This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3233203d3e203631353039.roa
File: 3137302e38332e33322e302f32322d3233203d3e203631353039.roa (raw, json)
Hash identifier: gFqIofnfz6tV4b4mCaBmMxSOK/aZvQQOaIohlc/dSTE=
Subject key identifier: 84:BA:EF:42:A7:C4:A7:F6:95:BF:4C:A0:C6:3C:3C:BE:4B:28:0D:A8
Certificate issuer: /CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Certificate serial: 5C9B634C77BF6E310D910C0F3172127360323AA7
Authority key identifier: 9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3233203d3e203631353039.roa
Signing time: Tue 06 Jan 2026 19:00:43 +0000
ROA not before: Tue 06 Jan 2026 18:55:43 +0000
ROA not after: Tue 05 Jan 2027 19:00:43 +0000
asID: 61509
IP address blocks: 170.83.32.0/22 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.crl
rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 06:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9b:63:4c:77:bf:6e:31:0d:91:0c:0f:31:72:12:73:60:32:3a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Validity
Not Before: Jan 6 18:55:43 2026 GMT
Not After : Jan 5 19:00:43 2027 GMT
Subject: CN=84BAEF42A7C4A7F695BF4CA0C63C3CBE4B280DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:54:17:e9:5e:24:27:03:67:31:01:96:e1:25:
33:a2:95:99:ed:7b:97:15:15:3e:8d:03:66:4a:f1:
e8:2e:17:a5:38:f9:d1:bf:83:fd:db:3e:e5:4b:10:
e9:ca:ed:dd:c9:5c:4d:61:a3:01:f2:b1:65:20:ee:
0b:7c:20:be:08:df:82:3e:27:b5:40:7d:eb:00:45:
5d:ce:fd:43:32:cb:e4:bb:df:17:60:7b:67:ea:94:
1f:ea:0e:a3:98:99:2f:0a:7b:11:be:ae:8b:2d:ad:
b9:0b:10:3e:a6:d4:26:2d:0c:5d:25:92:15:f7:2d:
87:31:1d:8f:07:bd:0a:b1:2a:0b:36:97:37:28:01:
49:00:51:92:af:8f:28:87:c3:0e:2e:63:de:93:cc:
64:cd:58:21:05:13:0d:3f:35:22:15:a2:d2:c5:84:
c4:6b:09:b3:cb:00:ba:9b:c7:60:5d:44:df:4d:cd:
43:d7:f5:31:38:dc:ce:a0:5a:d9:1e:b7:3a:11:a5:
3f:d2:19:57:52:84:f1:93:f1:34:70:b9:82:43:16:
83:d1:84:9a:61:74:87:5d:e0:47:28:81:77:21:fe:
d6:20:d0:f4:b0:73:ad:42:bb:83:40:2d:04:61:da:
39:f6:c3:61:87:48:0e:bd:0d:df:12:2c:8e:6c:5c:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BA:EF:42:A7:C4:A7:F6:95:BF:4C:A0:C6:3C:3C:BE:4B:28:0D:A8
X509v3 Authority Key Identifier:
keyid:9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3233203d3e203631353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
69:08:6c:1b:b8:cd:a3:30:b6:6d:96:c1:fe:ec:6e:cc:f3:14:
19:07:08:f5:c4:55:46:55:f5:1e:14:cf:7a:4b:62:db:69:1d:
6e:1d:ec:06:7c:a8:52:9a:3d:f2:b0:db:1c:e0:ad:58:3d:14:
e5:d6:2a:4a:41:d0:e0:16:3e:af:7f:45:e0:3f:20:2d:8d:5a:
15:5d:23:36:c0:84:c7:e5:36:bf:fb:da:a5:68:ef:9d:62:e1:
f3:18:78:ed:ca:d1:45:9d:e9:f8:4f:77:6e:af:bd:28:f4:68:
e2:ef:a6:71:f3:b7:00:87:0a:09:8c:db:48:2b:66:06:66:cb:
03:38:70:df:54:48:ba:18:25:9c:ac:80:58:24:67:14:28:53:
64:a5:32:73:84:6c:a8:79:d0:bb:ff:a5:ba:95:f4:ad:ad:b6:
c9:ff:1e:4d:e2:a7:d4:ff:b4:51:18:4c:1b:4e:c3:c9:51:08:
36:92:ee:e5:04:9f:cc:2b:ab:68:63:aa:1d:50:58:ad:7b:80:
c8:f9:85:dd:3a:c4:6f:01:f6:da:c5:b7:1b:24:c0:47:cb:2f:
e4:08:45:9e:0e:09:b8:07:29:7d:7f:0b:d8:30:87:70:7b:ed:
ca:25:fe:b4:4b:dc:9d:9d:28:2c:c3:56:8c:32:6d:6d:47:71:
be:5c:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:35:45 2026 by rpki-client