This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa
File: 3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier: 67Uzt+lTxD5vbInsb/O3NZUUyrRHy7eeNo9v6DYQ350=
Subject key identifier: 7F:61:85:B3:27:DA:F0:38:08:21:ED:FE:88:EF:87:49:11:F9:0C:E1
Certificate issuer: /CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Certificate serial: 354406833B8D91F61CF04E5A6324FB882FD55EBF
Authority key identifier: D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa
Signing time: Tue 06 Jan 2026 20:51:42 +0000
ROA not before: Tue 06 Jan 2026 20:46:42 +0000
ROA not after: Tue 05 Jan 2027 20:51:42 +0000
asID: 262253
IP address blocks: 167.250.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 16:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:44:06:83:3b:8d:91:f6:1c:f0:4e:5a:63:24:fb:88:2f:d5:5e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Validity
Not Before: Jan 6 20:46:42 2026 GMT
Not After : Jan 5 20:51:42 2027 GMT
Subject: CN=7F6185B327DAF0380821EDFE88EF874911F90CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:65:42:c9:d9:97:e6:2b:0d:7b:7a:38:7e:
e5:f5:b9:7a:14:dd:47:55:c6:77:c0:5c:1f:61:39:
a2:89:d8:6b:10:bd:88:a0:86:aa:5f:68:1d:51:f2:
89:5c:76:b5:6d:c2:8b:b5:3c:8c:a0:9e:38:02:fa:
d2:02:ce:ce:13:ae:c6:ab:f2:80:b6:c9:7d:65:50:
4b:97:c4:79:84:f4:2b:20:da:30:7f:27:38:d0:b2:
1e:75:a9:22:9b:25:7c:2c:76:02:cd:5f:67:10:11:
0f:da:e5:e5:27:fe:ca:02:b0:25:d0:33:ef:17:af:
22:da:d5:bc:47:c3:c8:15:b9:ba:88:b5:fb:31:16:
ce:5a:19:6b:c9:04:1a:56:14:e6:e0:fb:fe:f2:1f:
82:f7:7e:70:28:ab:63:08:a2:be:a1:da:06:0d:57:
e7:8b:c3:e5:8c:d7:5e:ec:54:25:8d:71:14:a2:ac:
e3:f8:87:7f:0a:a8:15:40:88:60:f2:82:ee:87:46:
50:2a:5f:ea:9d:44:49:f9:fc:ff:1e:4e:f2:9f:f5:
21:a9:0d:9d:9f:bd:e1:3e:51:b9:80:3c:4b:31:62:
1a:18:c8:be:83:b2:70:b2:e9:c4:69:3c:55:6b:17:
3a:81:f9:87:40:ec:59:3a:1c:14:0f:5b:59:c0:06:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:61:85:B3:27:DA:F0:38:08:21:ED:FE:88:EF:87:49:11:F9:0C:E1
X509v3 Authority Key Identifier:
keyid:D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.204.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ab:d2:82:09:2d:47:6d:75:1d:eb:cf:fd:40:89:bf:b0:f1:
3a:9a:d3:59:c1:f4:b0:37:e6:0f:bd:50:c1:68:2a:64:00:ca:
df:14:33:44:02:2a:2f:10:9c:a6:80:43:47:6a:9a:40:0e:56:
32:d5:fc:e1:03:a8:45:cd:2c:1e:cc:49:3e:89:8d:ed:dc:9f:
47:1a:48:ef:47:f2:92:25:23:0a:78:4d:1e:3e:06:7c:3b:53:
7c:1e:73:f4:00:b1:8a:07:9c:19:a8:ec:88:1c:b4:f8:a9:36:
46:db:31:bd:d0:5a:96:70:38:28:78:bd:b3:10:3b:77:27:ce:
fd:89:1d:15:d6:2d:b9:2c:58:df:fb:15:a7:a7:cc:00:3a:79:
df:ec:05:2a:97:0a:e0:4b:89:ec:2d:f7:67:04:43:64:91:1f:
b1:9a:23:d1:a6:cb:37:6b:d3:03:69:81:19:13:d3:76:ee:c2:
39:f3:83:78:70:06:e3:5f:57:0a:88:91:e3:63:9d:67:bf:4e:
c6:06:da:db:15:6e:a6:17:5c:6c:86:eb:4d:ab:f2:8f:bf:b9:
45:09:2e:d7:51:76:40:16:48:87:a7:2e:5a:05:72:39:21:91:
35:bb:1d:68:09:5a:52:df:e2:68:00:a5:95:ef:0b:ae:7b:2e:
5e:ea:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:05 2026 by rpki-client