This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133362e302f32342d3234203d3e20323730313439.roa
File: 3134382e3230382e3133362e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier: dTNf4eJF44IyRhu4gWFh1EXVbUsLU+c2yhZJgOisK4k=
Subject key identifier: 37:45:D2:5B:98:8E:36:3F:31:1C:AB:6D:3C:38:76:B4:41:77:96:B2
Certificate issuer: /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial: 53F885025A532C7B840C6A3D8603A71713ECC906
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133362e302f32342d3234203d3e20323730313439.roa
Signing time: Tue 06 Jan 2026 19:06:11 +0000
ROA not before: Tue 06 Jan 2026 19:01:11 +0000
ROA not after: Tue 05 Jan 2027 19:06:11 +0000
asID: 270149
IP address blocks: 148.208.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 21:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f8:85:02:5a:53:2c:7b:84:0c:6a:3d:86:03:a7:17:13:ec:c9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Validity
Not Before: Jan 6 19:01:11 2026 GMT
Not After : Jan 5 19:06:11 2027 GMT
Subject: CN=3745D25B988E363F311CAB6D3C3876B4417796B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:d4:e0:fb:c5:da:33:57:14:85:4a:4e:d4:
36:d5:de:c8:0b:45:9f:21:1a:64:57:66:a1:6f:26:
ea:f4:26:ce:8a:b1:0a:f8:13:a8:b9:ea:0c:44:cb:
94:58:5c:b9:ab:11:bc:47:5f:e6:9f:96:9f:df:b4:
0b:6b:4a:91:7b:8b:cd:cd:41:21:a5:a3:0d:ad:ca:
b8:99:d0:3e:cd:45:64:32:e6:0c:6c:9a:a3:48:94:
cc:32:cc:d9:db:f5:ac:8b:0a:a7:d7:25:85:36:68:
55:ea:a9:60:c3:3c:d5:20:07:2e:cc:43:d2:96:6b:
9a:b6:05:ec:99:2a:f5:c4:5e:18:41:03:2c:da:c5:
37:97:d0:fb:f4:a9:1e:96:97:72:d5:2e:0c:1f:9c:
19:f9:f8:ad:ea:a6:b6:ae:83:f2:af:d8:e0:ea:c8:
df:62:f6:6b:fc:4e:33:b7:ac:4d:19:27:66:2e:20:
47:62:9a:b6:0f:f3:09:fd:c0:5d:57:68:5d:f3:5a:
81:3b:bd:fd:dd:a2:24:0b:6b:60:55:a0:a5:50:59:
21:6c:70:c6:0b:b4:0c:1f:37:0c:9b:f7:4b:60:f3:
f0:67:d6:5e:7d:4e:17:62:9b:73:3d:0f:60:c6:99:
48:05:d2:e8:db:65:8a:2e:00:aa:a5:33:e0:50:0a:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:45:D2:5B:98:8E:36:3F:31:1C:AB:6D:3C:38:76:B4:41:77:96:B2
X509v3 Authority Key Identifier:
keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133362e302f32342d3234203d3e20323730313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.208.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fc:de:78:30:b5:91:55:a0:97:6c:ae:38:8d:83:e1:1b:51:
1f:e2:fc:d3:3b:10:1f:67:f0:ae:d0:c7:37:b1:81:de:42:fd:
a9:4e:9d:65:bf:91:80:4a:dc:53:e0:b3:36:85:b0:df:d6:0b:
9c:e8:28:01:df:94:ac:ec:76:a2:2f:f6:07:01:b9:43:83:11:
b9:cd:e4:5f:ac:98:ef:42:1b:df:3e:9f:d2:ff:0a:c5:ad:af:
57:b3:fe:22:f2:6a:a5:e7:a9:4f:aa:7c:ca:7b:9a:2f:91:0c:
48:5c:87:57:0c:7b:ba:56:92:32:80:0a:7a:6d:bb:72:af:1e:
51:c2:bb:bb:a9:2a:c7:55:6a:4d:42:10:b6:df:f2:ce:66:76:
a3:fe:3f:95:3c:2b:08:1f:c8:5e:07:c4:20:f8:6a:3b:45:d7:
2c:1d:a5:e1:37:69:ab:f8:c1:19:34:a7:4c:fd:3f:73:e3:e0:
e8:0f:07:7c:ef:20:af:01:ae:1d:5d:ce:05:a8:b8:52:a2:22:
71:5d:ce:1f:3e:2b:43:3c:71:68:ef:74:45:14:e2:43:17:2d:
fd:27:ea:db:c8:72:0a:e5:6d:d2:8e:14:d2:88:69:ad:73:2c:
de:2f:61:4d:3c:ec:46:ca:94:8d:f2:b7:c3:90:64:96:94:e8:
e9:1b:03:5e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUU/iFAlpTLHuEDGo9hgOnFxPsyQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEExMjY3RENCNERDNkZGQTlGQ0REN0ZFQTlEN0Y5Rjc4
QzM3OTFEQjAeFw0yNjAxMDYxOTAxMTFaFw0yNzAxMDUxOTA2MTFaMDMxMTAvBgNV
BAMTKDM3NDVEMjVCOTg4RTM2M0YzMTFDQUI2RDNDMzg3NkI0NDE3Nzk2QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+tTg+8XaM1cUhUpO1DbV3sgL
RZ8hGmRXZqFvJur0Js6KsQr4E6i56gxEy5RYXLmrEbxHX+aflp/ftAtrSpF7i83N
QSGlow2tyriZ0D7NRWQy5gxsmqNIlMwyzNnb9ayLCqfXJYU2aFXqqWDDPNUgBy7M
Q9KWa5q2BeyZKvXEXhhBAyzaxTeX0Pv0qR6Wl3LVLgwfnBn5+K3qpraug/Kv2ODq
yN9i9mv8TjO3rE0ZJ2YuIEdimrYP8wn9wF1XaF3zWoE7vf3doiQLa2BVoKVQWSFs
cMYLtAwfNwyb90tg8/Bn1l59Thdim3M9D2DGmUgF0ujbZYouAKqlM+BQCo1tAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUN0XSW5iONj8xHKttPDh2tEF3lrIwHwYDVR0j
BBgwFoAUihJn3LTcb/qfzdf+qdf594w3kdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0I3QzY5N0U5ODhDMTQ3MjgwMTVGNzVBRDRCRDYyMTc1
NUJCMzk4NzBFQTI4MzFCM0NEMDUzQjk4ODUzM0YxLzAvOEExMjY3RENCNERDNkZG
QTlGQ0REN0ZFQTlEN0Y5Rjc4QzM3OTFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTEyNjdEQ0I0REM2RkZBOUZD
REQ3RkVBOUQ3RjlGNzhDMzc5MURCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNCN0M2OTdFOTg4QzE0NzI4MDE1Rjc1QUQ0QkQ2MjE3NTVCQjM5ODcw
RUEyODMxQjNDRDA1M0I5ODg1MzNGMS8wLzMxMzQzODJlMzIzMDM4MmUzMTMzMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMTM0Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
0IgwDQYJKoZIhvcNAQELBQADggEBADr83ngwtZFVoJdsrjiNg+EbUR/i/NM7EB9n
8K7Qxzexgd5C/alOnWW/kYBK3FPgszaFsN/WC5zoKAHflKzsdqIv9gcBuUODEbnN
5F+smO9CG98+n9L/CsWtr1ez/iLyaqXnqU+qfMp7mi+RDEhch1cMe7pWkjKACnpt
u3KvHlHCu7upKsdVak1CELbf8s5mdqP+P5U8KwgfyF4HxCD4ajtF1ywdpeE3aav4
wRk0p0z9P3Pj4OgPB3zvIK8Brh1dzgWouFKiInFdzh8+K0M8cWjvdEUU4kMXLf0n
6tvIcgrlbdKOFNKIaa1zLN4vYU087EbKlI3yt8OQZJaU6OkbA14=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:32 2026 by rpki-client