This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3132382e302f32302d3230203d3e203238303637.roa
File: 36342e32382e3132382e302f32302d3230203d3e203238303637.roa (raw, json)
Hash identifier: ahjqlgKdsNFQCNz++8zCjMo4C+xt3IvJ98kGuD9mseQ=
Subject key identifier: 0A:5D:60:A7:D0:D9:E9:9B:95:9F:8B:33:0D:F2:56:70:ED:91:41:E8
Certificate issuer: /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial: 0745BA0C3F0802542F101CEA7C3097B258BACC96
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3132382e302f32302d3230203d3e203238303637.roa
Signing time: Tue 06 Jan 2026 19:24:09 +0000
ROA not before: Tue 06 Jan 2026 19:19:09 +0000
ROA not after: Tue 05 Jan 2027 19:24:09 +0000
asID: 28067
IP address blocks: 64.28.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 02:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:45:ba:0c:3f:08:02:54:2f:10:1c:ea:7c:30:97:b2:58:ba:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Validity
Not Before: Jan 6 19:19:09 2026 GMT
Not After : Jan 5 19:24:09 2027 GMT
Subject: CN=0A5D60A7D0D9E99B959F8B330DF25670ED9141E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:a4:c6:d3:0c:8b:ca:1a:d6:1d:3f:6d:f9:
bc:84:fc:61:f3:19:20:7c:cc:5e:a2:ef:5d:06:41:
45:af:fd:f4:95:39:37:9f:dd:80:44:fa:45:26:87:
14:e2:58:8c:58:bc:3c:4f:3e:7f:ad:c3:95:45:93:
7b:8e:64:97:52:96:7a:83:05:f9:0a:70:57:66:b4:
ba:3a:4e:ec:d2:3d:b5:e2:74:01:74:35:d6:58:43:
16:b3:4e:83:10:bc:44:37:f9:46:b7:78:2a:e1:eb:
76:58:2c:48:cf:1c:81:ee:50:11:5d:6e:16:e5:de:
8a:59:53:17:09:33:e8:cf:e9:7d:94:73:ba:ec:e6:
7e:9a:1f:46:6b:a2:e6:32:23:d3:25:d8:2f:fc:ad:
45:2b:98:b6:36:d1:63:db:3e:61:85:cc:1d:03:30:
d2:2f:bc:e1:e8:d1:cf:d6:62:64:7e:c2:5e:b2:d2:
5c:d9:4f:77:a8:c8:0c:e4:45:df:1e:fe:74:37:5e:
f0:91:3a:6a:17:f1:14:e0:33:bc:a6:db:c2:50:69:
4e:88:49:ae:17:1d:dc:ec:97:d7:60:17:d7:c4:24:
8a:bd:85:14:24:44:62:f8:90:6b:9b:8e:51:21:80:
64:5b:91:70:e2:90:80:c6:da:49:5c:ce:2e:dc:65:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5D:60:A7:D0:D9:E9:9B:95:9F:8B:33:0D:F2:56:70:ED:91:41:E8
X509v3 Authority Key Identifier:
keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3132382e302f32302d3230203d3e203238303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.28.128.0/20
Signature Algorithm: sha256WithRSAEncryption
93:54:d9:57:04:ac:64:4f:a8:b0:8d:93:11:79:03:5b:91:4f:
c5:04:0e:ee:d5:63:b6:3f:ce:d0:dc:bf:99:d7:c4:b1:53:f2:
67:38:91:1d:d8:cb:48:f3:24:15:3c:ed:22:fe:df:7a:c3:93:
c6:3a:2a:7e:02:41:71:f5:27:16:84:d0:9f:68:f3:fb:c2:34:
e2:d6:23:70:86:f2:67:6f:8b:6c:79:74:f2:d1:b9:34:a9:0e:
69:01:de:e7:3d:63:81:74:dd:17:bf:dd:a0:a8:4b:6f:fa:fe:
ac:61:f0:a4:db:a3:8b:f0:42:2e:4a:cd:f1:54:43:5f:75:4e:
ed:ae:af:24:6d:d0:f3:eb:cf:ed:b7:21:6d:26:01:49:45:56:
10:8f:f0:8d:a5:7b:06:13:5f:07:64:c5:e7:eb:6c:b0:19:66:
2a:fb:71:02:29:49:01:6f:c7:26:2a:54:b4:a6:48:56:18:f9:
c4:56:de:a8:c5:a7:a8:66:b9:0a:9d:45:68:da:11:e2:49:2b:
9d:78:31:64:66:b3:af:d2:cf:23:a8:e3:17:d8:81:71:51:88:
25:2e:bb:67:3a:50:ee:83:04:bf:55:7e:3f:73:ef:ec:66:d5:
f3:91:57:f1:24:2a:fb:80:7e:19:79:8f:8a:6e:e0:54:c8:c6:
5b:71:47:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:46 2026 by rpki-client