This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/32342e3135322e34302e302f32322d3234203d3e20323639393736.roa
File: 32342e3135322e34302e302f32322d3234203d3e20323639393736.roa (raw, json)
Hash identifier: lgtt2HWmPq7ECMsSiLj7kCx8cE1Jmjprt1Wdq0iA5Eo=
Subject key identifier: 66:F3:5C:1F:59:8F:58:65:13:0F:0F:EC:08:64:47:D1:17:E9:E5:2E
Certificate issuer: /CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
Certificate serial: 6B3755B4CDA4604BE0835EAAA49DAF73BB27B907
Authority key identifier: 8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/32342e3135322e34302e302f32322d3234203d3e20323639393736.roa
Signing time: Tue 06 Jan 2026 19:34:31 +0000
ROA not before: Tue 06 Jan 2026 19:29:31 +0000
ROA not after: Tue 05 Jan 2027 19:34:31 +0000
asID: 269976
IP address blocks: 24.152.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl
rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 10:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:37:55:b4:cd:a4:60:4b:e0:83:5e:aa:a4:9d:af:73:bb:27:b9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
Validity
Not Before: Jan 6 19:29:31 2026 GMT
Not After : Jan 5 19:34:31 2027 GMT
Subject: CN=66F35C1F598F5865130F0FEC086447D117E9E52E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:23:00:15:01:4a:b9:dd:e6:77:ba:44:cc:
64:9f:56:68:0d:ce:bf:aa:bd:fc:00:5f:65:1b:4a:
c6:e5:49:68:13:af:48:d5:a9:e3:99:c6:47:f9:46:
d5:1a:08:2e:22:c5:3f:d6:87:ce:ea:68:ea:76:32:
f3:89:c5:1c:71:f6:0a:ac:a1:30:08:44:a6:15:1e:
da:1f:87:56:c8:29:3b:f2:3b:e1:76:c5:df:41:b9:
47:fb:a9:01:52:d3:8f:7e:96:ac:a0:6a:5e:8c:fc:
f8:54:41:3e:9e:74:13:53:d8:bc:81:a3:fd:b0:af:
99:a3:72:80:a8:82:93:e2:22:57:ac:5b:cb:9a:c5:
39:1f:89:c0:65:db:9e:e6:aa:2b:44:f6:10:08:c1:
53:d2:1e:59:fe:e5:47:80:8b:e4:ef:75:fc:bb:b4:
01:4a:bf:04:3b:73:52:ef:93:d7:ce:9b:43:0b:7e:
72:75:d7:26:70:4f:00:37:cc:3d:31:d0:82:50:ff:
96:aa:61:30:dc:aa:0d:f2:8f:b2:81:61:d0:7c:87:
f3:3a:dd:e5:3b:a3:ca:98:71:94:dc:76:d1:ff:36:
a0:26:a4:a8:6f:b2:1b:8d:51:9d:bd:db:b6:93:aa:
49:b7:53:25:90:9c:0f:74:9b:4a:07:83:57:0a:3d:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F3:5C:1F:59:8F:58:65:13:0F:0F:EC:08:64:47:D1:17:E9:E5:2E
X509v3 Authority Key Identifier:
keyid:8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/32342e3135322e34302e302f32322d3234203d3e20323639393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:93:9a:39:89:86:7e:51:19:d0:1c:49:37:2b:ad:c1:2c:c7:
0a:73:21:0f:c1:38:6b:af:cd:1f:4a:85:07:24:28:6a:f3:d6:
58:ba:a4:db:29:f3:c5:59:a7:b5:80:6c:9f:8c:14:45:3a:a8:
e1:72:0e:ed:e9:f1:3c:ce:4b:7e:bb:4a:f3:2a:32:46:5a:2c:
ec:b5:50:97:fe:c9:bf:34:95:66:ae:aa:d7:65:0a:c5:29:68:
7c:05:b1:67:61:c3:63:e6:dc:f3:c4:f3:2a:b4:ca:e0:a0:25:
5a:25:a2:d3:f5:3a:83:f2:fa:21:03:f8:ed:3a:79:e3:da:9d:
4e:e6:e7:a8:36:b8:c9:81:e7:a8:56:d6:07:33:eb:af:fb:8a:
c1:ec:0d:79:58:59:2d:47:55:c0:36:b5:04:b7:76:1e:7d:c7:
ba:28:c2:bc:ae:76:ac:b1:75:fd:42:80:12:fa:6f:2c:b9:84:
eb:dd:ce:f0:f1:dd:b8:b1:45:8d:7b:73:db:1c:43:cf:29:0b:
e6:13:65:13:b4:ff:5b:6f:d1:1a:c5:ac:0b:31:f9:12:aa:b2:
91:1b:c6:e3:de:28:15:ea:78:c2:d6:04:01:4d:0b:27:bd:9e:
11:59:77:0a:d6:6c:3e:28:66:99:61:c3:74:99:b2:39:70:06:
c8:51:b6:37
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUazdVtM2kYEvgg16qpJ2vc7snuQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM3MERDQ0YyNzVCMTQ3MTdGNkExMjQxNEYxRUUxM0RB
RkNFNEU3MjAeFw0yNjAxMDYxOTI5MzFaFw0yNzAxMDUxOTM0MzFaMDMxMTAvBgNV
BAMTKDY2RjM1QzFGNTk4RjU4NjUxMzBGMEZFQzA4NjQ0N0QxMTdFOUU1MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNTyMAFQFKud3md7pEzGSfVmgN
zr+qvfwAX2UbSsblSWgTr0jVqeOZxkf5RtUaCC4ixT/Wh87qaOp2MvOJxRxx9gqs
oTAIRKYVHtofh1bIKTvyO+F2xd9BuUf7qQFS049+lqygal6M/PhUQT6edBNT2LyB
o/2wr5mjcoCogpPiIlesW8uaxTkficBl257mqitE9hAIwVPSHln+5UeAi+Tvdfy7
tAFKvwQ7c1Lvk9fOm0MLfnJ11yZwTwA3zD0x0IJQ/5aqYTDcqg3yj7KBYdB8h/M6
3eU7o8qYcZTcdtH/NqAmpKhvshuNUZ2927aTqkm3UyWQnA90m0oHg1cKPQghAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUZvNcH1mPWGUTDw/sCGRH0Rfp5S4wHwYDVR0j
BBgwFoAUjHDczydbFHF/ahJBTx7hPa/OTnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQzBEMjQwQkFGMUQ5QkJBQTZFMjQxMzI2NDdFNTM4RTAx
MDdGOEYxNDM2MEFEMTEyNzM4RkU3OUMwOTAwMTEwLzAvOEM3MERDQ0YyNzVCMTQ3
MTdGNkExMjQxNEYxRUUxM0RBRkNFNEU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QzcwRENDRjI3NUIxNDcxN0Y2
QTEyNDE0RjFFRTEzREFGQ0U0RTcyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREMwRDI0MEJBRjFEOUJCQUE2RTI0MTMyNjQ3RTUzOEUwMTA3RjhGMTQz
NjBBRDExMjczOEZFNzlDMDkwMDExMC8wLzMyMzQyZTMxMzUzMjJlMzQzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAhiYKDAN
BgkqhkiG9w0BAQsFAAOCAQEAO5OaOYmGflEZ0BxJNyutwSzHCnMhD8E4a6/NH0qF
ByQoavPWWLqk2ynzxVmntYBsn4wURTqo4XIO7enxPM5LfrtK8yoyRlos7LVQl/7J
vzSVZq6q12UKxSlofAWxZ2HDY+bc88TzKrTK4KAlWiWi0/U6g/L6IQP47Tp549qd
TubnqDa4yYHnqFbWBzPrr/uKwewNeVhZLUdVwDa1BLd2Hn3HuijCvK52rLF1/UKA
EvpvLLmE693O8PHduLFFjXtz2xxDzykL5hNlE7T/W2/RGsWsCzH5EqqykRvG494o
Fep4wtYEAU0LJ72eEVl3CtZsPihmmWHDdJmyOXAGyFG2Nw==
-----END CERTIFICATE-----
Generated at Tue Jan 13 09:27:08 2026 by rpki-client