This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3136302e302f32312d3234203d3e203238313037.roa
File: 3137302e3231302e3136302e302f32312d3234203d3e203238313037.roa (raw, json)
Hash identifier: SR6nO/2Vw/AgWAdFClN7nHL582cpEIDLCL10Y5dJkmk=
Subject key identifier: EF:10:35:9C:07:D2:1C:BD:75:05:4E:05:B7:31:44:05:BB:50:90:D1
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 2F171AE682B91E4E99E1A3C62CCF3E4B2814B33A
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3136302e302f32312d3234203d3e203238313037.roa
Signing time: Tue 06 Jan 2026 19:22:10 +0000
ROA not before: Tue 06 Jan 2026 19:17:10 +0000
ROA not after: Tue 05 Jan 2027 19:22:10 +0000
asID: 28107
IP address blocks: 170.210.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 07:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:17:1a:e6:82:b9:1e:4e:99:e1:a3:c6:2c:cf:3e:4b:28:14:b3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Jan 6 19:17:10 2026 GMT
Not After : Jan 5 19:22:10 2027 GMT
Subject: CN=EF10359C07D21CBD75054E05B7314405BB5090D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:88:e2:6a:27:99:d0:e9:40:92:c5:99:7c:
58:94:63:b0:c1:04:ec:2d:2c:71:01:73:84:b7:3b:
fd:3d:48:40:87:40:d4:53:05:76:f7:3b:90:ad:89:
8a:99:fd:58:9d:f8:e4:5c:33:08:5b:4a:bb:75:8d:
79:6e:c0:64:57:79:d1:13:78:89:7d:c3:3f:cd:94:
ab:24:ea:03:ab:6e:6c:87:e3:5e:8b:40:e8:39:86:
73:4e:23:a2:dd:78:e9:a5:0f:24:1b:9b:9a:05:c3:
c1:ec:44:03:1a:6d:6b:d4:01:f3:d7:9f:ac:8e:89:
63:e3:2b:55:b1:01:1a:db:f8:ee:21:99:2d:e5:8f:
1b:5f:66:21:cb:fa:50:92:36:79:d3:81:6d:75:a1:
da:21:c4:d8:5d:7d:b6:61:22:89:d0:33:af:6a:95:
6d:d3:f7:6f:92:6b:33:0c:7e:86:e1:e4:ce:36:d5:
c3:ee:0e:8c:c5:cc:10:78:16:04:8f:49:2e:97:cd:
fd:e0:eb:c9:6e:c9:ff:1f:23:97:e3:11:94:1b:c4:
3c:74:66:7b:0f:1e:1e:09:23:f9:53:89:39:ae:4f:
eb:53:94:38:d4:6c:61:e6:c7:16:39:50:bb:36:df:
f6:8a:ce:a3:56:e2:70:ce:c1:ea:c2:33:4c:67:c9:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:10:35:9C:07:D2:1C:BD:75:05:4E:05:B7:31:44:05:BB:50:90:D1
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3136302e302f32312d3234203d3e203238313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.160.0/21
Signature Algorithm: sha256WithRSAEncryption
86:24:fd:ea:54:a2:58:13:9c:53:fd:d4:cc:53:d2:a4:b7:62:
39:c1:31:41:f4:d3:2f:a0:3f:c0:e3:29:56:e1:dd:27:dd:1d:
75:3a:b1:3c:62:3f:48:1d:be:0c:a4:a3:63:ee:59:7f:ba:7b:
8c:77:37:86:ba:20:49:83:f3:75:62:24:f6:59:46:b4:d3:47:
ba:2b:58:6c:81:ad:6c:48:cb:7f:6f:3a:e8:45:c0:98:1c:62:
db:ca:d5:68:92:d0:41:4b:2b:d5:e1:47:7b:8e:c8:58:8d:73:
67:35:cd:78:b6:9d:d2:59:58:3f:bc:8a:07:53:05:4f:bc:65:
e9:8b:cd:be:73:ca:e3:43:14:9d:ba:52:50:5c:f6:36:69:18:
bf:62:70:c4:71:e5:44:d1:d6:bd:98:7f:de:6d:71:f8:ed:cb:
c9:84:e9:d0:ed:cc:ea:5d:71:1b:7e:1f:81:11:b5:f3:86:5a:
c5:5a:89:89:e7:53:61:f7:e8:2b:54:09:93:bd:c5:84:35:64:
c2:bc:06:d6:0b:93:42:f1:76:9d:fa:a1:64:86:ad:a7:a9:3c:
7b:6a:8c:a2:cb:3c:9b:a6:b5:7a:a6:ce:b5:87:6a:37:b6:e9:
e3:2a:69:de:71:f1:ed:a1:a1:bf:6d:4b:33:52:b6:91:5d:91:
a2:e0:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:12:17 2026 by rpki-client