This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139352e302f32342d3234203d3e20323633373235.roa
File: 3136382e3232382e3139352e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier: DZeH3QYiSxBtq+vpfVvBah+rRSRcswIOrM8Sz0e/Acg=
Subject key identifier: 95:38:11:51:10:FC:3E:0C:90:3B:C7:A3:5F:66:AB:A2:4D:29:54:07
Certificate issuer: /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial: 5C2937E12024F1EE0467ADE7A76B9BD844925AFE
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139352e302f32342d3234203d3e20323633373235.roa
Signing time: Tue 06 Jan 2026 19:42:31 +0000
ROA not before: Tue 06 Jan 2026 19:37:31 +0000
ROA not after: Tue 05 Jan 2027 19:42:31 +0000
asID: 263725
IP address blocks: 168.228.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl
rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:29:37:e1:20:24:f1:ee:04:67:ad:e7:a7:6b:9b:d8:44:92:5a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Validity
Not Before: Jan 6 19:37:31 2026 GMT
Not After : Jan 5 19:42:31 2027 GMT
Subject: CN=9538115110FC3E0C903BC7A35F66ABA24D295407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:91:4e:61:3f:cf:ef:c3:70:b8:d4:f9:3c:
17:f8:b1:18:35:45:73:58:cb:e1:14:58:44:95:1f:
4d:11:b0:7d:ab:d2:56:02:56:c8:cf:3e:b8:28:2a:
b1:37:b7:f9:ab:a4:c9:0e:29:fc:cf:c4:08:e6:56:
0f:00:8d:e1:36:f7:40:f3:8d:4c:65:4e:97:15:88:
8d:69:2b:f4:04:5c:65:98:87:c7:88:df:a5:b1:cc:
35:7c:ac:fa:f1:5e:5c:18:78:ed:fa:38:a5:66:ac:
4d:6a:1d:76:9f:b0:e6:18:d3:a0:07:a3:25:11:f2:
84:9f:e1:49:65:21:ac:6d:45:7a:91:66:59:1a:62:
1e:40:63:de:4a:71:ad:d7:bc:ac:7e:cd:6a:4d:a6:
fc:09:93:2f:93:f2:69:a4:b3:25:11:69:27:f8:a6:
32:7b:ad:5d:fb:1a:63:f8:39:b5:a5:bb:ec:89:80:
61:51:68:3c:7e:1d:f8:43:ec:53:93:cf:d8:b0:2c:
8a:50:d8:cd:a0:c9:3e:71:47:45:94:34:76:4f:01:
77:46:41:63:9b:b8:e8:e9:84:9e:42:e5:5b:7d:b9:
89:ef:64:b5:70:03:61:01:69:72:59:3c:3b:2b:83:
46:db:48:fe:1a:9f:ba:08:c3:91:e2:f5:90:1d:1e:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:38:11:51:10:FC:3E:0C:90:3B:C7:A3:5F:66:AB:A2:4D:29:54:07
X509v3 Authority Key Identifier:
keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139352e302f32342d3234203d3e20323633373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.195.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1e:fc:09:db:73:9a:b2:59:78:eb:44:ae:d6:c2:43:33:0a:
0a:b7:ea:53:4b:76:43:26:4a:67:0d:20:45:7a:94:fb:4c:c4:
83:16:9b:1e:63:fc:a2:c4:78:12:c1:5c:b8:2a:b0:74:96:ff:
36:5f:e9:b3:6a:88:27:81:3c:db:0d:43:7f:e2:66:da:09:17:
9e:f6:ba:02:d7:ad:3d:2a:0e:0a:60:d7:2d:37:f7:95:d7:a8:
42:12:c7:04:8c:e8:a4:6c:a7:1c:1e:da:d9:61:6f:6b:60:39:
b9:f9:e0:5a:f4:4e:cd:29:f1:cd:9a:d0:69:7c:da:5d:3a:ff:
78:fa:3f:01:68:ad:fd:5d:50:b3:bb:44:79:56:58:22:d8:3c:
c7:a6:38:8b:8b:3d:65:9a:d8:a5:39:9b:3a:55:e8:e6:6b:bc:
09:20:ed:95:de:28:e3:8d:b2:41:78:ba:70:c5:41:ea:2b:cc:
13:a2:39:95:b0:e7:88:47:37:f3:e7:11:36:85:1b:ee:f8:73:
26:84:d7:64:ce:b9:9f:a7:75:81:5f:91:b2:00:25:f3:de:ef:
ff:8c:e8:98:90:df:51:bd:25:c3:73:67:56:2a:2c:62:67:65:
ce:75:c8:7a:cc:56:1b:15:57:97:4c:a7:25:ee:52:38:72:6a:
7a:24:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:21:18 2026 by rpki-client