This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa
File: 3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier: fgGI9X6Unfmm0D8gRQrlFCnLcemVPdvkLt2X++vKP+I=
Subject key identifier: 92:A0:F9:CB:6F:07:5C:B2:2B:A0:0D:77:08:B1:01:B0:B7:B2:37:9E
Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial: 165924C367000028B751C1D862DF4C8D484C0439
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa
Signing time: Tue 06 Jan 2026 19:03:46 +0000
ROA not before: Tue 06 Jan 2026 18:58:46 +0000
ROA not after: Tue 05 Jan 2027 19:03:46 +0000
asID: 27843
IP address blocks: 170.254.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 12:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:59:24:c3:67:00:00:28:b7:51:c1:d8:62:df:4c:8d:48:4c:04:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Validity
Not Before: Jan 6 18:58:46 2026 GMT
Not After : Jan 5 19:03:46 2027 GMT
Subject: CN=92A0F9CB6F075CB22BA00D7708B101B0B7B2379E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:81:8b:b8:5b:43:d3:9e:a9:3f:dd:53:6a:
3e:f8:cf:72:0b:b2:11:b3:e7:ea:71:b8:19:13:1a:
43:cd:d6:25:3c:76:4c:af:31:74:e4:a4:56:67:d8:
9a:44:0f:18:ad:88:4e:4c:a3:87:64:1b:89:d1:93:
26:86:21:d1:af:47:a3:2d:58:ab:bb:7b:4b:94:6b:
37:fa:43:97:a5:e2:e3:20:f6:1f:95:57:ea:87:80:
d2:60:85:5a:8f:54:ff:25:b4:87:a0:22:6d:b7:8c:
f0:05:dc:10:a5:b9:74:91:dc:10:c4:60:d4:10:55:
fc:97:44:05:e3:28:2a:f4:48:fe:e5:0d:46:fa:62:
42:37:20:28:5c:cf:71:11:56:15:fa:ec:c3:97:9d:
05:17:0a:e3:e2:6f:da:cd:9f:a9:78:dc:d5:bf:01:
4d:c6:92:09:09:1d:27:c1:66:79:d2:7e:7d:7d:a0:
9f:d3:3f:7e:0c:9f:62:99:fa:64:22:29:81:01:18:
39:a1:cd:a7:db:31:7d:cd:68:c9:9c:01:33:e5:ad:
54:32:41:9e:4d:6c:27:a3:ef:ee:5d:6a:ba:dd:dd:
55:03:b6:74:b8:a0:10:de:03:70:82:4b:28:9a:70:
f5:de:72:9d:af:41:b1:5f:00:89:27:ab:14:7b:84:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A0:F9:CB:6F:07:5C:B2:2B:A0:0D:77:08:B1:01:B0:B7:B2:37:9E
X509v3 Authority Key Identifier:
keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.232.0/22
Signature Algorithm: sha256WithRSAEncryption
47:88:1f:46:12:58:d8:83:03:e7:32:f6:ac:43:30:b6:82:54:
71:c6:b9:47:8f:d3:d3:a8:90:b1:a2:4c:52:31:40:ef:b5:ac:
74:94:79:04:30:1d:b2:dc:3e:96:ad:96:00:da:2c:ba:5d:b5:
07:8a:d5:9f:b0:1b:79:ce:e6:58:06:3a:bb:52:26:4b:17:42:
9e:6c:5a:ae:34:dc:aa:99:76:b8:61:15:c5:fb:78:4b:45:ee:
7d:6d:ec:78:e6:c9:98:c6:a8:2e:0a:f4:41:b7:ee:d2:73:60:
82:aa:38:1c:b5:7d:52:49:28:46:6c:fa:66:0d:9e:9c:17:21:
8d:18:83:c8:4e:b3:6b:34:85:82:fa:14:e3:9d:1d:76:06:d0:
e7:a3:6b:30:c5:35:bc:09:60:db:cc:a5:7c:0f:b8:db:c6:e7:
45:06:e4:48:00:20:87:2a:bc:9e:bc:19:d8:37:94:42:74:53:
06:52:d5:e5:86:59:73:3b:6f:e4:5a:bc:9f:88:dc:de:e7:80:
8a:fd:14:0a:31:95:6c:25:2a:81:e3:6e:dc:80:1c:26:19:3f:
52:6b:42:bd:f7:c1:67:9b:0f:00:7e:03:0e:37:fb:13:9d:34:
ee:08:35:bb:13:c6:68:f6:3d:32:1b:b4:a0:ad:43:d5:75:49:
cb:9b:30:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:10:42 2026 by rpki-client