This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133392e302f32342d3234203d3e203238303637.roa
File: 36342e32382e3133392e302f32342d3234203d3e203238303637.roa (raw, json)
Hash identifier: EiSHdERMoTN4WHMvNokSk/cJRJ0ZYkc4rAIjMIuP3qc=
Subject key identifier: 1F:F0:75:A8:A6:9C:CB:A8:C0:7E:C6:C8:85:B0:1B:FE:D8:94:45:D2
Certificate issuer: /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial: 0288F7A54B30EED5AB25D8E522316017A3BE577B
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133392e302f32342d3234203d3e203238303637.roa
Signing time: Tue 06 Jan 2026 19:24:09 +0000
ROA not before: Tue 06 Jan 2026 19:19:09 +0000
ROA not after: Tue 05 Jan 2027 19:24:09 +0000
asID: 28067
IP address blocks: 64.28.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 02:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:88:f7:a5:4b:30:ee:d5:ab:25:d8:e5:22:31:60:17:a3:be:57:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Validity
Not Before: Jan 6 19:19:09 2026 GMT
Not After : Jan 5 19:24:09 2027 GMT
Subject: CN=1FF075A8A69CCBA8C07EC6C885B01BFED89445D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:f9:41:64:73:c9:bf:76:c8:96:c6:7f:86:
3f:0b:64:1e:cf:5d:a5:d9:59:1d:16:5d:82:63:bd:
11:0a:a5:4a:0c:a1:23:04:8c:11:e7:a7:ea:69:63:
11:a9:b3:72:a8:90:e5:b9:59:26:89:a5:5f:4c:e8:
10:10:d3:99:f7:a9:7e:b3:26:10:6a:66:64:b4:65:
97:fd:5b:67:97:fe:73:a8:d9:e7:46:d7:7a:38:fe:
96:91:7a:cf:61:d4:6b:aa:ed:fb:af:99:d5:04:47:
b7:42:ff:b6:12:cf:c9:55:9d:11:3f:42:7f:00:20:
61:83:39:14:31:39:61:0a:fb:10:ab:ad:28:d1:8d:
ca:c4:ec:72:f6:76:c3:1d:21:1e:f9:4e:fb:3e:72:
77:90:c5:cf:ae:21:9a:fa:15:b3:e4:15:70:e1:47:
b7:e7:18:7f:07:d8:9a:df:3d:e0:2a:e8:71:36:8e:
62:c3:91:17:eb:01:eb:64:b5:5a:74:5a:6f:cd:05:
85:9f:1a:d6:ba:24:b2:8b:a5:11:95:1d:f2:7c:31:
d1:bf:47:05:ce:72:de:27:bd:1d:f2:ae:ab:d5:ff:
7b:29:57:05:1e:66:41:e2:ea:e5:c7:d8:d5:c2:15:
2c:ff:7b:33:68:80:48:12:d6:90:32:1a:08:b2:f6:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F0:75:A8:A6:9C:CB:A8:C0:7E:C6:C8:85:B0:1B:FE:D8:94:45:D2
X509v3 Authority Key Identifier:
keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133392e302f32342d3234203d3e203238303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.28.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c4:60:76:09:66:ab:ca:49:10:2f:01:0f:57:90:71:e5:33:
ff:23:91:ef:e6:07:f7:9a:f8:ba:0e:9e:81:9b:62:ce:bc:a2:
61:c0:6a:53:21:f5:59:98:ca:0e:86:a4:5a:a7:c7:47:c6:e3:
5e:06:ed:28:e2:81:ea:c1:17:55:43:be:3f:04:41:1a:52:38:
4c:a1:48:7c:9c:42:40:69:04:35:71:43:8a:cf:2f:ac:d7:28:
db:43:7a:f9:9c:96:40:4c:dd:cf:f1:8a:23:74:bc:46:bc:a4:
c2:80:c7:f3:d7:0d:da:92:db:ff:88:8b:41:96:64:64:1c:bf:
11:6c:29:33:b6:df:71:82:8c:e1:4c:57:1b:00:5f:81:36:ea:
2f:07:8b:aa:96:d2:7d:81:3b:dc:52:d7:e5:71:65:3b:4b:94:
ac:69:99:48:e0:4c:4a:57:4c:67:ef:10:de:fa:b4:d4:49:16:
7f:38:68:2e:08:7c:43:cf:7e:99:cb:ee:50:1c:fd:d7:c1:c9:
99:e8:62:52:90:b3:01:7a:85:d9:10:10:df:0b:e6:c1:79:0e:
60:f3:64:a1:c4:8e:72:0f:65:3c:de:29:fd:77:1c:54:7f:c9:
2c:93:e6:fd:75:28:32:9a:f6:c1:f7:3f:13:8d:d9:1b:ed:ff:
ce:ad:44:ad
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUAoj3pUsw7tWrJdjlIjFgF6O+V3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDQjNEQUVEOEZCM0E4MkY2QkRFOTVGQkM1QUMzQjc5
Q0NFRkQzMDAeFw0yNjAxMDYxOTE5MDlaFw0yNzAxMDUxOTI0MDlaMDMxMTAvBgNV
BAMTKDFGRjA3NUE4QTY5Q0NCQThDMDdFQzZDODg1QjAxQkZFRDg5NDQ1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NPlBZHPJv3bIlsZ/hj8LZB7P
XaXZWR0WXYJjvREKpUoMoSMEjBHnp+ppYxGps3KokOW5WSaJpV9M6BAQ05n3qX6z
JhBqZmS0ZZf9W2eX/nOo2edG13o4/paRes9h1Guq7fuvmdUER7dC/7YSz8lVnRE/
Qn8AIGGDORQxOWEK+xCrrSjRjcrE7HL2dsMdIR75Tvs+cneQxc+uIZr6FbPkFXDh
R7fnGH8H2JrfPeAq6HE2jmLDkRfrAetktVp0Wm/NBYWfGta6JLKLpRGVHfJ8MdG/
RwXOct4nvR3yrqvV/3spVwUeZkHi6uXH2NXCFSz/ezNogEgS1pAyGgiy9r3DAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUH/B1qKacy6jAfsbIhbAb/tiURdIwHwYDVR0j
BBgwFoAUj8s9rtj7OoL2velfvFrDt5zO/TAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOTkxNDlDQTQzRUM2NEEwNDczRDJCQzFDRjEzRjhFMTdG
M0IxRTE5Q0I0MkUyNDY4OTFCMERGMEVEQ0M1ODYyLzAvOEZDQjNEQUVEOEZCM0E4
MkY2QkRFOTVGQkM1QUMzQjc5Q0NFRkQzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RkNCM0RBRUQ4RkIzQTgyRjZC
REU5NUZCQzVBQzNCNzlDQ0VGRDMwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTk5MTQ5Q0E0M0VDNjRBMDQ3M0QyQkMxQ0YxM0Y4RTE3RjNCMUUxOUNC
NDJFMjQ2ODkxQjBERjBFRENDNTg2Mi8wLzM2MzQyZTMyMzgyZTMxMzMzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMDM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAHIswDQYJ
KoZIhvcNAQELBQADggEBAHvEYHYJZqvKSRAvAQ9XkHHlM/8jke/mB/ea+LoOnoGb
Ys68omHAalMh9VmYyg6GpFqnx0fG414G7SjigerBF1VDvj8EQRpSOEyhSHycQkBp
BDVxQ4rPL6zXKNtDevmclkBM3c/xiiN0vEa8pMKAx/PXDdqS2/+Ii0GWZGQcvxFs
KTO233GCjOFMVxsAX4E26i8Hi6qW0n2BO9xS1+VxZTtLlKxpmUjgTEpXTGfvEN76
tNRJFn84aC4IfEPPfpnL7lAc/dfByZnoYlKQswF6hdkQEN8L5sF5DmDzZKHEjnIP
ZTzeKf13HFR/ySyT5v11KDKa9sH3PxON2Rvt/86tRK0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:07:52 2026 by rpki-client