This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3132382e302f32312d3231203d3e203238303637.roa
File: 36342e32382e3132382e302f32312d3231203d3e203238303637.roa (raw, json)
Hash identifier: m3NmyLiHltV1bOjDeMgYtMfr94kOR4m0d7yQnqGRAtc=
Subject key identifier: 4C:6C:67:29:56:99:CC:91:92:92:02:63:51:C7:08:AA:E0:8D:D2:B1
Certificate issuer: /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial: 7D64902372A7532D029B999D68D6F4740D00ED5F
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3132382e302f32312d3231203d3e203238303637.roa
Signing time: Tue 06 Jan 2026 19:24:08 +0000
ROA not before: Tue 06 Jan 2026 19:19:08 +0000
ROA not after: Tue 05 Jan 2027 19:24:08 +0000
asID: 28067
IP address blocks: 64.28.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 02:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:64:90:23:72:a7:53:2d:02:9b:99:9d:68:d6:f4:74:0d:00:ed:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Validity
Not Before: Jan 6 19:19:08 2026 GMT
Not After : Jan 5 19:24:08 2027 GMT
Subject: CN=4C6C67295699CC919292026351C708AAE08DD2B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:5d:af:ad:9c:59:64:b2:db:1d:3f:83:39:
32:90:da:7c:26:68:7e:54:4b:ad:2e:36:56:a6:0f:
7e:76:fb:90:39:df:9c:fb:dd:46:ae:65:58:75:53:
54:fa:a6:c5:ee:42:ef:00:da:c5:8e:45:ad:8b:4d:
1a:17:18:17:56:e4:b1:88:2a:a7:0d:2b:7e:f5:ea:
0f:8a:7c:39:5b:37:7b:d1:46:7d:eb:60:54:38:4c:
30:bd:d9:4a:29:dd:60:d8:1e:fe:a4:b0:90:06:b1:
ba:48:7e:68:b4:fe:c6:b0:48:ed:5a:59:3e:d0:1c:
4d:84:46:17:9b:a7:da:de:32:8f:b2:41:17:6b:cc:
4c:bd:87:80:7f:ec:8e:fd:61:df:5b:58:91:4f:9d:
36:6a:e7:af:4c:be:f1:95:da:bf:0f:a4:43:f2:c0:
e2:17:48:02:47:b3:eb:16:e5:0f:e6:ad:69:8b:20:
56:bd:97:80:e2:1d:88:1e:0a:8b:35:0f:e8:74:22:
a7:00:41:1f:9d:d2:e5:19:77:08:66:df:db:a3:65:
d6:bf:39:f1:bc:8f:06:67:7d:5e:77:22:95:2b:38:
98:a7:9e:32:e5:c5:42:aa:1e:da:03:fa:1e:37:29:
36:e5:25:d5:d7:6e:27:cc:a4:c2:8a:79:e3:74:4b:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6C:67:29:56:99:CC:91:92:92:02:63:51:C7:08:AA:E0:8D:D2:B1
X509v3 Authority Key Identifier:
keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3132382e302f32312d3231203d3e203238303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.28.128.0/21
Signature Algorithm: sha256WithRSAEncryption
91:b1:ab:b3:54:68:2b:92:52:b1:86:74:4c:20:a8:56:12:a3:
3c:79:3f:04:31:64:46:66:b3:e3:54:4b:eb:4f:4c:07:fc:1e:
27:9e:df:69:24:b9:e5:f3:8a:a2:7e:35:b0:83:bf:65:ac:17:
3a:89:9e:e3:fc:0f:0d:99:1f:ca:28:be:f6:50:34:9a:93:fd:
97:34:7f:7d:ce:35:6d:7d:d3:c7:bc:b3:ec:c4:8d:d7:c4:33:
5f:ab:c3:ec:b2:5b:91:46:e5:d9:e8:04:f7:90:f8:1a:00:6a:
77:7c:f4:ed:9c:ff:90:8d:38:8c:87:ef:aa:b0:1e:3e:a6:76:
33:dc:17:7d:28:e2:28:1f:e2:5f:e2:e0:c1:a4:40:c9:b2:bc:
75:d1:6e:02:b4:75:6f:7b:8a:6d:af:30:20:0a:8a:70:d5:6e:
9d:d6:f5:4d:23:b7:42:c3:cd:b4:18:8d:d2:6a:68:99:89:63:
93:2a:3d:80:ac:8c:d5:f1:83:83:46:fb:63:3e:6a:3b:e2:3d:
81:d6:96:f6:42:ae:e1:c0:20:82:d3:30:ad:05:45:e0:20:81:
89:9a:8e:5d:8f:d9:a2:bd:48:83:9e:21:36:62:78:ae:db:d9:
93:31:d8:6c:4d:10:98:ae:c8:ea:f1:54:33:b3:7f:7a:b8:80:
76:9a:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:47 2026 by rpki-client