This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233362e302f32322d3232203d3e20323632353839.roa
File: 3137302e3233382e3233362e302f32322d3232203d3e20323632353839.roa (raw, json)
Hash identifier: 0I7ZvyKVWWpDK6t7aU9MNp6+LcQK71En+w9J2B+qSN8=
Subject key identifier: 0C:64:04:01:DA:F6:F8:67:89:92:5D:9A:CF:57:6A:D1:6A:F6:73:C3
Certificate issuer: /CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Certificate serial: 5AFE72C621BC3CF3DB87E8785076B3D45C2C2547
Authority key identifier: 21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233362e302f32322d3232203d3e20323632353839.roa
Signing time: Tue 06 Jan 2026 18:57:52 +0000
ROA not before: Tue 06 Jan 2026 18:52:52 +0000
ROA not after: Tue 05 Jan 2027 18:57:52 +0000
asID: 262589
IP address blocks: 170.238.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 22:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:fe:72:c6:21:bc:3c:f3:db:87:e8:78:50:76:b3:d4:5c:2c:25:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Validity
Not Before: Jan 6 18:52:52 2026 GMT
Not After : Jan 5 18:57:52 2027 GMT
Subject: CN=0C640401DAF6F86789925D9ACF576AD16AF673C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:ce:f8:e1:97:51:86:3a:07:c5:eb:92:1a:
2b:15:41:4e:8c:de:ff:28:d9:22:db:c0:95:7f:37:
e0:c4:77:1f:66:46:b9:8b:ea:8d:6b:18:2d:35:04:
58:22:1f:31:33:a7:1a:9b:5c:f6:d3:9e:ac:0e:ba:
3a:83:9e:1d:74:eb:bb:38:f7:71:8f:c9:ed:54:83:
d5:6c:c0:a9:a0:64:1d:4c:9b:bb:da:43:a5:b4:9e:
87:f6:20:1a:a2:14:df:66:0b:69:59:4a:fb:c7:1c:
a3:af:4d:a9:f0:9a:3a:df:3c:1f:e5:48:dd:36:03:
42:05:5f:11:6a:51:f0:76:ba:46:09:77:ce:43:b4:
44:56:d9:11:29:1b:3c:1d:99:94:cb:f3:73:f5:fc:
c5:20:03:f4:08:ab:fc:9e:59:81:bf:f6:e9:a5:72:
d6:ef:52:f1:4c:fc:fb:47:63:fa:26:64:3e:07:b3:
79:7d:9b:89:1d:65:ca:e7:a9:e9:1d:7c:d9:a5:e9:
35:01:41:dd:ca:84:b9:da:28:90:84:47:b4:82:da:
f3:4f:51:a1:82:f3:b3:9b:12:de:cd:46:d1:5b:94:
4d:d4:a8:38:ab:83:4f:54:b0:ea:73:a0:b1:07:6f:
c3:35:28:f2:bb:39:71:cd:58:ac:68:52:80:e0:84:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:64:04:01:DA:F6:F8:67:89:92:5D:9A:CF:57:6A:D1:6A:F6:73:C3
X509v3 Authority Key Identifier:
keyid:21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233362e302f32322d3232203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.236.0/22
Signature Algorithm: sha256WithRSAEncryption
28:4e:cc:02:f2:46:3a:16:68:3d:0b:24:e9:6e:57:e7:c8:61:
28:fd:92:0c:52:3d:00:f0:a2:52:90:88:bc:1b:21:59:63:ec:
1c:19:48:4f:7b:ac:06:f7:55:f9:e7:83:f4:ab:27:e2:e2:87:
9f:ba:bd:3a:f9:44:1c:e2:5e:86:d3:37:e5:b6:c9:a6:9c:a4:
ba:8b:67:e5:76:97:16:6e:4b:a4:7d:db:a4:e0:4e:5e:d1:dc:
67:bd:7f:4e:25:88:59:ca:8a:76:e0:27:ba:d2:94:d1:8b:e8:
3c:d9:66:91:7a:7e:a7:90:50:d0:c5:b4:4f:ad:0d:3d:86:5f:
11:9e:25:f5:c8:fc:c6:fa:b5:b5:01:38:4d:29:b6:29:dd:5a:
b7:1f:22:de:da:7e:1d:4f:1d:6e:08:54:13:ed:f4:af:bc:7b:
2a:7b:36:d6:7f:b6:59:1e:15:1f:78:3f:a8:31:ba:99:d8:9d:
03:59:ef:ae:76:2b:39:d6:0d:df:f3:b7:6f:ff:22:4b:ea:79:
b5:76:71:8e:7f:f7:72:b0:b1:d3:7e:1a:7b:c3:13:27:ea:59:
10:18:f5:76:f5:ec:9a:7b:07:88:4c:6c:57:e6:ea:bc:e3:30:
05:9c:3f:96:84:5b:47:23:26:87:1d:6b:c6:f3:e2:a9:79:4b:
95:7e:9e:42
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUWv5yxiG8PPPbh+h4UHaz1FwsJUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE5RkNCQTlGRkVBNDcxN0FCRjZBOUVGODVCN0M2MzZE
OUQyM0JFQTAeFw0yNjAxMDYxODUyNTJaFw0yNzAxMDUxODU3NTJaMDMxMTAvBgNV
BAMTKDBDNjQwNDAxREFGNkY4Njc4OTkyNUQ5QUNGNTc2QUQxNkFGNjczQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWks744ZdRhjoHxeuSGisVQU6M
3v8o2SLbwJV/N+DEdx9mRrmL6o1rGC01BFgiHzEzpxqbXPbTnqwOujqDnh1067s4
93GPye1Ug9VswKmgZB1Mm7vaQ6W0nof2IBqiFN9mC2lZSvvHHKOvTanwmjrfPB/l
SN02A0IFXxFqUfB2ukYJd85DtERW2REpGzwdmZTL83P1/MUgA/QIq/yeWYG/9uml
ctbvUvFM/PtHY/omZD4Hs3l9m4kdZcrnqekdfNml6TUBQd3KhLnaKJCER7SC2vNP
UaGC87ObEt7NRtFblE3UqDirg09UsOpzoLEHb8M1KPK7OXHNWKxoUoDghMQRAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUDGQEAdr2+GeJkl2az1dq0Wr2c8MwHwYDVR0j
BBgwFoAUIZ/Lqf/qRxer9qnvhbfGNtnSO+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjNFNDQxOTVCMTU2MTgyMjZGOTNBRjQyQTJENkNCNTJB
NkU3M0JDMUQwMjdDOTY0RUNEOTJBMDIxNkZGNkQ3LzAvMjE5RkNCQTlGRkVBNDcx
N0FCRjZBOUVGODVCN0M2MzZEOUQyM0JFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTlGQ0JBOUZGRUE0NzE3QUJG
NkE5RUY4NUI3QzYzNkQ5RDIzQkVBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYzRTQ0MTk1QjE1NjE4MjI2RjkzQUY0MkEyRDZDQjUyQTZFNzNCQzFE
MDI3Qzk2NEVDRDkyQTAyMTZGRjZENy8wLzMxMzczMDJlMzIzMzM4MmUzMjMzMzYy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNTM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
7uwwDQYJKoZIhvcNAQELBQADggEBAChOzALyRjoWaD0LJOluV+fIYSj9kgxSPQDw
olKQiLwbIVlj7BwZSE97rAb3Vfnng/SrJ+Lih5+6vTr5RBziXobTN+W2yaacpLqL
Z+V2lxZuS6R926TgTl7R3Ge9f04liFnKinbgJ7rSlNGL6DzZZpF6fqeQUNDFtE+t
DT2GXxGeJfXI/Mb6tbUBOE0ptindWrcfIt7afh1PHW4IVBPt9K+8eyp7NtZ/tlke
FR94P6gxupnYnQNZ7652KznWDd/zt2//IkvqebV2cY5/93KwsdN+GnvDEyfqWRAY
9Xb17Jp7B4hMbFfm6rzjMAWcP5aEW0cjJocda8bz4ql5S5V+nkI=
-----END CERTIFICATE-----
Generated at Tue Jan 13 13:31:55 2026 by rpki-client