This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa
File: 3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa (raw, json)
Hash identifier: BgzWGi1u7XU6EwxRXpJDFX+7GwVX96ehd91NR27id5w=
Subject key identifier: B5:77:3F:CD:A6:2C:FC:78:7A:4F:85:49:92:CF:19:0A:93:3D:8E:3D
Certificate issuer: /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial: 278C3C8FD62B12B69219B9D3C8D6DCD0DE4FDD1F
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa
Signing time: Tue 06 Jan 2026 19:00:50 +0000
ROA not before: Tue 06 Jan 2026 18:55:50 +0000
ROA not after: Tue 05 Jan 2027 19:00:50 +0000
asID: 264776
IP address blocks: 168.197.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8c:3c:8f:d6:2b:12:b6:92:19:b9:d3:c8:d6:dc:d0:de:4f:dd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
Validity
Not Before: Jan 6 18:55:50 2026 GMT
Not After : Jan 5 19:00:50 2027 GMT
Subject: CN=B5773FCDA62CFC787A4F854992CF190A933D8E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:da:4f:ce:51:e8:80:88:be:f1:ab:ea:0e:
35:e1:35:cd:a5:44:d4:24:d2:39:6a:e1:ae:ee:47:
11:a3:c5:d9:db:fd:8e:8e:ee:30:ca:1a:f9:af:72:
1c:19:cf:cc:2a:bb:d9:c6:c9:c4:5a:2e:10:43:48:
76:1a:dd:69:ec:87:1e:ac:e7:16:cd:5b:05:ed:69:
cb:bb:6f:39:6c:66:cb:fe:8b:06:d3:03:da:8b:7f:
43:71:43:1b:69:18:0c:05:5b:cc:59:99:fb:56:06:
3d:92:2d:7d:31:e5:15:0b:50:69:97:d7:3e:3e:19:
b1:f9:93:b9:f0:a8:cd:64:6b:d2:3c:9e:a0:05:53:
1d:86:da:dc:82:e8:9e:46:86:04:e0:b0:17:e1:69:
8c:04:16:16:0d:6a:a5:c8:a2:68:be:21:98:da:a7:
98:43:e4:aa:d1:28:e3:f0:c8:b9:4a:85:e3:6d:3f:
cb:09:b6:78:f4:c8:aa:c3:c8:67:70:ec:4e:48:3d:
ce:8b:c6:d2:0d:02:50:ec:8f:16:38:13:6c:57:f2:
8b:64:a9:24:1b:bb:59:15:be:f9:a6:c8:5f:8e:bd:
5c:0e:31:6b:a3:36:a8:93:f3:c0:d0:5b:16:1a:54:
d0:78:2a:ac:10:b1:6a:fd:5c:7a:09:40:c5:9c:86:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:77:3F:CD:A6:2C:FC:78:7A:4F:85:49:92:CF:19:0A:93:3D:8E:3D
X509v3 Authority Key Identifier:
keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.248.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:8c:69:9a:3e:a1:6b:00:bd:af:19:42:46:4b:59:cf:78:9d:
22:5a:e5:e3:47:6f:65:29:d2:f6:ed:22:92:a1:37:e2:05:50:
1d:ea:44:91:ca:4c:49:76:ac:ac:5d:3f:1e:a1:70:b7:25:01:
9d:54:5a:34:0e:69:0c:2a:c4:1d:22:af:47:b1:1c:ef:1c:29:
eb:0d:ff:11:ce:e1:d2:e7:3c:be:23:24:1f:81:ff:2c:1c:ce:
03:eb:f5:04:d1:cf:05:ea:60:70:02:cb:b7:6b:53:dc:7d:c9:
b5:90:a6:7e:a3:dd:e8:7c:6a:b9:f1:83:71:34:dd:2b:72:56:
13:a5:4e:aa:9d:26:6b:7d:de:3c:8d:6d:c5:f9:31:8e:ad:87:
eb:7d:89:34:57:a0:a6:5f:c8:bc:f5:69:18:6e:60:07:a7:26:
92:26:db:e1:d8:46:08:09:e5:be:6c:b2:27:fb:64:76:bf:81:
71:17:24:d1:91:5a:bb:dd:ec:ea:12:ec:30:46:ca:b6:b7:af:
00:8b:75:97:81:55:9d:d0:57:e9:b1:d6:98:c5:72:eb:8d:c6:
d0:23:13:b0:10:0e:66:0d:8f:8a:a9:20:5f:f0:26:31:ec:31:
15:c8:47:85:b4:62:07:71:38:c7:d2:e5:26:2b:b9:5e:5f:a8:
7c:28:fc:84
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUJ4w8j9YrEraSGbnTyNbc0N5P3R8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE0MTJBMDk3RDcyNDg1MUJFOTYxRDA5M0U4NTIxQ0M3
N0E3QjE2MzAeFw0yNjAxMDYxODU1NTBaFw0yNzAxMDUxOTAwNTBaMDMxMTAvBgNV
BAMTKEI1NzczRkNEQTYyQ0ZDNzg3QTRGODU0OTkyQ0YxOTBBOTMzRDhFM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkddpPzlHogIi+8avqDjXhNc2l
RNQk0jlq4a7uRxGjxdnb/Y6O7jDKGvmvchwZz8wqu9nGycRaLhBDSHYa3Wnshx6s
5xbNWwXtacu7bzlsZsv+iwbTA9qLf0NxQxtpGAwFW8xZmftWBj2SLX0x5RULUGmX
1z4+GbH5k7nwqM1ka9I8nqAFUx2G2tyC6J5GhgTgsBfhaYwEFhYNaqXIomi+IZja
p5hD5KrRKOPwyLlKheNtP8sJtnj0yKrDyGdw7E5IPc6LxtINAlDsjxY4E2xX8otk
qSQbu1kVvvmmyF+OvVwOMWujNqiT88DQWxYaVNB4KqwQsWr9XHoJQMWchiFlAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUtXc/zaYs/Hh6T4VJks8ZCpM9jj0wHwYDVR0j
BBgwFoAUIUEqCX1ySFG+lh0JPoUhzHensWMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMEI0ODM0OTEwNEU0Nzc2ODlGRTM4QTdCOTY3QTUwOTNE
QzgzODhBOTIxNkZDNjE1NjRCM0NBMTRCQTg5Qzg4LzAvMjE0MTJBMDk3RDcyNDg1
MUJFOTYxRDA5M0U4NTIxQ0M3N0E3QjE2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTQxMkEwOTdENzI0ODUxQkU5
NjFEMDkzRTg1MjFDQzc3QTdCMTYzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTBCNDgzNDkxMDRFNDc3Njg5RkUzOEE3Qjk2N0E1MDkzREM4Mzg4QTky
MTZGQzYxNTY0QjNDQTE0QkE4OUM4OC8wLzMxMzYzODJlMzEzOTM3MmUzMjM0Mzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM3MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGo
xfgwDQYJKoZIhvcNAQELBQADggEBAF+MaZo+oWsAva8ZQkZLWc94nSJa5eNHb2Up
0vbtIpKhN+IFUB3qRJHKTEl2rKxdPx6hcLclAZ1UWjQOaQwqxB0ir0exHO8cKesN
/xHO4dLnPL4jJB+B/ywczgPr9QTRzwXqYHACy7drU9x9ybWQpn6j3eh8arnxg3E0
3StyVhOlTqqdJmt93jyNbcX5MY6th+t9iTRXoKZfyLz1aRhuYAenJpIm2+HYRggJ
5b5ssif7ZHa/gXEXJNGRWrvd7OoS7DBGyra3rwCLdZeBVZ3QV+mx1pjFcuuNxtAj
E7AQDmYNj4qpIF/wJjHsMRXIR4W0YgdxOMfS5SYruV5fqHwo/IQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:16 2026 by rpki-client