This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/3136342e3136332e3138382e302f32322d3234203d3e203238333938.roa
File: 3136342e3136332e3138382e302f32322d3234203d3e203238333938.roa (raw, json)
Hash identifier: nVSXyjCaaMU0eAOGhtn+93oj84kr0zNijpWy3UTDtKQ=
Subject key identifier: F6:D5:F8:3B:6B:84:43:5A:A1:73:C6:BD:83:C3:CF:8C:6D:3A:F2:6C
Certificate issuer: /CN=2944F2D96674AA0C160B60053EA3A61E1232E82C
Certificate serial: 162FD6841BAA2F4901E467463F77B21B98FA8C71
Authority key identifier: 29:44:F2:D9:66:74:AA:0C:16:0B:60:05:3E:A3:A6:1E:12:32:E8:2C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/3136342e3136332e3138382e302f32322d3234203d3e203238333938.roa
Signing time: Tue 06 Jan 2026 19:00:29 +0000
ROA not before: Tue 06 Jan 2026 18:55:29 +0000
ROA not after: Tue 05 Jan 2027 19:00:29 +0000
asID: 28398
IP address blocks: 164.163.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.crl
rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2f:d6:84:1b:aa:2f:49:01:e4:67:46:3f:77:b2:1b:98:fa:8c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2944F2D96674AA0C160B60053EA3A61E1232E82C
Validity
Not Before: Jan 6 18:55:29 2026 GMT
Not After : Jan 5 19:00:29 2027 GMT
Subject: CN=F6D5F83B6B84435AA173C6BD83C3CF8C6D3AF26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:ff:24:c4:6a:2e:a7:69:93:64:ff:bc:df:
7d:30:0a:c8:b7:61:16:e7:5e:31:ac:a8:64:e0:eb:
20:4f:ee:0f:3e:90:e1:2a:08:79:51:a2:3e:fd:6a:
ba:8b:b6:3b:61:08:14:7a:78:7c:65:95:58:d0:6c:
b2:57:b5:52:81:c9:ee:ae:ae:2a:b3:9f:4b:8f:01:
37:f0:b0:1d:08:32:88:d8:51:d8:2e:4f:93:7f:8e:
d6:43:09:f5:86:3c:80:e2:8e:4e:3b:b9:ec:4e:24:
e4:c8:89:49:b9:c9:08:87:e2:55:6f:a1:5c:bd:3d:
25:a4:3b:3a:fe:f2:08:0b:6d:d8:f3:77:db:b6:c0:
c6:0e:12:aa:ce:7c:27:64:4d:42:c7:6c:cd:da:ef:
15:c4:12:6e:e4:61:56:fa:52:c6:c8:e9:6b:f6:e5:
d0:d0:fe:ac:80:e0:7c:12:f8:00:fc:79:c0:88:ae:
5c:d9:92:7e:c3:8d:5a:5a:32:e4:6d:c5:92:7d:12:
20:70:38:15:4f:28:9a:10:60:ad:a0:43:6c:c9:d7:
1f:8e:45:a1:46:70:a0:0b:2f:6b:18:44:e9:2c:06:
b8:90:bf:d7:9a:46:9a:f0:c7:1c:92:4e:03:bb:36:
f2:24:4e:2e:b7:fc:0b:52:07:74:a9:db:6e:ac:38:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:F8:3B:6B:84:43:5A:A1:73:C6:BD:83:C3:CF:8C:6D:3A:F2:6C
X509v3 Authority Key Identifier:
keyid:29:44:F2:D9:66:74:AA:0C:16:0B:60:05:3E:A3:A6:1E:12:32:E8:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/3136342e3136332e3138382e302f32322d3234203d3e203238333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.188.0/22
Signature Algorithm: sha256WithRSAEncryption
03:61:01:eb:90:9c:8f:08:30:ac:46:d6:9d:2f:09:08:14:f6:
0a:6e:19:93:22:8a:13:0d:2d:bb:ad:a9:f0:2b:4e:1c:cf:87:
a0:de:bd:56:6b:bb:48:4e:8c:34:17:71:8c:9a:4a:26:b3:75:
85:8a:39:77:31:f4:2e:5c:a5:33:7e:73:81:69:06:a0:12:88:
27:34:53:0d:b4:a6:bb:3b:16:13:57:8c:ad:ed:ca:76:20:5a:
75:50:f4:40:bf:3d:e2:65:e7:ea:90:56:ba:e2:c3:1f:71:b9:
34:4b:60:ed:d2:0c:1b:26:a6:1e:07:bb:29:0a:2e:bb:2d:37:
0f:c3:e0:46:de:f6:18:75:c7:9e:81:f6:b5:d4:fe:8c:03:34:
69:45:0a:e3:4b:45:ab:89:44:43:3a:e3:0a:04:ce:6e:af:27:
fa:3b:ec:42:f9:64:d5:06:ab:3a:a5:60:98:fb:ca:34:c0:e1:
09:e1:1d:a8:85:29:19:3f:1a:59:94:3a:19:2e:c9:21:96:1c:
1d:89:43:47:ca:81:92:94:b9:2c:0b:a2:24:64:f8:28:d5:0b:
f9:ff:31:83:eb:d1:9b:2d:d3:88:dc:80:1f:8f:c7:ec:27:02:
1a:ae:aa:cb:b2:2f:f9:da:11:15:ef:99:bc:dd:c8:d4:8e:66:
92:c5:ec:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 12:36:22 2026 by rpki-client