This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3137302e3135302e36342e302f32322d3234203d3e20323632393332.roa
File: 3137302e3135302e36342e302f32322d3234203d3e20323632393332.roa (raw, json)
Hash identifier: 1UZyu7pG+0bknOb70b6dQ5hQ1Cf2DZyvEFmOW5fpzyM=
Subject key identifier: 7A:4A:09:7D:AA:4A:60:FF:81:D2:9C:99:85:D8:86:82:1A:D8:FA:11
Certificate issuer: /CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Certificate serial: 64F1C77034433C702CD6B63F68D8E33CC4CA32DF
Authority key identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3137302e3135302e36342e302f32322d3234203d3e20323632393332.roa
Signing time: Tue 06 Jan 2026 20:54:39 +0000
ROA not before: Tue 06 Jan 2026 20:49:39 +0000
ROA not after: Tue 05 Jan 2027 20:54:39 +0000
asID: 262932
IP address blocks: 170.150.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl
rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f1:c7:70:34:43:3c:70:2c:d6:b6:3f:68:d8:e3:3c:c4:ca:32:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Validity
Not Before: Jan 6 20:49:39 2026 GMT
Not After : Jan 5 20:54:39 2027 GMT
Subject: CN=7A4A097DAA4A60FF81D29C9985D886821AD8FA11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:34:8d:31:92:62:c4:94:b1:31:21:7e:af:
e2:32:fa:52:64:0d:aa:30:52:fe:d9:b9:90:e3:74:
e4:14:cd:09:16:d9:19:eb:12:44:5a:1a:d7:45:be:
fa:6d:f1:e1:34:6c:40:77:a2:81:78:dd:e6:c5:fc:
45:b0:9c:a8:75:99:ef:ff:f6:b5:28:1b:2a:0b:8b:
ae:1a:d6:1d:65:fc:34:35:3b:37:f6:00:53:75:b4:
cf:3e:1e:99:89:64:56:48:36:f3:9a:5b:6a:02:c2:
f2:c1:e6:43:7a:6f:d8:80:a2:4d:a9:b5:ac:c9:27:
55:cc:85:5f:14:80:2c:35:5b:29:f9:39:92:2e:6f:
34:69:f7:d1:69:65:2b:9b:4e:36:96:a6:72:85:a5:
fc:06:07:e8:35:f0:ad:54:80:8b:db:94:19:f3:ca:
67:30:ff:79:a0:db:18:b4:c2:37:a4:1c:ed:cb:af:
9f:96:7f:46:32:b3:8f:b5:bf:0d:e3:f6:2d:ee:57:
e0:45:9a:51:21:42:08:4c:72:a0:16:35:e2:71:00:
04:fc:a5:80:dd:c2:ff:a7:8e:90:a4:1f:f7:7c:f8:
50:89:e8:49:3d:d2:da:83:77:6b:74:c9:30:13:f7:
98:30:9d:ec:3e:d4:78:ae:e7:5a:c5:48:aa:88:8b:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4A:09:7D:AA:4A:60:FF:81:D2:9C:99:85:D8:86:82:1A:D8:FA:11
X509v3 Authority Key Identifier:
keyid:59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3137302e3135302e36342e302f32322d3234203d3e20323632393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.64.0/22
Signature Algorithm: sha256WithRSAEncryption
56:7b:50:c9:81:75:0f:d9:8b:a7:39:99:ff:4e:ed:ad:b2:e4:
77:43:36:9e:9b:a0:f0:c8:56:86:79:6c:d0:3d:a5:d1:47:cb:
f9:b9:05:c8:0b:2e:fe:27:60:63:02:5c:86:37:25:a7:1d:2a:
47:71:2c:c7:ff:e3:3f:aa:09:a0:83:af:4a:00:dc:3a:e8:89:
8b:86:89:86:6a:56:e5:00:34:6b:b6:a4:4b:d3:9e:d7:6b:6c:
45:d0:cd:94:da:5d:0c:3b:dd:73:ea:b8:a4:cf:1f:b3:5e:a6:
b1:1d:76:e5:59:eb:13:e8:cf:19:9b:a0:89:5b:d6:48:84:78:
d0:59:64:4d:e9:c1:30:3e:91:13:fc:5f:c1:a5:9a:06:dd:41:
56:4c:09:60:2a:f3:8e:35:b7:35:7e:77:84:7b:fd:18:df:20:
9d:c5:7e:ec:53:dc:26:c4:ee:5a:a9:08:98:fc:8d:96:82:aa:
3e:89:8c:87:88:84:27:fb:64:b4:e8:2d:f9:a0:9d:4b:cc:84:
b0:87:d4:17:0d:df:16:e6:d5:b1:63:0c:68:25:72:7c:a7:42:
e6:ca:88:aa:f3:df:5d:35:ec:e6:57:9b:32:20:7d:b0:e1:4c:
c1:1e:46:3c:e7:40:f8:66:ee:3e:c0:fa:55:af:d5:35:d0:1b:
38:f4:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:48:58 2026 by rpki-client