This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e3232302e302f32322d3234203d3e203237383433.roa
File: 3136382e3132312e3232302e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier: JbdRjY1voSgBxTWrFESRtzvaa61Gnh1bVz93wuqxnHc=
Subject key identifier: E6:60:F0:A6:A1:CC:5F:48:AF:58:31:28:13:BB:C5:00:47:0D:9D:BF
Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial: 6A401EF37B1DC81E30E60D54AD7631F6EA6124ED
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e3232302e302f32322d3234203d3e203237383433.roa
Signing time: Tue 06 Jan 2026 19:03:46 +0000
ROA not before: Tue 06 Jan 2026 18:58:46 +0000
ROA not after: Tue 05 Jan 2027 19:03:46 +0000
asID: 27843
IP address blocks: 168.121.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 12:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:40:1e:f3:7b:1d:c8:1e:30:e6:0d:54:ad:76:31:f6:ea:61:24:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Validity
Not Before: Jan 6 18:58:46 2026 GMT
Not After : Jan 5 19:03:46 2027 GMT
Subject: CN=E660F0A6A1CC5F48AF58312813BBC500470D9DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:18:4a:c8:16:db:39:b4:a5:ae:e2:69:c3:
66:2a:79:e6:34:6b:af:2d:37:bc:4f:cc:88:ce:ae:
6d:9e:18:c6:fc:b2:89:e6:dc:ae:df:6c:0c:6e:cd:
14:32:fd:8b:89:0f:19:5d:db:41:67:fb:b0:b0:c1:
7f:99:f9:a6:45:4f:93:dd:87:55:d1:72:a8:f2:e5:
5c:df:7d:c5:7f:7a:aa:ed:5b:aa:2e:87:84:b3:52:
bd:d5:81:ea:93:b3:26:55:0d:26:ff:f4:92:f6:37:
a1:03:2c:e6:e2:40:15:03:89:2c:e4:70:4f:23:56:
d9:4d:1f:5f:e3:48:25:86:58:55:2e:ad:ad:ee:86:
b7:1c:21:73:49:e0:f4:16:c8:94:6f:89:28:8e:71:
c7:2c:e9:7b:84:9d:97:f9:70:83:1f:10:cc:7d:8c:
10:9b:79:ee:8d:58:b9:8d:dc:c5:1b:4a:21:09:7f:
83:95:ec:b2:dd:f0:6e:c0:cb:14:ee:bc:bb:59:46:
5d:b3:75:e1:eb:f9:b2:70:50:7d:8b:86:37:db:ff:
42:33:b1:6b:7d:98:0d:84:96:33:7c:46:99:98:00:
54:90:47:90:18:2d:46:08:8b:6c:b1:3f:a5:5a:a9:
c7:f6:40:3b:78:56:83:1d:ec:83:ac:87:9e:29:9f:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:60:F0:A6:A1:CC:5F:48:AF:58:31:28:13:BB:C5:00:47:0D:9D:BF
X509v3 Authority Key Identifier:
keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e3232302e302f32322d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.220.0/22
Signature Algorithm: sha256WithRSAEncryption
64:86:af:43:82:d5:9e:21:4c:7e:e3:ac:b6:1a:33:11:e5:75:
f8:5f:92:56:63:5e:e4:9a:51:7b:e9:1b:df:e3:ba:61:67:9c:
f3:2a:9f:2f:c2:5b:fd:c5:a7:c8:2f:04:3e:f4:03:f6:4d:91:
c5:d5:32:d4:e8:29:ec:cf:16:13:8a:00:ad:d4:92:86:56:30:
f0:42:43:8f:ca:c9:7a:24:85:ee:49:03:33:6c:3b:5f:f4:45:
86:c3:0b:08:e4:96:49:bf:4c:28:be:28:05:c4:4e:74:5a:32:
4d:58:9b:81:33:c2:f4:66:f6:56:4a:2c:55:65:f5:9f:ae:1e:
cf:5e:2b:b0:11:f8:ab:65:d4:32:d9:27:c4:7e:92:1a:70:82:
59:df:66:0e:10:e4:94:36:58:e0:5d:43:bd:72:22:90:a9:32:
42:fe:47:bf:2c:4f:4e:a1:7b:7e:55:a6:c5:b3:84:cc:41:6f:
6d:40:a1:14:2c:75:e8:e0:9f:6c:c9:68:27:82:0c:22:7d:c6:
30:0d:88:21:4a:ff:8b:17:6c:3c:28:7a:40:af:6c:45:db:07:
8d:69:80:0b:e4:32:bc:d5:87:9b:30:4d:2c:26:8c:ac:b6:26:
35:35:75:a8:a6:fe:31:3d:28:2d:3b:7f:de:98:1c:99:cf:ac:
24:8e:5a:26
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUakAe83sdyB4w5g1UrXYx9uphJO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwOEQzOEQ0NTcxQzA5QTgzQjQ1QUNGRDEwQUVCNzgy
NkNFOEY4NDAeFw0yNjAxMDYxODU4NDZaFw0yNzAxMDUxOTAzNDZaMDMxMTAvBgNV
BAMTKEU2NjBGMEE2QTFDQzVGNDhBRjU4MzEyODEzQkJDNTAwNDcwRDlEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43hhKyBbbObSlruJpw2YqeeY0
a68tN7xPzIjOrm2eGMb8sonm3K7fbAxuzRQy/YuJDxld20Fn+7CwwX+Z+aZFT5Pd
h1XRcqjy5VzffcV/eqrtW6ouh4SzUr3VgeqTsyZVDSb/9JL2N6EDLObiQBUDiSzk
cE8jVtlNH1/jSCWGWFUura3uhrccIXNJ4PQWyJRviSiOcccs6XuEnZf5cIMfEMx9
jBCbee6NWLmN3MUbSiEJf4OV7LLd8G7AyxTuvLtZRl2zdeHr+bJwUH2Lhjfb/0Iz
sWt9mA2EljN8RpmYAFSQR5AYLUYIi2yxP6Vaqcf2QDt4VoMd7IOsh54pn2IdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5mDwpqHMX0ivWDEoE7vFAEcNnb8wHwYDVR0j
BBgwFoAUnwjTjUVxwJqDtFrP0QrreCbOj4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTZFOEYxMDMxNDZCMjg1MDMzNTAyM0E3MEE2RDM5ODc0
NzY2MzY4REJEQTVGMDQ4RDU1OTcyQjk4RkQ4MzY3LzAvOUYwOEQzOEQ0NTcxQzA5
QTgzQjQ1QUNGRDEwQUVCNzgyNkNFOEY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA4RDM4RDQ1NzFDMDlBODNC
NDVBQ0ZEMTBBRUI3ODI2Q0U4Rjg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE2RThGMTAzMTQ2QjI4NTAzMzUwMjNBNzBBNkQzOTg3NDc2NjM2OERC
REE1RjA0OEQ1NTk3MkI5OEZEODM2Ny8wLzMxMzYzODJlMzEzMjMxMmUzMjMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzgzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqHnc
MA0GCSqGSIb3DQEBCwUAA4IBAQBkhq9DgtWeIUx+46y2GjMR5XX4X5JWY17kmlF7
6Rvf47phZ5zzKp8vwlv9xafILwQ+9AP2TZHF1TLU6CnszxYTigCt1JKGVjDwQkOP
ysl6JIXuSQMzbDtf9EWGwwsI5JZJv0wovigFxE50WjJNWJuBM8L0ZvZWSixVZfWf
rh7PXiuwEfirZdQy2SfEfpIacIJZ32YOEOSUNljgXUO9ciKQqTJC/ke/LE9OoXt+
VabFs4TMQW9tQKEULHXo4J9syWgnggwifcYwDYghSv+LF2w8KHpAr2xF2weNaYAL
5DK81YebME0sJoystiY1NXWopv4xPSgtO3/emByZz6wkjlom
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:23 2026 by rpki-client