This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa
File: 3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa (raw, json)
Hash identifier: dVK826ejZtdxuvEnPG5BnAohZkvC8V0YGNh6/bSDwjI=
Subject key identifier: 13:43:87:8E:F4:5D:9E:15:A2:71:77:13:23:81:2A:E2:92:78:29:7F
Certificate issuer: /CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Certificate serial: 735217E4992F304C8F7EF1A4F27D7C9953D296C3
Authority key identifier: 15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa
Signing time: Tue 06 Jan 2026 19:22:46 +0000
ROA not before: Tue 06 Jan 2026 19:17:46 +0000
ROA not after: Tue 05 Jan 2027 19:22:46 +0000
asID: 264701
IP address blocks: 168.232.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 16:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:52:17:e4:99:2f:30:4c:8f:7e:f1:a4:f2:7d:7c:99:53:d2:96:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Validity
Not Before: Jan 6 19:17:46 2026 GMT
Not After : Jan 5 19:22:46 2027 GMT
Subject: CN=1343878EF45D9E15A271771323812AE29278297F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:6a:9c:2c:f3:59:ee:a2:8f:09:06:72:2d:
c5:d3:f8:6c:7c:86:07:52:c7:da:eb:3a:32:49:5c:
cd:ff:0e:fe:99:b1:69:14:d4:58:1a:24:f8:96:64:
1b:4a:e8:ee:cb:1d:9c:a6:e0:72:d5:26:33:37:52:
4e:d3:95:d9:ff:5e:a3:26:68:11:92:59:6b:f8:08:
3e:04:06:bd:ae:b5:af:3a:e2:e9:e8:d5:27:63:71:
2a:c4:98:3f:f5:1e:2d:5b:1e:7d:d5:2e:0a:cb:a1:
04:f9:ec:94:76:c2:79:a6:c9:77:16:94:fb:85:fe:
2a:42:cb:f1:8c:3a:46:06:ec:a1:e1:56:3f:d9:29:
ef:09:c4:6a:c6:62:e1:d1:a8:38:53:7d:ee:d3:43:
98:86:c3:58:d1:9a:c5:a0:1e:a3:8f:be:27:f0:ce:
b6:4d:85:86:c7:2c:5d:48:a7:6f:0b:8f:ca:32:bc:
8f:94:10:9e:d7:a8:ff:3c:35:80:4f:bf:67:99:d0:
8a:d7:db:7f:64:19:9f:5f:56:70:65:a7:32:c6:c7:
3f:9e:7e:49:9c:11:9d:ea:36:83:66:5a:32:74:fb:
79:2e:f4:38:7f:1e:af:db:6c:70:2b:ed:cf:a8:70:
2e:42:0e:0e:0d:b0:63:60:04:61:33:91:fc:3a:90:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:43:87:8E:F4:5D:9E:15:A2:71:77:13:23:81:2A:E2:92:78:29:7F
X509v3 Authority Key Identifier:
keyid:15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.248.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:3e:b0:85:42:36:0d:d0:60:ef:d3:f3:b5:b5:32:14:68:d6:
ea:d5:10:b5:90:4d:c4:58:b9:77:07:48:1e:6c:b8:1d:98:f7:
d7:a8:35:22:0f:61:b5:71:d8:8e:05:c4:b9:b8:ff:41:e4:0a:
7d:c1:88:f7:15:1f:8b:99:87:b4:74:17:2b:7a:33:38:ca:ca:
f8:6b:0b:d2:f8:7b:ee:e6:68:6b:00:57:62:1d:4f:15:df:7e:
f5:dd:7b:e6:3d:6b:d6:db:0c:ee:a2:49:87:9e:5a:91:49:4d:
d2:1a:8e:35:df:9b:c9:78:b1:ec:1e:b4:8a:ff:f8:ad:f7:8b:
0e:72:9e:2b:7b:c3:4b:7d:4e:14:3d:19:ad:40:cd:00:51:d2:
fd:da:29:24:94:c6:90:00:3f:cb:2f:7d:88:10:02:05:6b:cd:
a3:35:ce:e4:93:23:0a:d2:76:7a:ce:c2:55:3a:63:65:47:97:
37:ec:3f:ac:ad:84:6c:8b:79:2d:62:11:28:d5:ab:0a:8e:95:
a0:1f:9f:e5:0e:e7:d2:38:c8:f8:bc:75:18:6f:d5:2f:e7:3b:
4d:a0:aa:b9:c9:11:24:79:e7:62:3b:5c:c0:07:2f:03:01:e9:
1e:cd:90:e6:ac:01:5b:d6:2f:62:0c:be:47:70:fd:cf:53:4d:
c0:b5:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:13:19 2026 by rpki-client