This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36382e302e302f31342d3234203d3e203134353232.roa
File: 3138362e36382e302e302f31342d3234203d3e203134353232.roa (raw, json)
Hash identifier: EWKPYu72CdrWn8pQ8vo3tkirhvdJ6jwiQocYnuzpLuc=
Subject key identifier: F5:CF:73:27:38:18:AC:8F:E3:A8:F1:C4:78:BE:05:0F:87:25:B5:B9
Certificate issuer: /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial: 4F9A71118FEB02F6DF0A53FCCDCE645746C00FF6
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36382e302e302f31342d3234203d3e203134353232.roa
Signing time: Tue 06 Jan 2026 20:58:55 +0000
ROA not before: Tue 06 Jan 2026 20:53:55 +0000
ROA not after: Tue 05 Jan 2027 20:58:55 +0000
asID: 14522
IP address blocks: 186.68.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 20:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9a:71:11:8f:eb:02:f6:df:0a:53:fc:cd:ce:64:57:46:c0:0f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Validity
Not Before: Jan 6 20:53:55 2026 GMT
Not After : Jan 5 20:58:55 2027 GMT
Subject: CN=F5CF73273818AC8FE3A8F1C478BE050F8725B5B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:25:8c:73:b0:cf:3e:f1:08:de:4b:26:fd:
25:d0:de:d7:5e:66:cd:5b:70:05:fd:f9:42:20:fd:
dd:bd:98:b9:35:9b:c4:87:98:6f:fd:39:f6:bc:8d:
1e:72:34:e8:66:80:3c:a1:5d:24:69:4b:d1:f5:6b:
ed:c0:9a:77:98:0f:3e:15:2c:31:48:08:e9:59:49:
78:dd:77:39:99:d5:fa:b0:8b:f1:1e:73:67:e5:a4:
c1:49:c3:67:f7:8e:ff:56:aa:12:fd:20:b1:4c:f8:
c3:03:60:69:2c:0f:c8:76:f5:0a:f5:76:44:7b:b4:
fe:b6:65:92:49:d4:ea:9a:dd:4b:6b:ce:bf:e5:48:
0c:c3:65:6b:28:38:c3:61:63:f5:7a:75:66:0f:72:
5d:40:2a:f5:62:3d:d8:07:90:81:23:3d:f8:22:ea:
0f:6b:43:5b:5b:d1:10:04:a7:25:43:14:72:a9:73:
7c:c5:49:11:a6:d7:e4:21:0f:95:eb:15:16:22:b7:
9a:b0:9e:a9:bf:e9:b0:89:6d:e7:f1:3c:d2:b1:0b:
c7:fe:85:09:e3:4e:dd:c4:dd:07:e2:39:6d:2d:1c:
a0:8f:eb:9e:70:92:75:50:e7:54:9d:d4:98:21:6f:
3f:66:7d:66:3a:f7:86:81:0b:fd:f8:91:93:c4:b8:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:73:27:38:18:AC:8F:E3:A8:F1:C4:78:BE:05:0F:87:25:B5:B9
X509v3 Authority Key Identifier:
keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36382e302e302f31342d3234203d3e203134353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.68.0.0/14
Signature Algorithm: sha256WithRSAEncryption
2e:d1:67:43:cc:66:12:52:24:a7:62:16:14:06:a3:71:19:9e:
67:d8:77:28:b3:db:73:8f:b0:38:1e:6c:a8:20:0d:78:1e:27:
3f:c6:fc:4b:5e:24:21:5e:19:35:1f:e0:39:8f:44:cc:87:4a:
1b:22:30:62:f7:ce:41:9d:ee:09:5b:35:fa:37:10:6a:15:60:
fc:03:bb:c9:9d:e4:c0:49:8e:3e:3d:8b:13:54:e4:ae:a7:56:
4f:3e:52:a6:e4:19:89:72:d1:08:46:a0:3c:d0:bb:71:69:b2:
ec:91:df:21:c7:b8:24:4b:ab:87:74:1b:a5:d6:3f:35:2b:bd:
12:7b:e3:e1:b9:82:85:d4:01:c5:96:28:f8:3e:e4:ae:85:3f:
57:73:01:9a:8f:00:25:a1:6a:1a:f3:90:b1:67:2f:ee:ce:21:
2f:48:46:3b:85:69:39:e3:61:e4:85:85:f5:01:ae:6e:87:a9:
6c:36:d1:78:6b:e6:e0:b2:81:8e:b7:f6:f1:97:80:df:9c:96:
70:e0:77:15:6f:4b:90:8d:87:7e:aa:80:1b:62:ac:d7:08:d9:
44:2f:3d:43:5d:d6:44:75:0e:13:22:13:0c:aa:1c:fe:b6:49:
3b:4e:13:35:cf:32:95:78:19:09:d8:26:c8:49:df:7a:36:b1:
dd:7d:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:10:40 2026 by rpki-client