This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32382e302f32322d3234203d3e20323637363939.roa
File: 3137302e3235342e32382e302f32322d3234203d3e20323637363939.roa (raw, json)
Hash identifier: HJO4QQC99z7t692ngX70Go7XGLlqCOim9j0aiXC+iSQ=
Subject key identifier: F2:2B:A9:4B:57:C0:26:44:88:9D:7C:82:DB:08:54:98:1D:31:1E:73
Certificate issuer: /CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Certificate serial: 51D613AF8378908AD3E715211ABC45143133A76F
Authority key identifier: DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32382e302f32322d3234203d3e20323637363939.roa
Signing time: Tue 06 Jan 2026 20:55:44 +0000
ROA not before: Tue 06 Jan 2026 20:50:44 +0000
ROA not after: Tue 05 Jan 2027 20:55:44 +0000
asID: 267699
IP address blocks: 170.254.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 17:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d6:13:af:83:78:90:8a:d3:e7:15:21:1a:bc:45:14:31:33:a7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Validity
Not Before: Jan 6 20:50:44 2026 GMT
Not After : Jan 5 20:55:44 2027 GMT
Subject: CN=F22BA94B57C02644889D7C82DB0854981D311E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:15:53:13:8c:f9:ed:50:19:c0:a5:44:3e:
e3:3f:bc:1a:89:89:25:cd:1d:e0:3f:cf:a6:b4:97:
3e:49:89:5d:17:f8:31:95:cc:73:51:4b:02:9c:f4:
2d:03:53:31:6e:bd:47:b2:ef:ad:06:46:c7:d6:c0:
cb:13:bb:7c:ed:b1:e6:e6:44:fb:0e:2e:df:cf:b5:
98:56:2b:0c:e6:e9:39:8c:9f:72:07:66:31:8e:69:
d1:f3:ba:f5:3c:f0:48:16:d2:cc:94:4d:1c:b8:b5:
ec:22:fe:da:af:a6:36:fa:89:28:6a:7f:91:72:d8:
14:f2:78:9c:b8:e9:9b:a7:29:0d:8a:b6:7b:85:46:
1f:9d:18:20:91:78:50:23:75:3f:3e:6e:47:55:40:
de:d6:e6:32:d6:d0:7a:f8:7a:4d:77:e5:c3:95:f2:
51:81:3a:08:ec:b3:ed:87:cc:99:11:dc:89:e1:f5:
ab:43:c9:cf:8e:a1:6e:69:91:b4:4d:ca:62:33:ee:
1e:21:2a:f9:87:7b:d7:de:31:59:13:40:33:25:33:
32:85:84:c4:43:49:75:5e:85:b1:fb:f0:7e:20:e5:
fe:b2:4b:04:53:f6:fa:c8:b2:02:d6:e7:20:73:e0:
d1:a2:2d:aa:28:f2:af:1d:00:2b:26:5c:b9:f3:e0:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:A9:4B:57:C0:26:44:88:9D:7C:82:DB:08:54:98:1D:31:1E:73
X509v3 Authority Key Identifier:
keyid:DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32382e302f32322d3234203d3e20323637363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:28:01:ce:96:27:a3:32:60:04:fd:fb:e9:03:af:f9:11:e7:
20:e6:24:69:29:e1:8e:59:29:b0:4e:5a:25:7c:ff:9b:b8:9f:
b6:6f:11:da:f4:72:2b:e4:93:54:f8:f2:50:b6:87:c3:6b:7f:
a1:30:a5:0c:b7:3b:4f:df:2f:51:f8:33:66:9c:f8:23:ab:65:
5e:bb:10:6c:96:a6:de:f6:2a:8b:81:e5:56:2d:eb:22:0c:fd:
ce:29:c3:a7:b6:d6:a1:61:8b:14:22:2d:f9:ce:b0:24:d9:29:
65:80:a2:ad:fb:76:83:8a:84:06:34:18:61:bd:1b:2d:20:c5:
f6:07:af:c1:8e:81:c4:fa:86:e1:79:15:c1:70:03:f6:e8:a1:
1c:bf:24:8c:09:b0:d0:85:bf:cc:dd:a9:63:ed:91:0b:b0:a5:
3a:c0:2c:74:90:93:5c:14:64:67:00:54:0a:81:fe:98:8b:45:
01:c7:02:e3:4f:2b:bb:c8:29:f1:40:e8:8a:38:26:ab:4a:96:
3a:2b:a5:45:64:75:9b:fc:5c:75:71:ac:61:13:c4:f8:e4:b3:
af:da:a9:33:52:5a:73:21:7d:c6:3d:68:61:71:17:11:04:8e:
b2:25:fb:25:7e:55:9c:a1:f0:67:6f:49:af:dc:43:af:87:03:
a7:64:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:33:34 2026 by rpki-client