This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3137302e302f32342d3234203d3e20323637383538.roa
File: 3137302e3234342e3137302e302f32342d3234203d3e20323637383538.roa (raw, json)
Hash identifier: f8aJ/vRfuVa5Pan5ijoSpHKYuMtgyZuMWS9G1JC3o+8=
Subject key identifier: 14:83:7D:91:5A:F7:3C:D3:9F:CC:75:89:01:48:84:85:10:D2:9D:D0
Certificate issuer: /CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640
Certificate serial: 215BA9AF6C95A51FB458DAE1AD10E3207A913751
Authority key identifier: 5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3137302e302f32342d3234203d3e20323637383538.roa
Signing time: Tue 06 Jan 2026 19:08:22 +0000
ROA not before: Tue 06 Jan 2026 19:03:22 +0000
ROA not after: Tue 05 Jan 2027 19:08:22 +0000
asID: 267858
IP address blocks: 170.244.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.crl
rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 12:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5b:a9:af:6c:95:a5:1f:b4:58:da:e1:ad:10:e3:20:7a:91:37:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640
Validity
Not Before: Jan 6 19:03:22 2026 GMT
Not After : Jan 5 19:08:22 2027 GMT
Subject: CN=14837D915AF73CD39FCC75890148848510D29DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:ed:87:86:70:d1:c2:c0:bd:29:b3:7c:2e:
eb:48:ef:92:fd:af:4f:af:b5:5c:89:e2:2d:a1:1d:
49:6d:0a:98:c3:66:d1:f0:72:7a:37:e1:4a:dd:8b:
ad:dc:b5:8a:97:b5:1a:ae:a8:ef:b4:20:15:33:22:
a5:55:24:50:c9:5e:d2:12:98:fc:96:e4:55:2f:a5:
44:e6:6c:14:7a:fd:dd:c6:91:58:ab:6d:c9:4a:0d:
99:60:b7:79:ea:cb:be:30:64:eb:9d:26:4c:a1:ee:
67:58:7d:2b:23:32:6e:98:30:ec:65:44:b7:be:ea:
f7:30:1b:b2:e7:eb:98:18:98:35:1c:17:df:44:8c:
81:24:62:0d:2f:82:ea:39:a8:40:eb:32:31:26:59:
88:ef:40:ab:6a:a9:22:29:9b:7e:b5:34:35:0e:05:
34:8f:1c:0d:e3:f3:73:a8:5d:83:eb:b4:4a:69:2b:
d5:9f:c0:a1:30:88:43:d4:f8:28:b8:be:40:ee:4f:
3f:de:02:5b:26:7a:64:bf:b9:30:70:07:2f:5e:b5:
27:d9:9b:0b:e3:7f:4b:0f:24:64:60:07:b2:25:46:
a2:a1:3c:cb:b4:bf:f8:83:ea:af:3f:2b:c7:fc:47:
6f:98:dd:53:f4:f3:84:46:80:a6:c1:8b:6e:6e:7b:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:83:7D:91:5A:F7:3C:D3:9F:CC:75:89:01:48:84:85:10:D2:9D:D0
X509v3 Authority Key Identifier:
keyid:5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3137302e302f32342d3234203d3e20323637383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a6:4a:f8:60:ef:87:ba:64:a5:11:ed:fe:73:a4:3e:22:8c:
f1:68:a9:86:65:d0:be:e7:0e:24:03:18:da:d5:aa:f6:6e:16:
67:5d:ce:2b:da:42:09:a3:c9:57:99:c4:96:19:a3:c7:28:9a:
4f:dc:29:b2:c8:e6:6a:37:e6:38:90:20:05:5e:84:14:6e:17:
48:36:0a:0f:00:07:37:06:df:64:b5:34:ed:5c:8e:04:98:b6:
1b:0b:6a:8c:61:1c:9b:16:4c:b1:55:c8:d6:54:a6:52:b5:8d:
74:be:31:bf:02:52:3a:f7:71:52:7e:d4:d0:9f:dc:a7:10:b1:
a4:83:fa:ed:2e:4b:a3:2b:96:b5:e3:2f:6a:52:f2:a0:c2:b6:
97:13:ab:a9:31:15:68:8c:29:af:ee:21:e2:04:a3:86:f3:4e:
e8:b4:aa:7f:9b:33:9a:d3:6f:25:7b:86:d4:e4:17:d4:97:8c:
b0:be:3d:c8:24:29:ed:6f:61:d1:17:66:13:17:c3:78:66:50:
9c:2d:bf:8e:dc:72:f6:64:0d:9c:b5:ce:9d:ad:9e:12:8c:5a:
f0:f9:b0:51:14:93:19:af:f6:ce:5d:37:78:37:c4:9b:32:03:
d3:93:7a:fc:26:20:48:e8:11:88:0b:32:e9:29:81:4c:0f:b8:
cd:75:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:03:57 2026 by rpki-client