This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3136382e302f32342d3234203d3e20323032.roa
File: 3137302e3233392e3136382e302f32342d3234203d3e20323032.roa (raw, json)
Hash identifier: R2C8aoqsIttln18Z5o2asPgr0fZjglyXj0bEZy7BfN4=
Subject key identifier: EC:6C:A5:AC:F3:D2:89:88:0A:71:F9:6C:13:1A:3E:70:46:A5:14:69
Certificate issuer: /CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
Certificate serial: 1CB561F1DAB50646FB83513024B512F125EC3A77
Authority key identifier: 1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3136382e302f32342d3234203d3e20323032.roa
Signing time: Mon 10 Nov 2025 18:05:00 +0000
ROA not before: Mon 10 Nov 2025 18:00:00 +0000
ROA not after: Mon 09 Nov 2026 18:05:00 +0000
asID: 202
IP address blocks: 170.239.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl
rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:b5:61:f1:da:b5:06:46:fb:83:51:30:24:b5:12:f1:25:ec:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
Validity
Not Before: Nov 10 18:00:00 2025 GMT
Not After : Nov 9 18:05:00 2026 GMT
Subject: CN=EC6CA5ACF3D289880A71F96C131A3E7046A51469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:48:cd:dc:f1:fd:f1:b6:e8:34:04:71:67:
fe:f4:9a:b2:85:7f:b0:27:f3:32:9a:09:4a:df:1a:
63:d1:df:07:6d:a6:73:b4:57:b8:6e:71:50:58:02:
b0:eb:22:a0:e8:7b:d4:13:4e:66:1b:e7:d4:aa:14:
16:d9:28:8d:fa:35:ce:79:7e:9a:ea:16:46:bb:04:
e1:0b:77:7c:1f:f0:67:f8:73:c2:64:61:e3:7b:0a:
1f:00:f0:ef:7d:a0:ab:cf:1b:4e:1a:9b:0c:8d:b3:
ea:86:a1:94:5f:98:35:e1:57:5d:a8:da:cc:e1:7b:
8e:8b:52:c9:62:be:94:20:a9:99:f4:b5:41:48:20:
cd:ec:74:e7:ea:21:9e:93:7c:5e:ba:65:4b:1e:71:
15:88:7e:a1:5b:63:5b:32:31:da:54:8c:1b:40:50:
8e:cd:6d:6b:4c:4f:4e:60:88:e1:2f:f3:da:d6:69:
0c:ba:1b:39:95:be:1e:74:07:79:7a:e2:76:90:f3:
33:3e:5a:9d:0e:5b:68:ae:bf:95:a5:5c:65:48:66:
42:09:19:08:dd:b8:ea:6b:80:d5:60:99:e2:2a:53:
0c:16:cc:c8:4f:d3:5a:46:77:06:74:a7:c4:ae:d3:
02:39:b3:bb:bb:bb:2c:ea:93:a4:2e:92:6f:12:97:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:A5:AC:F3:D2:89:88:0A:71:F9:6C:13:1A:3E:70:46:A5:14:69
X509v3 Authority Key Identifier:
keyid:1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3136382e302f32342d3234203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.168.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2f:93:1c:11:35:96:87:35:08:c7:73:db:c6:8a:b8:bf:fb:
38:41:fb:fa:c4:9d:fc:37:da:6e:16:71:00:4e:b8:e3:b4:2c:
e3:bb:71:6e:88:44:7d:36:f2:eb:72:dc:76:f9:3f:30:1f:26:
12:d2:0e:5d:ed:a8:0a:a1:27:55:b3:bf:80:4b:e3:86:20:a9:
ab:dc:62:e5:62:c8:42:a5:ea:48:e3:52:7d:47:59:16:8a:75:
d5:67:cd:2b:84:42:4a:ef:0a:ea:a9:78:54:60:73:a3:3e:0c:
43:fe:0f:e9:87:93:a0:9a:2f:be:7e:8e:18:b9:8b:a0:6c:95:
ad:7a:50:61:93:1b:fe:78:86:d5:36:e2:fc:e8:05:18:6f:c6:
34:f5:cc:62:be:f5:d6:78:c4:f1:b6:77:96:cd:7a:17:c2:bc:
15:96:e2:20:60:55:7c:4f:49:9d:a9:e4:5c:b9:9f:51:53:df:
76:f1:80:3b:f7:a4:fe:04:ab:58:c2:d4:cf:e4:8e:2d:6c:1c:
c5:4a:c4:64:fc:f4:dc:8c:3a:0c:78:3c:89:84:2d:85:4b:56:
78:16:a3:61:fa:fe:fb:e3:e3:2c:d0:57:eb:4b:8f:3d:0e:59:
d6:01:4a:e5:a9:b7:13:f2:31:d7:73:4e:74:bc:02:2a:98:ee:
9a:48:c5:a9
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUHLVh8dq1Bkb7g1EwJLUS8SXsOncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJCN0QzMkFBMTFGRUQwREIyMTNCMkE3MjM0RDQwMUQ1
NUIwMkZERTAeFw0yNTExMTAxODAwMDBaFw0yNjExMDkxODA1MDBaMDMxMTAvBgNV
BAMTKEVDNkNBNUFDRjNEMjg5ODgwQTcxRjk2QzEzMUEzRTcwNDZBNTE0NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WEjN3PH98bboNARxZ/70mrKF
f7An8zKaCUrfGmPR3wdtpnO0V7hucVBYArDrIqDoe9QTTmYb59SqFBbZKI36Nc55
fprqFka7BOELd3wf8Gf4c8JkYeN7Ch8A8O99oKvPG04amwyNs+qGoZRfmDXhV12o
2szhe46LUslivpQgqZn0tUFIIM3sdOfqIZ6TfF66ZUsecRWIfqFbY1syMdpUjBtA
UI7NbWtMT05giOEv89rWaQy6GzmVvh50B3l64naQ8zM+Wp0OW2iuv5WlXGVIZkIJ
GQjduOprgNVgmeIqUwwWzMhP01pGdwZ0p8Su0wI5s7u7uyzqk6Qukm8Sly8dAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU7GylrPPSiYgKcflsExo+cEalFGkwHwYDVR0j
BBgwFoAUG7fTKqEf7Q2yE7KnI01AHVWwL94wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDMxM0I5QkZERjU4M0FDMUFGMDQ1RjdCQTdFNTUzRjNC
MDYzNDkzMzM1NTNDMDE3NDA2NUNGM0Y0M0ZCRDlELzAvMUJCN0QzMkFBMTFGRUQw
REIyMTNCMkE3MjM0RDQwMUQ1NUIwMkZERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQkI3RDMyQUExMUZFRDBEQjIx
M0IyQTcyMzRENDAxRDU1QjAyRkRFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAzMTNCOUJGREY1ODNBQzFBRjA0NUY3QkE3RTU1M0YzQjA2MzQ5MzMz
NTUzQzAxNzQwNjVDRjNGNDNGQkQ5RC8wLzMxMzczMDJlMzIzMzM5MmUzMTM2Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq76gwDQYJ
KoZIhvcNAQELBQADggEBAFkvkxwRNZaHNQjHc9vGiri/+zhB+/rEnfw32m4WcQBO
uOO0LOO7cW6IRH028uty3Hb5PzAfJhLSDl3tqAqhJ1Wzv4BL44YgqavcYuViyEKl
6kjjUn1HWRaKddVnzSuEQkrvCuqpeFRgc6M+DEP+D+mHk6CaL75+jhi5i6Bsla16
UGGTG/54htU24vzoBRhvxjT1zGK+9dZ4xPG2d5bNehfCvBWW4iBgVXxPSZ2p5Fy5
n1FT33bxgDv3pP4Eq1jC1M/kji1sHMVKxGT89NyMOgx4PImELYVLVngWo2H6/vvj
4yzQV+tLjz0OWdYBSuWptxPyMddzTnS8AiqY7ppIxak=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:23:24 2025 by rpki-client