This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e37302e302f32332d3234203d3e203532333431.roa
File: 3138362e3138392e37302e302f32332d3234203d3e203532333431.roa (raw, json)
Hash identifier: FsM9Xry7m7Iir21ckceA0E3unpLZtlyhog8HTq86pps=
Subject key identifier: 8B:BA:71:64:BA:68:59:3A:8A:0A:3B:3E:34:19:BB:C6:2E:4B:67:D1
Certificate issuer: /CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
Certificate serial: 6A8754BD0061377B7FC65BFE9A38F383DCFA7AA2
Authority key identifier: AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e37302e302f32332d3234203d3e203532333431.roa
Signing time: Tue 06 Jan 2026 19:36:55 +0000
ROA not before: Tue 06 Jan 2026 19:31:55 +0000
ROA not after: Tue 05 Jan 2027 19:36:55 +0000
asID: 52341
IP address blocks: 186.189.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl
rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:87:54:bd:00:61:37:7b:7f:c6:5b:fe:9a:38:f3:83:dc:fa:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
Validity
Not Before: Jan 6 19:31:55 2026 GMT
Not After : Jan 5 19:36:55 2027 GMT
Subject: CN=8BBA7164BA68593A8A0A3B3E3419BBC62E4B67D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:b3:fc:92:4c:38:b2:54:7f:92:ea:51:b5:
ab:2d:c5:87:5c:c0:87:cc:3e:a5:6a:4b:ff:0b:91:
f2:1a:43:48:df:be:9b:00:81:ad:f1:c6:c1:05:24:
5e:fa:13:6e:00:9e:26:d7:6f:f1:0a:10:93:6d:11:
6a:f2:f5:39:30:4b:f5:aa:68:7a:de:a7:c5:74:02:
02:cc:87:d9:46:14:53:8e:0e:b3:a4:93:36:97:6e:
a1:b9:71:1e:19:bc:9f:2e:2b:f6:e4:98:d8:b6:d7:
5e:45:8f:b1:e5:63:2b:ad:63:19:3b:12:50:50:2f:
74:bf:2f:88:57:85:50:9f:86:75:b0:44:d6:cb:45:
6a:f2:69:71:e0:d1:e1:a4:e2:da:7e:7f:33:94:66:
c7:8f:d4:99:e4:72:ca:d9:02:e4:e4:ea:c8:4e:2a:
02:af:7a:05:44:3a:b2:31:84:b3:1d:ec:f2:a0:1c:
eb:60:68:60:25:18:2f:b5:87:d4:a3:49:7a:c8:9a:
63:1b:a6:a7:18:60:8b:e6:05:67:eb:ab:98:0c:ed:
54:b5:e5:9e:ec:77:40:8b:35:5d:1f:81:36:66:53:
5c:07:8c:42:9a:c9:7f:8c:d9:ec:ca:b9:b5:06:a3:
e8:b6:8d:67:69:f0:e9:61:d1:2e:fa:89:37:28:85:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BA:71:64:BA:68:59:3A:8A:0A:3B:3E:34:19:BB:C6:2E:4B:67:D1
X509v3 Authority Key Identifier:
keyid:AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e37302e302f32332d3234203d3e203532333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.189.70.0/23
Signature Algorithm: sha256WithRSAEncryption
60:10:13:e3:1a:39:91:5d:25:16:e1:83:d0:08:65:84:3d:a1:
6f:7d:e6:09:fb:77:66:a9:08:f2:6a:3c:09:42:9f:9c:a5:fc:
bb:f7:19:3e:62:c9:fe:6b:f1:27:28:74:6c:57:38:bc:3b:95:
60:5f:ae:5b:3c:b7:be:4d:f3:a3:0f:87:6b:a1:7f:25:15:f6:
1c:06:bf:bb:f5:00:f1:47:5a:23:41:2c:ee:c5:79:d0:ba:ca:
1b:c2:4c:93:8a:fc:ae:b6:73:bc:b2:c1:16:be:b8:ac:1e:eb:
61:c6:c6:97:2f:64:6f:89:66:53:17:00:f7:26:87:d9:4e:09:
07:04:cc:03:2f:fb:28:7c:e9:83:f4:82:0a:8b:66:c2:e0:18:
cb:42:38:07:d8:13:43:4d:e6:06:4b:10:47:16:0e:2b:67:85:
28:4f:f8:a3:73:f5:a7:f9:ea:0e:29:1a:1e:59:06:b8:99:cf:
69:4e:2b:1b:bd:2a:73:e6:23:44:f9:cd:4f:d6:d4:3d:29:45:
fb:24:a9:80:50:24:bc:ea:18:a6:47:1e:d4:ea:d8:cc:56:af:
44:32:aa:bd:ef:b7:61:12:39:8a:4f:0c:3d:95:4d:5a:c6:14:
8b:d4:e7:fb:f8:d7:e8:27:a8:99:5f:78:6d:9d:b8:52:17:4d:
df:8a:ac:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:19 2026 by rpki-client