f9:cd:25:f9:8f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147B7D55918A2F6911996FA0232FC4A257FC3C1B
Validity
Not Before: Jan 6 19:28:49 2026 GMT
Not After : Jan 5 19:33:49 2027 GMT
Subject: CN=70E7A6C07E0563B0EF608774C14BC999CA1E81B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:df:97:ce:33:7f:e9:ee:45:c6:cc:0e:08:
07:7c:87:90:12:14:45:27:c5:e1:67:aa:df:f3:49:
79:15:0a:43:91:9d:29:5c:d1:d8:8b:23:d2:fa:7a:
f0:3e:8e:e1:d0:6d:2b:8f:77:7c:a7:86:a3:86:a6:
ac:5c:69:4a:aa:1a:04:f1:77:73:da:c5:db:a6:d0:
fc:bf:57:c2:ec:f4:9b:c2:14:fd:2d:a6:fe:d9:77:
96:16:00:80:39:ad:74:47:ab:55:4c:9c:19:f9:a4:
41:f4:e0:24:63:bd:fa:08:bc:e0:36:4d:ae:bc:5c:
51:16:98:e4:30:60:f1:20:53:7d:08:76:5e:f0:c8:
16:d3:0d:3a:7b:24:6c:28:e0:68:1b:81:df:68:8f:
8d:58:2f:21:69:8b:df:6c:fd:c5:f0:f7:6a:46:94:
89:b7:72:d8:a2:5f:57:4f:2c:4d:a6:55:7e:a9:f1:
43:4f:eb:8d:91:1d:ae:c6:3d:7b:e0:fb:34:95:b4:
52:a6:3f:fc:69:87:d5:4f:ff:6d:ed:21:73:90:87:
fe:36:42:d8:05:3b:5c:28:c6:c6:cc:c4:3f:dd:0c:
43:ce:7b:ec:67:64:a9:cb:f6:ce:a2:f8:be:47:f9:
da:26:cb:16:33:5a:a0:63:57:3c:d2:be:75:35:d7:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E7:A6:C0:7E:05:63:B0:EF:60:87:74:C1:4B:C9:99:CA:1E:81:B2
X509v3 Authority Key Identifier:
keyid:14:7B:7D:55:91:8A:2F:69:11:99:6F:A0:23:2F:C4:A2:57:FC:3C:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/3133322e3235352e382e302f32322d3234203d3e20323635383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.8.0/22
Signature Algorithm: sha256WithRSAEncryption
64:fc:58:a5:6a:1f:ab:70:88:d2:43:5a:5f:9b:cc:ec:92:90:
76:0a:46:d7:17:83:f3:f8:ed:48:ad:da:71:07:cd:de:3e:d3:
23:7b:14:64:09:91:dc:cf:35:3d:31:60:09:19:f2:61:3d:a5:
55:1b:96:35:e6:2c:8b:06:27:44:ec:cd:90:67:3a:1c:74:d0:
17:30:fb:c4:ab:05:d3:2e:41:8d:e6:60:63:57:32:4c:02:de:
11:84:8d:33:cf:94:69:c3:3e:c6:72:ff:17:64:dd:3b:52:52:
0d:8a:b0:b4:5c:21:5a:58:77:29:79:eb:81:95:38:cd:8c:82:
5c:82:ec:7a:cc:79:a6:6f:d8:49:81:90:9d:d9:75:70:46:bd:
40:43:67:74:01:72:e5:14:fb:41:6f:8a:a3:aa:f2:1f:e2:70:
83:1d:73:e4:8f:22:a6:2e:4e:52:ee:1a:95:e2:af:5a:96:ba:
5f:1d:ed:28:c3:15:eb:39:24:d8:1e:6b:98:44:db:44:67:82:
83:e1:ba:1f:b7:78:85:b7:2e:df:81:23:c7:02:1e:fb:8b:16:
5e:6e:5f:64:2d:43:1f:7d:1d:ea:fc:ff:5b:ff:db:37:e3:25:
99:3d:35:b6:6f:85:51:9c:f3:2a:68:ca:d3:e6:21:9c:80:39:
f8:d9:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:23 2026 by rpki-client