This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3232203d3e203631353039.roa
File: 3137302e38332e33322e302f32322d3232203d3e203631353039.roa (raw, json)
Hash identifier: WCEZiUuAM2OLO8eGblUalz+qa4zyTRYEZkCrtjEE9ds=
Subject key identifier: 4F:B3:94:63:00:F9:25:F8:E4:BE:F4:03:A5:B3:CF:3E:5C:F0:83:7F
Certificate issuer: /CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Certificate serial: 5C469BA06A05DFB354E2E2121E34AC21896EBF9C
Authority key identifier: 9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3232203d3e203631353039.roa
Signing time: Tue 06 Jan 2026 19:00:43 +0000
ROA not before: Tue 06 Jan 2026 18:55:43 +0000
ROA not after: Tue 05 Jan 2027 19:00:43 +0000
asID: 61509
IP address blocks: 170.83.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.crl
rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 06:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:46:9b:a0:6a:05:df:b3:54:e2:e2:12:1e:34:ac:21:89:6e:bf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Validity
Not Before: Jan 6 18:55:43 2026 GMT
Not After : Jan 5 19:00:43 2027 GMT
Subject: CN=4FB3946300F925F8E4BEF403A5B3CF3E5CF0837F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:b3:a0:2b:97:de:c9:db:c3:15:53:b0:68:
e0:d9:13:34:65:92:82:f9:2c:79:24:ed:16:8f:dd:
a3:50:cb:e9:68:6b:8c:cd:80:fa:99:84:d9:f8:32:
61:e0:1c:32:e9:fd:3e:cc:c3:69:bf:24:44:92:96:
80:43:f2:a3:06:8c:16:b0:94:b3:2e:4e:45:d1:ba:
1e:1c:76:ee:a2:a8:88:ab:ee:c2:aa:d3:70:f7:21:
4b:76:2b:ff:4b:f0:c4:98:7d:8f:8b:e8:2e:86:fc:
93:7a:2c:9f:a8:fd:62:6e:f2:51:d6:25:f2:5d:72:
cb:5a:eb:49:55:2d:85:47:01:a7:85:f4:97:49:0b:
7a:3a:e3:be:a8:61:54:4f:60:39:ba:21:f5:1a:b2:
eb:24:2c:3b:eb:03:32:e9:33:64:98:ad:5a:f2:58:
06:a1:ed:70:f8:2f:24:d7:f0:18:62:b3:ce:55:6d:
60:1b:91:b2:b2:c8:37:a7:61:c6:17:8c:09:da:e8:
53:fe:01:2a:80:8e:98:61:74:0b:3f:7b:85:8d:7e:
c5:90:49:1f:d8:63:e1:b9:5d:59:3e:49:94:c8:64:
81:72:99:50:ff:6d:0c:b7:13:6c:8d:39:68:00:d5:
b3:9a:cb:2a:be:35:15:1c:0f:2f:84:b0:98:f6:ca:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B3:94:63:00:F9:25:F8:E4:BE:F4:03:A5:B3:CF:3E:5C:F0:83:7F
X509v3 Authority Key Identifier:
keyid:9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3232203d3e203631353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
10:25:c1:de:ea:68:ef:bb:79:de:e9:7c:68:07:2b:f8:63:23:
6f:41:75:7c:13:30:5c:68:1c:82:53:8c:f2:d7:61:00:8a:ce:
4b:66:3d:d2:ca:ff:6c:02:f2:1c:00:22:e9:68:18:14:0a:b2:
be:6e:19:14:df:8e:30:89:d8:f6:c4:21:16:3d:94:72:e1:0f:
44:de:c5:20:dd:ea:e0:e3:91:90:46:b9:af:bb:37:73:c2:ad:
17:d9:53:90:c0:17:ba:41:73:06:7a:e6:eb:d2:a7:4b:1f:84:
9a:03:29:34:f6:2e:7c:c4:45:fd:82:68:94:41:d9:eb:55:6d:
42:71:00:c3:94:99:70:46:7a:c4:f6:ac:ac:59:d0:ac:ad:aa:
e6:8f:8a:64:1b:34:3b:4e:00:80:54:7e:a9:23:a9:31:b5:e4:
a9:c4:4e:78:85:9e:84:93:df:09:eb:1f:33:dc:97:77:a1:c8:
22:c6:1b:8e:8c:b8:59:bd:18:2f:d4:91:5e:42:0e:49:64:68:
52:b6:51:31:10:4b:b4:9b:5d:d2:c5:1e:b7:52:0d:47:59:a6:
26:e6:a4:98:ba:43:9b:4d:4d:58:00:d2:fe:84:43:6c:5e:db:
5f:45:ab:7d:28:ff:a9:ea:10:64:14:7c:e5:f2:b5:64:2b:53:
1d:c0:8e:33
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUXEaboGoF37NU4uISHjSsIYluv5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJCQTNCRkZGMTQ2NzQzOENDMUY5ODU0NzU4RjZGNTRF
RkQwODExNTAeFw0yNjAxMDYxODU1NDNaFw0yNzAxMDUxOTAwNDNaMDMxMTAvBgNV
BAMTKDRGQjM5NDYzMDBGOTI1RjhFNEJFRjQwM0E1QjNDRjNFNUNGMDgzN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIArOgK5feydvDFVOwaODZEzRl
koL5LHkk7RaP3aNQy+loa4zNgPqZhNn4MmHgHDLp/T7Mw2m/JESSloBD8qMGjBaw
lLMuTkXRuh4cdu6iqIir7sKq03D3IUt2K/9L8MSYfY+L6C6G/JN6LJ+o/WJu8lHW
JfJdcsta60lVLYVHAaeF9JdJC3o6476oYVRPYDm6IfUasuskLDvrAzLpM2SYrVry
WAah7XD4LyTX8Bhis85VbWAbkbKyyDenYcYXjAna6FP+ASqAjphhdAs/e4WNfsWQ
SR/YY+G5XVk+SZTIZIFymVD/bQy3E2yNOWgA1bOayyq+NRUcDy+EsJj2yiGPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUT7OUYwD5JfjkvvQDpbPPPlzwg38wHwYDVR0j
BBgwFoAUm7o7//FGdDjMH5hUdY9vVO/QgRUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTY1QTYyMURBRUI3NjFEQTFCNDIzMjUwNzQyQzUzOEMy
NTM3REM3RDFDMkM2QjA0QTIzQzg2MEVEMUZEQUZELzAvOUJCQTNCRkZGMTQ2NzQz
OENDMUY5ODU0NzU4RjZGNTRFRkQwODExNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkJBM0JGRkYxNDY3NDM4Q0Mx
Rjk4NTQ3NThGNkY1NEVGRDA4MTE1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTk2NUE2MjFEQUVCNzYxREExQjQyMzI1MDc0MkM1MzhDMjUzN0RDN0Qx
QzJDNkIwNEEyM0M4NjBFRDFGREFGRC8wLzMxMzczMDJlMzgzMzJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDM2MzEzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKqUyAwDQYJ
KoZIhvcNAQELBQADggEBABAlwd7qaO+7ed7pfGgHK/hjI29BdXwTMFxoHIJTjPLX
YQCKzktmPdLK/2wC8hwAIuloGBQKsr5uGRTfjjCJ2PbEIRY9lHLhD0TexSDd6uDj
kZBGua+7N3PCrRfZU5DAF7pBcwZ65uvSp0sfhJoDKTT2LnzERf2CaJRB2etVbUJx
AMOUmXBGesT2rKxZ0KytquaPimQbNDtOAIBUfqkjqTG15KnETniFnoST3wnrHzPc
l3ehyCLGG46MuFm9GC/UkV5CDklkaFK2UTEQS7SbXdLFHrdSDUdZpibmpJi6Q5tN
TVgA0v6EQ2xe219Fq30o/6nqEGQUfOXytWQrUx3AjjM=
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:35:44 2026 by rpki-client