This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/33372e31302e37302e302f32342d3234203d3e20323632313931.roa
File: 33372e31302e37302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: Z1EQT9ohVydi2sReFzGd+MRYe8spKnLxsNKpRIRe5/E=
Subject key identifier: E2:CC:8F:C7:AF:07:2D:84:60:15:91:F6:E1:44:02:33:10:2A:24:AF
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 687A711EAA181037B831D24F77CCE298989A7892
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/33372e31302e37302e302f32342d3234203d3e20323632313931.roa
Signing time: Mon 15 Dec 2025 16:35:00 +0000
ROA not before: Mon 15 Dec 2025 16:30:00 +0000
ROA not after: Mon 14 Dec 2026 16:35:00 +0000
asID: 262191
IP address blocks: 37.10.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7a:71:1e:aa:18:10:37:b8:31:d2:4f:77:cc:e2:98:98:9a:78:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Dec 15 16:30:00 2025 GMT
Not After : Dec 14 16:35:00 2026 GMT
Subject: CN=E2CC8FC7AF072D84601591F6E1440233102A24AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:5b:93:91:40:7d:df:ff:4d:d7:7a:13:51:
fd:0e:11:07:48:79:9d:a5:6c:82:e3:cf:f8:16:83:
0a:58:12:64:25:ea:8d:44:be:22:60:ad:26:57:e8:
99:61:d4:db:a3:ee:4d:60:b8:c8:fd:2c:fb:96:9c:
b6:e2:73:e0:8a:c2:d2:79:65:f5:96:ff:d5:02:61:
fa:88:93:a5:f4:a3:a5:b3:97:45:a0:f0:f5:16:1a:
3e:6e:d9:61:86:e6:64:55:9d:ff:8c:24:88:69:4a:
cc:02:d4:97:00:2c:99:2e:d9:35:e4:0e:c6:7c:7b:
d5:e4:19:61:8a:6a:1e:21:6f:f0:4d:14:35:ff:71:
a9:f2:e0:31:ec:c2:a6:f6:14:ed:43:0e:fe:32:53:
1e:d9:d4:6d:43:e7:ec:c3:4b:b9:ed:05:74:68:21:
02:87:b4:41:a0:1f:c4:e1:15:02:b1:3a:c4:e0:bb:
a0:43:43:93:fd:3b:61:9d:ab:cf:2f:c3:4f:83:5d:
4a:87:64:00:07:6d:e6:51:5f:35:fd:e3:dc:5b:82:
32:17:d4:ab:b9:f2:d1:16:9f:31:51:61:db:31:c3:
c0:84:e1:6f:55:34:5b:dc:a7:67:cb:29:62:c6:1d:
1e:c2:bd:c6:18:10:91:ec:99:fe:dc:35:52:93:f6:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:8F:C7:AF:07:2D:84:60:15:91:F6:E1:44:02:33:10:2A:24:AF
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/33372e31302e37302e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.10.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:94:13:e0:9c:ab:32:b1:c4:60:ee:4f:9b:0d:ef:2e:da:84:
41:fb:55:ff:1d:53:01:38:28:c3:bb:82:46:5b:2e:78:9d:ad:
10:01:f7:92:08:16:fe:3b:8d:bc:72:01:1f:6d:55:de:85:c0:
b1:3a:94:27:5a:fa:da:07:65:a8:f6:97:3e:eb:44:f8:8e:e6:
97:1c:dc:5a:f7:d9:c7:cd:8d:11:f2:fe:65:b4:4d:80:4d:aa:
e8:82:de:12:20:24:40:e2:bc:1f:db:88:e5:d2:08:c9:0f:25:
3e:43:d6:91:97:b2:9c:37:48:ce:3b:13:a9:0e:36:c7:dd:47:
9f:62:ef:83:46:6a:00:78:3f:74:d2:b9:b5:79:c4:0d:ba:60:
8f:cc:1c:ac:5f:76:62:01:88:40:45:e4:39:c0:e8:43:7a:8f:
c6:58:e1:bd:98:fb:d9:bf:cc:c4:b0:06:b0:69:88:2c:d9:ee:
7f:35:a0:aa:29:b7:49:4d:e3:6e:6f:c7:6c:8e:6e:40:3b:ea:
8b:28:ff:9c:33:e9:b4:2b:0a:ff:6f:80:5e:9a:0c:39:24:cf:
75:e6:4c:65:41:05:b5:dc:78:eb:f0:7b:32:17:b0:57:73:ce:
82:26:88:6e:a2:cf:36:56:14:6a:f4:54:87:d8:c3:83:b2:3d:
84:1a:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:10:58 2025 by rpki-client