This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/3134332e3230382e33362e302f32322d3234203d3e20323634363235.roa
File: 3134332e3230382e33362e302f32322d3234203d3e20323634363235.roa (raw, json)
Hash identifier: qrKX5KghLyNxNBqTStcqzXjixF4FCC8T7J2r2qc3zXg=
Subject key identifier: 7E:07:7A:0D:B3:5E:D4:E4:38:64:16:7F:45:70:1A:43:B0:A6:20:2C
Certificate issuer: /CN=456C96D39E784B660220D0B1C98F59D8823024A7
Certificate serial: 55A60BAEE8A09D0AF733307D74442584D0BE2B20
Authority key identifier: 45:6C:96:D3:9E:78:4B:66:02:20:D0:B1:C9:8F:59:D8:82:30:24:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/456C96D39E784B660220D0B1C98F59D8823024A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/3134332e3230382e33362e302f32322d3234203d3e20323634363235.roa
Signing time: Tue 06 Jan 2026 18:57:41 +0000
ROA not before: Tue 06 Jan 2026 18:52:41 +0000
ROA not after: Tue 05 Jan 2027 18:57:41 +0000
asID: 264625
IP address blocks: 143.208.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/456C96D39E784B660220D0B1C98F59D8823024A7.crl
rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/456C96D39E784B660220D0B1C98F59D8823024A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/456C96D39E784B660220D0B1C98F59D8823024A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a6:0b:ae:e8:a0:9d:0a:f7:33:30:7d:74:44:25:84:d0:be:2b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456C96D39E784B660220D0B1C98F59D8823024A7
Validity
Not Before: Jan 6 18:52:41 2026 GMT
Not After : Jan 5 18:57:41 2027 GMT
Subject: CN=7E077A0DB35ED4E43864167F45701A43B0A6202C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5f:90:45:14:0f:b0:a8:ee:0c:69:8f:b9:a0:
54:d5:19:70:5a:9e:76:02:92:b9:55:b7:e8:52:d3:
16:e2:0f:26:4f:7c:4d:71:51:8b:4c:01:19:79:7f:
ca:cd:4b:26:76:f0:83:42:6f:25:d6:63:0e:39:6e:
48:29:c3:c1:3a:81:16:3c:73:6a:bf:27:40:5e:2c:
6b:a0:f2:d2:61:a6:a8:6d:69:eb:3a:35:cb:14:19:
d0:8a:0d:ef:76:1f:a8:2f:8c:86:bb:52:8b:af:c6:
c6:e7:14:ba:4f:c3:f1:ef:27:92:73:47:b0:d4:20:
f3:71:28:c1:f5:57:1e:82:c8:1c:92:71:9b:1f:1c:
0a:ca:49:1f:2a:63:5f:cd:c5:e5:bf:4b:9d:f6:50:
5e:d4:93:92:94:75:7f:e1:7a:fd:f0:ba:13:04:e0:
44:97:b2:35:c4:9d:1d:2a:a9:f9:04:be:54:58:86:
eb:f6:f1:43:f4:cb:5e:6b:2b:29:1f:dc:6d:ed:0e:
e4:db:08:1f:b5:d7:56:8a:cb:f5:ce:8e:62:27:c0:
32:9e:91:3c:6f:5c:19:6a:df:4e:37:6a:60:9e:1c:
b3:16:b1:66:5d:98:bb:df:b5:67:3e:9f:c1:b2:85:
62:a7:0d:18:6f:c6:09:3d:d8:c2:fa:7e:ab:bb:ea:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:7A:0D:B3:5E:D4:E4:38:64:16:7F:45:70:1A:43:B0:A6:20:2C
X509v3 Authority Key Identifier:
keyid:45:6C:96:D3:9E:78:4B:66:02:20:D0:B1:C9:8F:59:D8:82:30:24:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/456C96D39E784B660220D0B1C98F59D8823024A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/456C96D39E784B660220D0B1C98F59D8823024A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/3134332e3230382e33362e302f32322d3234203d3e20323634363235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.36.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:6b:a5:84:91:ed:e5:ad:44:85:51:0d:e8:26:be:a2:f9:8e:
2a:a6:7f:25:4c:13:08:db:eb:d6:ac:29:9c:1f:8e:a9:bb:55:
98:f1:89:48:ca:26:e4:0b:44:91:5d:15:bb:84:ca:72:0a:6a:
dc:da:da:ca:2e:cc:8b:99:24:ce:3a:ee:20:c5:82:54:6f:d4:
e8:ba:a3:cd:9d:7d:c3:30:72:d8:19:6e:a7:63:fc:e7:e4:4e:
10:12:cf:8b:d6:6d:0e:99:de:ca:7f:e1:cb:92:eb:75:a2:75:
6d:fe:24:55:db:ac:6a:20:7f:26:80:ee:77:e7:e5:07:9e:81:
ad:67:7c:11:56:af:fc:28:cf:b7:77:74:89:dc:fd:97:87:9d:
2b:5d:15:94:e0:34:23:6e:29:b2:8b:a3:96:07:63:48:53:38:
83:c6:f6:28:7b:ca:53:c8:12:56:c8:04:9d:d6:e0:83:88:7f:
68:cd:31:dd:ca:42:e9:7a:54:62:82:d5:18:bf:a1:08:d2:66:
ff:20:8e:50:9f:67:bc:02:27:91:ea:87:12:5e:b1:cb:9b:d8:
e0:42:29:50:43:41:ef:78:f9:f3:c2:99:b1:dc:91:e6:5b:f0:
5a:02:0b:4c:5a:d8:38:a4:93:78:96:63:85:f9:1b:e4:e7:0f:
5d:98:53:43
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVaYLruignQr3MzB9dEQlhNC+KyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU2Qzk2RDM5RTc4NEI2NjAyMjBEMEIxQzk4RjU5RDg4
MjMwMjRBNzAeFw0yNjAxMDYxODUyNDFaFw0yNzAxMDUxODU3NDFaMDMxMTAvBgNV
BAMTKDdFMDc3QTBEQjM1RUQ0RTQzODY0MTY3RjQ1NzAxQTQzQjBBNjIwMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrX5BFFA+wqO4MaY+5oFTVGXBa
nnYCkrlVt+hS0xbiDyZPfE1xUYtMARl5f8rNSyZ28INCbyXWYw45bkgpw8E6gRY8
c2q/J0BeLGug8tJhpqhtaes6NcsUGdCKDe92H6gvjIa7UouvxsbnFLpPw/HvJ5Jz
R7DUIPNxKMH1Vx6CyByScZsfHArKSR8qY1/NxeW/S532UF7Uk5KUdX/hev3wuhME
4ESXsjXEnR0qqfkEvlRYhuv28UP0y15rKykf3G3tDuTbCB+111aKy/XOjmInwDKe
kTxvXBlq3043amCeHLMWsWZdmLvftWc+n8GyhWKnDRhvxgk92ML6fqu76iQ/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfgd6DbNe1OQ4ZBZ/RXAaQ7CmICwwHwYDVR0j
BBgwFoAURWyW0554S2YCINCxyY9Z2IIwJKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRDBGMDlDMzYxMkY2N0YxRUVCODhBQkMzNERDOTEyNDFD
MUQ2RDVDNUM4QTI0QjAzNzdCMTlEMDI1MDU2NkYwLzAvNDU2Qzk2RDM5RTc4NEI2
NjAyMjBEMEIxQzk4RjU5RDg4MjMwMjRBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NTZDOTZEMzlFNzg0QjY2MDIy
MEQwQjFDOThGNTlEODgyMzAyNEE3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUQwRjA5QzM2MTJGNjdGMUVFQjg4QUJDMzREQzkxMjQxQzFENkQ1QzVD
OEEyNEIwMzc3QjE5RDAyNTA1NjZGMC8wLzMxMzQzMzJlMzIzMDM4MmUzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzMjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj9Ak
MA0GCSqGSIb3DQEBCwUAA4IBAQBLa6WEke3lrUSFUQ3oJr6i+Y4qpn8lTBMI2+vW
rCmcH46pu1WY8YlIyibkC0SRXRW7hMpyCmrc2trKLsyLmSTOOu4gxYJUb9TouqPN
nX3DMHLYGW6nY/zn5E4QEs+L1m0Omd7Kf+HLkut1onVt/iRV26xqIH8mgO535+UH
noGtZ3wRVq/8KM+3d3SJ3P2Xh50rXRWU4DQjbimyi6OWB2NIUziDxvYoe8pTyBJW
yASd1uCDiH9ozTHdykLpelRigtUYv6EI0mb/II5Qn2e8AieR6ocSXrHLm9jgQilQ
Q0HvePnzwpmx3JHmW/BaAgtMWtg4pJN4lmOF+Rvk5w9dmFND
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:12 2026 by rpki-client