This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e203532343638.roa
File: 3135372e3130302e36382e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier: dcSynrBOloWsD7bPfL1vTfC0/hh2+Xnhqx82Teqk2oo=
Subject key identifier: AE:D3:29:BE:0A:81:2E:B5:39:49:6B:D8:55:83:AC:1B:09:38:5F:89
Certificate issuer: /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial: 4B7EE21FDD24B166CC42D2C018144B404BCCBE93
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e203532343638.roa
Signing time: Tue 06 Jan 2026 20:58:45 +0000
ROA not before: Tue 06 Jan 2026 20:53:45 +0000
ROA not after: Tue 05 Jan 2027 20:58:45 +0000
asID: 52468
IP address blocks: 157.100.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Jan 2026 07:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7e:e2:1f:dd:24:b1:66:cc:42:d2:c0:18:14:4b:40:4b:cc:be:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Validity
Not Before: Jan 6 20:53:45 2026 GMT
Not After : Jan 5 20:58:45 2027 GMT
Subject: CN=AED329BE0A812EB539496BD85583AC1B09385F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:2e:36:82:71:2d:8f:df:ff:68:79:c4:c8:
4e:ca:55:bb:90:b0:25:23:7f:84:7b:34:01:bf:75:
80:67:0d:49:33:c0:37:36:c1:58:0d:a4:41:d5:17:
32:36:5a:41:2d:98:d3:69:a1:bf:04:a2:c6:65:ed:
74:c9:92:0d:84:2a:ec:c4:0c:9b:0a:81:45:c6:a3:
20:00:31:b7:a0:cb:e0:d0:1c:93:17:95:c0:d2:e2:
f5:b3:d4:77:1a:aa:8f:24:ae:69:49:10:f3:ad:f6:
a6:93:3f:65:db:a3:a5:30:53:dd:52:29:a3:42:17:
9f:55:1d:ee:23:cf:49:61:35:cd:19:b8:44:df:db:
6e:6f:8a:2c:35:2d:42:54:70:5b:bc:ac:6f:cc:4a:
99:cd:0c:a4:a0:08:06:14:23:6c:de:96:31:28:e2:
e9:04:a2:52:c0:cd:ef:28:21:b5:77:c5:dc:4c:11:
8f:b1:8a:1a:6e:40:73:bd:3d:0b:5b:43:3d:1a:36:
35:35:0c:e0:96:45:a4:c4:d9:84:df:9b:20:74:4f:
03:28:a4:63:6a:99:6c:49:24:9a:15:7b:cb:71:ed:
91:5a:e0:16:45:cd:f1:19:1e:58:49:ec:55:30:14:
14:b3:c3:f0:d9:9b:91:35:41:33:5a:e4:61:8f:0e:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D3:29:BE:0A:81:2E:B5:39:49:6B:D8:55:83:AC:1B:09:38:5F:89
X509v3 Authority Key Identifier:
keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.68.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:4d:17:dd:a1:90:e5:b6:59:50:0a:63:5a:59:c3:c8:f8:1a:
60:c4:55:6a:db:d5:d4:44:ee:5c:74:6f:47:83:43:93:3a:03:
1b:a1:e0:dd:21:ea:8a:04:51:90:54:04:ca:03:66:b2:d4:61:
80:4b:e8:c3:97:23:6e:4d:3f:1f:95:4d:be:1e:9f:bb:bb:cc:
48:cd:e3:6d:21:5f:95:1c:f1:9b:1b:5b:42:5b:11:3b:28:62:
0a:86:78:22:98:d1:55:5f:9e:aa:52:f2:f7:a5:8d:14:13:cd:
59:66:d2:e5:c0:42:6d:ce:d4:80:fe:71:ce:1c:10:7a:c1:9a:
62:ba:29:50:56:f9:c1:a1:22:c3:56:40:4a:92:31:58:32:e9:
0e:e1:de:46:06:5a:c4:06:d9:e2:0e:07:13:86:49:00:73:8d:
e5:f3:cd:12:21:92:bd:c0:88:c3:13:f1:ce:6e:1d:84:cb:60:
23:96:bb:0a:ed:c8:6f:37:86:d2:77:2a:09:3e:d7:20:7f:d0:
8a:1a:5d:c8:e8:cf:ed:c8:90:55:b8:88:e8:43:1b:a6:e1:4c:
19:16:98:37:02:9d:2b:a9:be:d0:75:10:8f:31:39:4a:ac:17:
2a:b3:a1:f3:6b:09:c4:38:fe:f8:98:5c:7f:5b:05:ab:e8:52:
8d:6f:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:06:57 2026 by rpki-client