This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e302e302f31362d3234203d3e2034323730.roa
File: 3137302e3231302e302e302f31362d3234203d3e2034323730.roa (raw, json)
Hash identifier: aJH2cayckMKMopYTqkk2yDlySp/RgAXfVW6+M530OEg=
Subject key identifier: 2B:E3:09:F1:4A:39:30:30:9F:B2:A9:B4:3D:1F:A2:0B:C7:B3:CC:E5
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 2858D2E9D1E91C9D7D5512912254673204E7BEDD
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e302e302f31362d3234203d3e2034323730.roa
Signing time: Tue 06 Jan 2026 19:22:12 +0000
ROA not before: Tue 06 Jan 2026 19:17:12 +0000
ROA not after: Tue 05 Jan 2027 19:22:12 +0000
asID: 4270
IP address blocks: 170.210.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 07:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:58:d2:e9:d1:e9:1c:9d:7d:55:12:91:22:54:67:32:04:e7:be:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Jan 6 19:17:12 2026 GMT
Not After : Jan 5 19:22:12 2027 GMT
Subject: CN=2BE309F14A3930309FB2A9B43D1FA20BC7B3CCE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:d1:2e:4d:e9:ce:72:cc:39:c2:c0:5e:e9:
23:d4:dd:4f:85:1e:73:86:b9:c6:f5:42:93:e5:8a:
7d:07:97:3e:f3:6e:ac:17:c6:08:d4:ab:a0:e5:08:
73:c1:0b:0f:b3:2a:8d:d9:06:c3:ce:3f:10:3c:5f:
64:09:88:e2:90:ec:e2:cc:11:1f:d0:9c:68:f6:bf:
de:11:82:33:04:da:f3:68:d1:3a:de:d7:9f:f9:0d:
22:b0:ae:bf:e7:87:7e:e6:05:07:db:a1:09:8c:67:
0b:7e:e8:27:0c:ea:e8:f5:41:e4:e3:6c:9a:68:33:
53:67:d2:db:09:22:7c:fb:e5:48:11:20:3a:5c:d4:
71:a9:c2:40:ce:29:fb:ea:b7:15:fd:3e:95:b9:39:
3e:95:64:62:da:54:f9:fb:8f:03:a4:23:8a:49:28:
0e:8b:27:b3:40:db:7f:85:b3:13:16:7b:9b:95:59:
6a:c6:1c:2e:48:42:be:bf:37:30:dc:a7:6e:f6:c7:
e4:bc:23:b0:97:05:a3:fd:22:a6:42:5a:29:89:e9:
be:b4:e5:74:4c:49:a7:53:38:82:2e:b2:13:23:68:
4f:1a:32:78:5c:e3:94:1f:5a:96:40:5b:4a:6e:96:
7f:d2:ad:8c:d2:f1:fd:aa:61:36:3c:35:80:84:f7:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E3:09:F1:4A:39:30:30:9F:B2:A9:B4:3D:1F:A2:0B:C7:B3:CC:E5
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e302e302f31362d3234203d3e2034323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:36:98:ed:09:7e:44:e5:dc:5a:dc:0a:d6:11:2c:f5:e4:c5:
c1:a2:3c:70:11:cd:d6:55:89:3e:dd:e4:0f:f1:06:d1:d9:09:
89:86:4d:5f:ca:82:cd:1b:9f:32:90:2f:68:c5:7e:39:82:77:
1f:70:af:cb:67:96:9a:38:1c:d3:6b:9d:b7:47:df:9b:d9:0f:
67:03:19:fa:64:d8:10:43:b7:d4:9c:83:f4:b5:d4:b8:0f:56:
4c:1d:33:c9:96:b8:42:77:6b:d5:df:35:8e:fa:3b:a7:f9:12:
44:b6:b1:37:88:b3:22:be:40:48:82:e0:51:6c:09:f9:57:82:
74:36:7e:51:06:54:c6:7a:da:3d:bf:d7:50:9b:ab:b8:42:4a:
3b:61:fc:ce:3b:16:f0:09:a2:e9:59:28:c6:b5:c7:d6:2f:ad:
48:df:07:07:8d:b0:d0:80:3a:cc:30:65:78:3f:9a:ac:6e:4d:
74:52:2a:3e:82:1d:68:6d:42:58:a8:20:68:95:c4:33:af:c2:
2d:ac:43:f2:e7:87:54:62:82:3e:53:ca:f2:a1:f8:f8:45:e2:
03:20:ad:cc:ef:87:1f:c8:b6:98:93:6a:e8:c5:44:96:a1:93:
e4:16:75:11:b1:4a:ba:76:b1:bd:2c:18:36:8f:07:f5:07:27:
3c:0f:35:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:38:47 2026 by rpki-client