This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/3136342e3136332e3133322e302f32322d3234203d3e203532343638.roa
File: 3136342e3136332e3133322e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: J2mlWujl4pCpWEE94ESEPPniojCJsj022+FHUBcYhS0=
Subject key identifier: 10:2F:FC:EF:08:12:18:59:65:71:55:E6:1E:97:45:52:B6:D6:DD:1E
Certificate issuer: /CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
Certificate serial: 084FE6C4353D77B34ECF1D3166AB6D9FCA428336
Authority key identifier: BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/3136342e3136332e3133322e302f32322d3234203d3e203532343638.roa
Signing time: Tue 06 Jan 2026 19:20:13 +0000
ROA not before: Tue 06 Jan 2026 19:15:13 +0000
ROA not after: Tue 05 Jan 2027 19:20:13 +0000
asID: 52468
IP address blocks: 164.163.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl
rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4f:e6:c4:35:3d:77:b3:4e:cf:1d:31:66:ab:6d:9f:ca:42:83:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
Validity
Not Before: Jan 6 19:15:13 2026 GMT
Not After : Jan 5 19:20:13 2027 GMT
Subject: CN=102FFCEF08121859657155E61E974552B6D6DD1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:48:04:75:49:6d:af:4c:24:b8:01:31:37:
1c:f0:a2:b1:0f:34:54:a8:c9:7b:42:17:65:4f:3e:
d4:fc:22:5a:71:8e:8b:17:d5:be:34:c1:be:42:65:
96:57:56:16:54:eb:54:7f:d3:d8:14:05:ca:ec:39:
8a:9c:67:f2:c5:62:e0:b8:cb:30:7b:cc:89:35:46:
fb:dc:a0:9f:05:f7:48:c7:4f:be:cf:b5:c1:86:80:
5f:07:a1:17:3b:fb:60:c1:c4:f8:f5:c6:d9:89:ab:
32:3c:13:4f:95:25:d6:b6:19:37:3b:24:ad:0f:f8:
33:ef:05:3c:22:5d:ab:96:8c:78:48:93:a6:16:58:
d8:68:fb:6a:3a:45:ef:30:f5:06:61:b2:c1:71:92:
09:25:e3:c7:70:5d:f6:14:07:6f:d3:7b:af:e2:f6:
61:dd:5f:b0:d2:d2:44:35:d2:07:f2:97:69:f8:45:
2f:29:8f:9b:98:39:4b:fd:0c:aa:d2:05:7a:41:b7:
5b:05:99:6c:26:03:de:24:a4:8a:af:3d:89:71:94:
8d:95:ba:eb:7e:31:28:6d:34:ed:7a:a7:01:ab:07:
55:55:c3:6f:9c:41:a9:be:90:e6:5e:e9:e7:fb:98:
92:86:75:ed:81:26:6e:55:f4:8c:d4:c8:d9:94:d6:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2F:FC:EF:08:12:18:59:65:71:55:E6:1E:97:45:52:B6:D6:DD:1E
X509v3 Authority Key Identifier:
keyid:BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/3136342e3136332e3133322e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.132.0/22
Signature Algorithm: sha256WithRSAEncryption
66:22:d9:3a:83:4b:2e:f3:39:ca:b9:f6:73:23:58:f0:e2:bc:
11:51:69:9a:bd:25:c3:1c:a3:ef:92:07:9b:5a:4e:32:33:61:
3e:b8:a5:a6:23:c7:5e:e6:3c:c2:26:83:65:37:4c:e1:2f:6a:
8a:34:18:e7:e8:16:b9:cc:78:56:4f:45:7b:44:60:44:77:f8:
ed:f2:f8:4a:82:e2:6f:d4:24:45:5b:5c:bb:93:04:72:e3:6d:
89:d2:28:af:b9:e0:e9:a7:6f:b0:a5:39:b7:67:16:e7:f9:3c:
94:78:8d:61:17:e7:00:f4:12:5d:15:73:6a:c6:b2:07:fb:3a:
c7:26:5e:39:6a:55:65:ad:a9:05:55:f7:06:99:5a:b0:93:1f:
48:4c:15:e2:84:09:40:8a:f6:e6:5f:5e:db:eb:cf:ea:c1:2b:
99:dc:ea:05:0e:60:cb:96:53:5f:fd:02:42:41:f3:1b:4a:4e:
0c:35:89:e1:91:ef:cd:b4:2d:05:0f:d6:92:d2:52:0a:f3:11:
c6:54:1a:c4:82:58:6e:a8:e8:4c:72:d1:e8:15:5a:68:0a:8a:
b3:7a:c1:0f:5a:c9:8f:7c:3b:fe:de:07:21:61:ff:7e:93:89:
71:72:74:ba:c8:07:c2:92:c6:b3:b0:38:63:e2:71:8f:78:3c:
a9:70:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:49:52 2026 by rpki-client