This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa
File: 3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier: woNdFir1XljfNGJlLtPo6SLuOtKvPbB903I8D1Y/1nk=
Subject key identifier: 07:34:C7:03:C4:76:C1:EE:E7:22:0D:6D:3B:83:86:D7:8A:A5:3A:95
Certificate issuer: /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial: 10B0E83E023904CF9CCF7D0FE719F3CC8BD4E1C1
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa
Signing time: Tue 06 Jan 2026 19:40:15 +0000
ROA not before: Tue 06 Jan 2026 19:35:15 +0000
ROA not after: Tue 05 Jan 2027 19:40:15 +0000
asID: 52271
IP address blocks: 167.250.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b0:e8:3e:02:39:04:cf:9c:cf:7d:0f:e7:19:f3:cc:8b:d4:e1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85939B22368B791C18889C114876582A293716F4
Validity
Not Before: Jan 6 19:35:15 2026 GMT
Not After : Jan 5 19:40:15 2027 GMT
Subject: CN=0734C703C476C1EEE7220D6D3B8386D78AA53A95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ea:54:a4:0f:fe:f9:dd:35:f2:c4:9e:c9:e0:
ce:8b:3f:17:5a:15:3c:e2:f5:9d:df:2f:e2:6b:64:
8d:26:0f:45:71:25:6f:fb:35:42:e4:7a:63:cf:d2:
4b:4d:42:51:45:7d:f0:c1:50:29:46:83:16:61:1a:
75:89:d0:17:15:86:68:15:e7:7d:97:f0:48:e0:5a:
e1:b2:cd:f3:86:18:d1:ef:48:1a:73:8b:e1:35:24:
5b:6c:5b:41:be:7a:9a:c6:34:1b:d1:cc:ac:be:40:
a8:53:c4:89:c5:db:e4:89:60:f7:cb:0b:83:7a:a8:
94:5a:93:5f:aa:01:cf:d5:fa:4b:32:3b:8a:cd:5a:
29:60:2f:c5:0d:ad:a5:ea:5f:53:ee:47:34:97:42:
43:33:16:19:c4:62:a0:fe:51:d7:e9:6f:1f:93:8f:
bd:ef:8c:66:c2:a2:23:cc:1c:1c:46:f9:63:b8:0e:
77:57:62:79:2e:dd:58:85:62:7b:50:bd:d8:59:0c:
5c:81:f1:18:78:29:98:61:7c:f9:e5:2b:05:85:a3:
b5:65:21:c4:ad:f3:37:87:17:10:77:3c:dc:56:2b:
f8:09:50:e3:6a:78:b3:3d:40:31:19:f2:f3:17:d0:
75:b2:8a:6c:18:61:44:20:74:2f:c5:71:47:5e:d5:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:C7:03:C4:76:C1:EE:E7:22:0D:6D:3B:83:86:D7:8A:A5:3A:95
X509v3 Authority Key Identifier:
keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5d:70:13:db:43:e4:1f:92:a0:e7:35:47:d8:6f:f7:d0:f7:
10:48:4a:9d:87:67:0e:a7:63:04:b7:45:5b:7f:7a:3c:9d:cc:
3e:b3:5b:bf:64:8e:f1:6d:cc:6b:b1:89:76:68:e7:0c:54:a5:
42:79:6d:d8:97:65:07:f4:4e:b3:1d:b1:ca:e9:af:cf:33:75:
66:f4:02:2c:3a:02:45:68:30:bc:c8:88:28:c7:b6:17:56:76:
f4:60:23:4c:08:7f:61:a8:fb:4f:92:2e:f5:10:8b:48:32:18:
de:b0:f8:79:98:78:68:63:a3:8c:84:0e:e9:e3:fc:6a:57:b2:
46:c0:9b:b0:26:0b:e8:6c:ee:5a:6b:7e:e2:18:c6:63:7f:47:
d4:0f:ba:32:c3:89:31:26:30:75:8b:ad:21:83:9f:dc:bc:7b:
c9:e5:75:1c:b8:de:20:ca:67:33:4a:f0:8a:0f:2b:c5:51:3b:
9f:64:ab:a4:34:68:fb:a1:a7:9f:45:47:be:cd:7b:eb:01:9d:
0f:f4:e3:f2:1e:52:fa:0d:86:14:a7:5c:b9:3a:45:9f:2e:1f:
60:3e:3b:22:f0:8b:12:f0:34:b5:48:6f:a5:15:44:f3:1f:12:
10:0c:0f:76:02:6a:14:d2:81:73:b8:d6:dc:90:d5:17:80:51:
55:f4:27:e0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUELDoPgI5BM+cz30P5xnzzIvU4cEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU5MzlCMjIzNjhCNzkxQzE4ODg5QzExNDg3NjU4MkEy
OTM3MTZGNDAeFw0yNjAxMDYxOTM1MTVaFw0yNzAxMDUxOTQwMTVaMDMxMTAvBgNV
BAMTKDA3MzRDNzAzQzQ3NkMxRUVFNzIyMEQ2RDNCODM4NkQ3OEFBNTNBOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt6lSkD/753TXyxJ7J4M6LPxda
FTzi9Z3fL+JrZI0mD0VxJW/7NULkemPP0ktNQlFFffDBUClGgxZhGnWJ0BcVhmgV
532X8EjgWuGyzfOGGNHvSBpzi+E1JFtsW0G+eprGNBvRzKy+QKhTxInF2+SJYPfL
C4N6qJRak1+qAc/V+ksyO4rNWilgL8UNraXqX1PuRzSXQkMzFhnEYqD+Udfpbx+T
j73vjGbCoiPMHBxG+WO4DndXYnku3ViFYntQvdhZDFyB8Rh4KZhhfPnlKwWFo7Vl
IcSt8zeHFxB3PNxWK/gJUONqeLM9QDEZ8vMX0HWyimwYYUQgdC/FcUde1YzzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBzTHA8R2we7nIg1tO4OG14qlOpUwHwYDVR0j
BBgwFoAUhZObIjaLeRwYiJwRSHZYKik3FvQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEQ0REE2NEE5QzVCMjE5QjdFQkUxMEI4NDZGRjM5NDZB
NzdGNzQyMDQ0ODRFRDVFODVFNjA2NzAwNjM5MzYzLzAvODU5MzlCMjIzNjhCNzkx
QzE4ODg5QzExNDg3NjU4MkEyOTM3MTZGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTkzOUIyMjM2OEI3OTFDMTg4
ODlDMTE0ODc2NTgyQTI5MzcxNkY0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThENERBNjRBOUM1QjIxOUI3RUJFMTBCODQ2RkYzOTQ2QTc3Rjc0MjA0
NDg0RUQ1RTg1RTYwNjcwMDYzOTM2My8wLzMxMzYzNzJlMzIzNTMwMmUzMjMwMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/rQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA8XXAT20PkH5Kg5zVH2G/30PcQSEqdh2cOp2ME
t0Vbf3o8ncw+s1u/ZI7xbcxrsYl2aOcMVKVCeW3Yl2UH9E6zHbHK6a/PM3Vm9AIs
OgJFaDC8yIgox7YXVnb0YCNMCH9hqPtPki71EItIMhjesPh5mHhoY6OMhA7p4/xq
V7JGwJuwJgvobO5aa37iGMZjf0fUD7oyw4kxJjB1i60hg5/cvHvJ5XUcuN4gymcz
SvCKDyvFUTufZKukNGj7oaefRUe+zXvrAZ0P9OPyHlL6DYYUp1y5OkWfLh9gPjsi
8IsS8DS1SG+lFUTzHxIQDA92AmoU0oFzuNbckNUXgFFV9Cfg
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:38 2026 by rpki-client