This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa
File: 3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa (raw, json)
Hash identifier: eTDLpyX+a7cvK0pBw7WoQYyq+lYFRD4CvAuAD+HmUOs=
Subject key identifier: 5E:70:D3:5C:4A:74:BC:67:5B:84:82:91:E9:8B:DA:63:8B:CF:AC:05
Certificate issuer: /CN=642B1C614F26920467439813FA812417800268E7
Certificate serial: 304DE23E56DEC92BCE95F7F7FECACBCB0FBF984B
Authority key identifier: 64:2B:1C:61:4F:26:92:04:67:43:98:13:FA:81:24:17:80:02:68:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa
Signing time: Tue 06 Jan 2026 20:49:27 +0000
ROA not before: Tue 06 Jan 2026 20:44:27 +0000
ROA not after: Tue 05 Jan 2027 20:49:27 +0000
asID: 269803
IP address blocks: 170.81.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.crl
rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 01:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:4d:e2:3e:56:de:c9:2b:ce:95:f7:f7:fe:ca:cb:cb:0f:bf:98:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642B1C614F26920467439813FA812417800268E7
Validity
Not Before: Jan 6 20:44:27 2026 GMT
Not After : Jan 5 20:49:27 2027 GMT
Subject: CN=5E70D35C4A74BC675B848291E98BDA638BCFAC05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:65:4e:31:62:0d:f0:59:1a:ba:f5:2f:5b:
96:83:da:56:eb:31:2a:fb:d2:69:95:22:35:c8:fc:
ec:b1:88:b5:65:9d:cf:59:2c:6c:02:af:d7:af:8f:
87:7d:54:1d:37:52:3d:80:92:c8:c4:65:b4:6f:cb:
cd:ad:17:01:b3:75:89:9d:f3:46:4e:29:c1:28:4b:
60:67:02:ae:47:38:90:bb:bb:34:20:77:5f:4b:4e:
f9:5e:36:90:8e:a8:7e:a7:c7:2a:b1:d2:f3:27:c2:
51:3e:17:06:2a:d6:bb:6c:ad:c1:f5:26:ff:6e:ef:
a6:9c:90:0a:80:aa:eb:e9:fd:b7:40:1d:3c:e7:09:
1a:ea:99:a7:a6:df:98:05:7f:ee:d8:5d:b9:9d:8a:
10:6d:e2:3c:2b:cf:8f:06:1e:88:5b:42:d5:8e:d5:
21:b7:fa:63:75:29:66:b8:e4:cf:73:30:1a:78:8d:
c6:19:f4:08:80:13:fd:bc:a9:72:47:0f:f1:0a:62:
57:60:71:00:7a:a7:f3:e2:fb:c1:f5:9a:8d:97:d2:
5e:0e:10:c2:c5:40:9d:27:fc:97:3d:23:fe:14:be:
7f:8c:37:31:3f:09:87:3d:90:c9:7c:ab:05:1c:43:
a8:02:97:82:1a:0e:11:41:85:6f:10:61:9f:67:0c:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:D3:5C:4A:74:BC:67:5B:84:82:91:E9:8B:DA:63:8B:CF:AC:05
X509v3 Authority Key Identifier:
keyid:64:2B:1C:61:4F:26:92:04:67:43:98:13:FA:81:24:17:80:02:68:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:bc:ed:12:55:10:90:f8:f6:68:8e:f1:e2:4f:03:b1:9a:9a:
e2:a9:ec:82:9d:e8:45:60:92:ef:c7:0d:76:4d:c8:d1:1c:6d:
de:49:92:d5:c5:6a:8e:d7:52:de:2d:af:3a:7e:e1:a6:53:72:
1f:c5:a9:22:93:7b:dc:67:1b:2c:1c:a2:43:29:21:7d:fd:a8:
04:1c:01:35:b0:57:66:8c:7a:4e:8f:bc:09:49:cc:c7:87:2f:
60:ab:5e:b1:6e:5f:f9:05:31:9e:4b:8c:36:18:1e:b7:84:78:
94:e7:54:5d:52:76:fa:ef:f3:97:2c:cf:e1:fc:c5:a5:5a:41:
f8:d9:df:e8:3d:30:7c:b5:96:20:ad:f9:d9:53:25:55:69:71:
72:2e:18:fa:72:00:89:f4:75:3b:bd:e0:d4:d9:d2:fe:25:9b:
af:a8:4d:9f:6f:07:f2:62:44:35:e6:af:fa:90:0f:42:0a:4c:
09:eb:3d:65:54:50:b0:7d:db:3c:7c:9b:9e:ba:62:6d:0a:98:
86:cb:9c:5c:00:96:c9:73:0e:9c:fe:57:c6:3b:70:0c:73:af:
42:9a:2f:15:c7:78:2a:06:06:1e:0c:e4:5d:90:b6:2a:3a:f9:
ab:02:d7:27:a7:2f:75:6f:f1:8e:bd:10:00:9c:34:c1:38:26:
9f:9f:61:87
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUME3iPlbeySvOlff3/srLyw+/mEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQyQjFDNjE0RjI2OTIwNDY3NDM5ODEzRkE4MTI0MTc4
MDAyNjhFNzAeFw0yNjAxMDYyMDQ0MjdaFw0yNzAxMDUyMDQ5MjdaMDMxMTAvBgNV
BAMTKDVFNzBEMzVDNEE3NEJDNjc1Qjg0ODI5MUU5OEJEQTYzOEJDRkFDMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCue2VOMWIN8FkauvUvW5aD2lbr
MSr70mmVIjXI/OyxiLVlnc9ZLGwCr9evj4d9VB03Uj2AksjEZbRvy82tFwGzdYmd
80ZOKcEoS2BnAq5HOJC7uzQgd19LTvleNpCOqH6nxyqx0vMnwlE+FwYq1rtsrcH1
Jv9u76ackAqAquvp/bdAHTznCRrqmaem35gFf+7YXbmdihBt4jwrz48GHohbQtWO
1SG3+mN1KWa45M9zMBp4jcYZ9AiAE/28qXJHD/EKYldgcQB6p/Pi+8H1mo2X0l4O
EMLFQJ0n/Jc9I/4Uvn+MNzE/CYc9kMl8qwUcQ6gCl4IaDhFBhW8QYZ9nDKNXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXnDTXEp0vGdbhIKR6YvaY4vPrAUwHwYDVR0j
BBgwFoAUZCscYU8mkgRnQ5gT+oEkF4ACaOcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQzY1RjIyMzA1QTc3N0FBMjkwRjE1OTVDMjBFNTcwQzky
NzA1RjFDQjNCMzc1NzRDQTZEMThDNUIyNTY0MkRCLzAvNjQyQjFDNjE0RjI2OTIw
NDY3NDM5ODEzRkE4MTI0MTc4MDAyNjhFNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDJCMUM2MTRGMjY5MjA0Njc0
Mzk4MTNGQTgxMjQxNzgwMDI2OEU3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREM2NUYyMjMwNUE3NzdBQTI5MEYxNTk1QzIwRTU3MEM5MjcwNUYxQ0Iz
QjM3NTc0Q0E2RDE4QzVCMjU2NDJEQi8wLzMxMzczMDJlMzgzMTJlMzIzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlHw
MA0GCSqGSIb3DQEBCwUAA4IBAQBMvO0SVRCQ+PZojvHiTwOxmpriqeyCnehFYJLv
xw12TcjRHG3eSZLVxWqO11LeLa86fuGmU3Ifxakik3vcZxssHKJDKSF9/agEHAE1
sFdmjHpOj7wJSczHhy9gq16xbl/5BTGeS4w2GB63hHiU51RdUnb67/OXLM/h/MWl
WkH42d/oPTB8tZYgrfnZUyVVaXFyLhj6cgCJ9HU7veDU2dL+JZuvqE2fbwfyYkQ1
5q/6kA9CCkwJ6z1lVFCwfds8fJueumJtCpiGy5xcAJbJcw6c/lfGO3AMc69Cmi8V
x3gqBgYeDORdkLYqOvmrAtcnpy91b/GOvRAAnDTBOCafn2GH
-----END CERTIFICATE-----
Generated at Thu Jan 8 17:34:51 2026 by rpki-client