This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3135302e35362e302f32322d3234203d3e203532323633.roa
File: 3137302e3135302e35362e302f32322d3234203d3e203532323633.roa (raw, json)
Hash identifier: TkLrwJy6zvSRcN39lPRxkkAe7Oww0L4syjqs76xeQYo=
Subject key identifier: 32:03:45:8B:7B:BA:64:8C:A3:69:5A:05:27:89:7E:14:43:EB:3E:DC
Certificate issuer: /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial: 12E00AD0C0841261D91CB438C56BF5C48EAE76AA
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3135302e35362e302f32322d3234203d3e203532323633.roa
Signing time: Tue 06 Jan 2026 19:41:08 +0000
ROA not before: Tue 06 Jan 2026 19:36:08 +0000
ROA not after: Tue 05 Jan 2027 19:41:08 +0000
asID: 52263
IP address blocks: 170.150.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 14:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e0:0a:d0:c0:84:12:61:d9:1c:b4:38:c5:6b:f5:c4:8e:ae:76:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Validity
Not Before: Jan 6 19:36:08 2026 GMT
Not After : Jan 5 19:41:08 2027 GMT
Subject: CN=3203458B7BBA648CA3695A0527897E1443EB3EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:59:24:f5:e7:06:21:a7:ed:31:99:95:24:69:
dc:81:fa:20:43:c7:64:0a:4a:ec:59:63:4e:b2:0d:
eb:a8:51:24:ed:f9:ed:04:da:45:7a:2e:e5:88:14:
00:72:42:76:ca:96:3c:f3:a6:79:c2:bf:a9:08:0d:
8d:cc:05:25:46:01:dc:4a:16:91:4f:23:61:e7:a5:
58:ce:5d:0c:37:78:53:7a:97:78:83:aa:0c:4b:1c:
ee:24:ac:a6:de:db:94:8d:28:c5:b7:5e:ce:91:91:
53:8d:10:62:59:7e:d8:c1:4c:02:38:35:6a:41:99:
c4:dd:b3:a9:72:6c:fa:32:c7:5e:65:19:4b:ab:14:
07:21:11:40:87:3f:98:0f:fa:63:87:cb:3d:7f:ed:
12:42:80:49:39:ee:1b:3e:a4:eb:ba:5a:46:54:fe:
6d:46:22:d5:8e:c1:0b:4c:83:d8:f5:d8:db:b1:47:
13:3b:72:8d:13:f4:15:dc:39:42:8f:b9:12:7f:e6:
73:95:24:93:0b:ee:f0:3e:71:0c:5d:bb:c4:b2:90:
8d:f5:cb:09:eb:1b:26:c0:4a:eb:56:1a:1c:76:cc:
4b:3a:f2:8c:24:73:08:43:e9:65:a1:d6:23:3b:21:
80:d7:00:36:ea:dd:78:8b:2a:e6:f3:98:e2:48:f3:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:03:45:8B:7B:BA:64:8C:A3:69:5A:05:27:89:7E:14:43:EB:3E:DC
X509v3 Authority Key Identifier:
keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3135302e35362e302f32322d3234203d3e203532323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.56.0/22
Signature Algorithm: sha256WithRSAEncryption
78:a8:22:22:0c:9b:8f:c6:48:78:ac:80:ff:af:2b:c9:31:3d:
1d:10:71:61:d7:a8:9d:75:9f:21:64:ac:16:bb:e2:60:27:02:
37:d4:77:f9:1c:7c:fd:16:9c:25:69:28:de:9a:05:e6:c3:fa:
47:af:23:f3:1f:d8:22:2d:cd:d4:1c:d0:24:8b:b1:6c:f7:e5:
f1:64:34:fc:2a:c0:b7:98:22:53:46:e0:b8:31:bf:2a:0f:23:
fe:13:e2:0e:e0:99:9d:6f:f8:ac:51:9f:aa:4e:7a:9b:64:7f:
0d:b3:87:ee:e5:44:b3:da:77:07:d9:24:26:1b:59:b7:ca:55:
1b:1a:a1:2b:77:29:8b:73:53:c7:c7:f2:77:f4:ae:7c:e9:34:
bc:35:36:d2:91:82:53:25:ba:59:ac:42:8f:a4:64:22:45:00:
62:4a:3c:35:a5:96:24:d3:ae:cc:76:f9:b5:98:90:11:94:6d:
34:8c:b8:d4:7d:58:08:cf:76:56:03:8f:08:94:d4:ca:de:51:
c8:bd:f1:8f:8a:52:ad:2e:4f:a2:d1:d8:44:6f:e1:4c:d0:69:
8b:48:31:0d:ff:ad:55:4c:62:2c:6f:36:ea:3d:24:37:2a:b7:
8c:63:eb:90:09:5c:8d:f6:80:51:eb:3b:ba:cf:60:24:fc:bf:
21:01:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:39 2026 by rpki-client