This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137362e302f32302d3234203d3e203137303739.roa
File: 3136382e3234332e3137362e302f32302d3234203d3e203137303739.roa (raw, json)
Hash identifier: JQOUWyIRxmvKVmjt/qyM8x69GTo+HdGSRa0/q1zVqRQ=
Subject key identifier: 28:80:25:CD:AC:1C:D9:59:7F:4C:5D:10:95:6A:5D:3D:B4:BA:25:3C
Certificate issuer: /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial: 271DCDB9EF543DEA90CD792B18FE6139256637A8
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137362e302f32302d3234203d3e203137303739.roa
Signing time: Tue 06 Jan 2026 19:16:27 +0000
ROA not before: Tue 06 Jan 2026 19:11:27 +0000
ROA not after: Tue 05 Jan 2027 19:16:27 +0000
asID: 17079
IP address blocks: 168.243.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:1d:cd:b9:ef:54:3d:ea:90:cd:79:2b:18:fe:61:39:25:66:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Validity
Not Before: Jan 6 19:11:27 2026 GMT
Not After : Jan 5 19:16:27 2027 GMT
Subject: CN=288025CDAC1CD9597F4C5D10956A5D3DB4BA253C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:79:37:24:56:cb:d0:32:f6:70:03:05:11:
9b:06:5b:15:98:ac:e1:a7:6a:b6:62:62:d0:b1:7f:
12:0b:8e:c5:bb:aa:b3:d7:63:61:2e:88:50:b3:66:
b9:3d:15:f9:36:1d:8a:df:b3:43:06:8f:c7:4d:6b:
75:df:f6:44:32:3e:42:dd:92:8c:f7:64:cc:6a:fa:
e3:71:32:2e:40:7a:c9:8a:b5:de:26:35:6f:97:8a:
1d:e8:ee:bb:e0:0b:16:3a:fa:80:3c:32:7a:6d:25:
72:6a:60:ab:c6:7f:64:27:cb:7e:3e:99:88:ec:1b:
fb:7d:b0:07:d8:92:1b:39:ed:97:65:76:94:60:87:
b2:87:18:fd:b0:21:27:25:b8:6e:46:ae:ac:5e:8b:
0b:97:2a:d1:46:e1:8e:b8:70:11:a9:72:d4:ca:dc:
6a:48:79:11:b1:8f:0a:6b:0d:33:31:cf:90:5e:f6:
70:2f:0d:f1:1a:40:a0:f9:a1:0c:d8:b0:5f:a0:03:
be:f5:16:25:94:3d:2c:e1:74:64:62:50:36:5e:22:
57:95:2b:01:06:b4:fe:3f:13:ed:af:8a:03:ec:db:
a1:c8:82:ec:3e:30:2a:43:dc:80:e7:e7:b8:90:d1:
b6:f6:c1:4c:e1:1c:6e:22:84:10:16:2b:41:7e:5d:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:25:CD:AC:1C:D9:59:7F:4C:5D:10:95:6A:5D:3D:B4:BA:25:3C
X509v3 Authority Key Identifier:
keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137362e302f32302d3234203d3e203137303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.176.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:72:e3:49:dd:77:1a:d8:27:93:3b:f9:0b:76:1c:a4:99:b2:
c9:ae:5f:dd:53:43:71:f4:4f:94:81:fa:21:54:55:d3:92:ae:
0b:69:de:0d:3f:f9:85:a1:c0:90:3d:b2:bb:4a:58:6a:11:49:
91:96:a8:f8:c8:8d:bc:c0:e9:b4:ac:b9:45:38:5a:f1:c0:a2:
35:b4:46:93:5a:2e:bf:a7:6a:fc:08:fa:b6:4d:3b:be:52:4a:
83:02:4c:15:11:ee:8f:5d:7e:d0:f5:12:0a:02:87:aa:b3:2e:
eb:43:ec:b2:88:17:15:05:d3:16:d2:d4:8d:51:0a:fd:25:05:
c9:66:bf:39:03:6f:10:c7:e7:52:a3:a4:64:b6:7b:d0:a6:d6:
f3:eb:bc:9c:39:5d:38:76:54:b6:8e:11:41:1e:ee:e2:5f:89:
c4:71:cc:d0:9c:3d:b6:d4:68:20:f5:29:e7:b3:8c:20:eb:d4:
99:59:95:fa:40:3b:2d:e5:e5:c9:05:1f:7e:af:b3:6e:dd:c4:
1b:f2:25:56:f0:80:02:64:da:9a:75:f5:07:f8:8e:ce:b9:fe:
53:72:7f:93:c7:e5:70:a3:90:32:26:7e:26:83:ca:c8:51:40:
0a:1a:87:ef:03:66:52:4c:23:19:13:15:a7:12:29:06:7e:0e:
e8:7e:50:b8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJx3Nue9UPeqQzXkrGP5hOSVmN6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNjAxMDYxOTExMjdaFw0yNzAxMDUxOTE2MjdaMDMxMTAvBgNV
BAMTKDI4ODAyNUNEQUMxQ0Q5NTk3RjRDNUQxMDk1NkE1RDNEQjRCQTI1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhnk3JFbL0DL2cAMFEZsGWxWY
rOGnarZiYtCxfxILjsW7qrPXY2EuiFCzZrk9Ffk2HYrfs0MGj8dNa3Xf9kQyPkLd
koz3ZMxq+uNxMi5AesmKtd4mNW+Xih3o7rvgCxY6+oA8MnptJXJqYKvGf2Qny34+
mYjsG/t9sAfYkhs57ZdldpRgh7KHGP2wIScluG5GrqxeiwuXKtFG4Y64cBGpctTK
3GpIeRGxjwprDTMxz5Be9nAvDfEaQKD5oQzYsF+gA771FiWUPSzhdGRiUDZeIleV
KwEGtP4/E+2vigPs26HIguw+MCpD3IDn57iQ0bb2wUzhHG4ihBAWK0F+Xa6tAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKIAlzawc2Vl/TF0QlWpdPbS6JTwwHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzMTM3MzYy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM3MzAzNzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqPOw
MA0GCSqGSIb3DQEBCwUAA4IBAQBNcuNJ3Xca2CeTO/kLdhykmbLJrl/dU0Nx9E+U
gfohVFXTkq4Lad4NP/mFocCQPbK7SlhqEUmRlqj4yI28wOm0rLlFOFrxwKI1tEaT
Wi6/p2r8CPq2TTu+UkqDAkwVEe6PXX7Q9RIKAoeqsy7rQ+yyiBcVBdMW0tSNUQr9
JQXJZr85A28Qx+dSo6RktnvQptbz67ycOV04dlS2jhFBHu7iX4nEcczQnD221Ggg
9Snns4wg69SZWZX6QDst5eXJBR9+r7Nu3cQb8iVW8IACZNqadfUH+I7Ouf5Tcn+T
x+Vwo5AyJn4mg8rIUUAKGofvA2ZSTCMZExWnEikGfg7oflC4
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:44:41 2026 by rpki-client