This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136312e302f32342d3234203d3e20323730313439.roa
File: 3134382e3230382e3136312e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier: jH0h3RL6qCFjs1Ysg7fxwyn5CuqIdVa/P7+fD3MsIQI=
Subject key identifier: 8F:E8:8B:DF:09:80:8B:CC:A2:30:73:71:8A:CA:EC:D0:96:97:5C:0D
Certificate issuer: /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial: 43AA93B7265E18134AE7EA48BCDBB69811961EAE
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136312e302f32342d3234203d3e20323730313439.roa
Signing time: Tue 06 Jan 2026 19:06:12 +0000
ROA not before: Tue 06 Jan 2026 19:01:12 +0000
ROA not after: Tue 05 Jan 2027 19:06:12 +0000
asID: 270149
IP address blocks: 148.208.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 21:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:aa:93:b7:26:5e:18:13:4a:e7:ea:48:bc:db:b6:98:11:96:1e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Validity
Not Before: Jan 6 19:01:12 2026 GMT
Not After : Jan 5 19:06:12 2027 GMT
Subject: CN=8FE88BDF09808BCCA23073718ACAECD096975C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:d0:e3:b6:3b:f0:ed:30:d0:a2:24:0c:37:
4e:4a:80:35:b4:ce:a3:d6:46:ad:45:af:f4:43:6a:
13:48:36:a1:51:48:33:6f:a6:a2:a4:31:73:52:17:
d8:b8:c7:3f:ff:3c:ac:67:05:92:9d:6c:a6:c3:1a:
ea:26:d4:b0:3f:bd:29:7c:9b:3a:f7:35:93:e5:e6:
e1:5f:28:23:03:ea:71:af:54:a2:83:07:c6:23:ef:
36:e9:0d:91:9c:e9:56:43:28:0f:b9:b5:52:d6:3c:
53:6d:f0:17:e1:cd:64:d6:2e:bc:72:88:48:5f:69:
69:3c:f4:02:c4:f8:b1:0d:f2:9d:3d:b7:42:c0:1e:
da:0f:2b:43:5e:bb:f1:67:38:17:61:fa:8c:cc:09:
98:c4:65:c7:40:77:24:a3:6b:19:35:03:9c:06:e5:
38:9b:b5:fe:49:18:cd:26:07:16:2e:7a:54:ab:ce:
57:79:48:82:3a:bc:4e:44:60:fa:77:c1:de:47:6a:
06:23:b1:a6:a6:7f:91:e7:73:d8:9a:5c:25:e3:dd:
e6:ab:6e:36:95:2d:67:62:77:fb:21:61:d0:10:fd:
4f:b3:82:e3:a7:9f:e6:8b:0e:d2:8a:a6:08:2b:4e:
a3:8a:b9:c7:48:d9:28:84:a3:70:16:c4:54:0b:4f:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E8:8B:DF:09:80:8B:CC:A2:30:73:71:8A:CA:EC:D0:96:97:5C:0D
X509v3 Authority Key Identifier:
keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136312e302f32342d3234203d3e20323730313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.208.161.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:1e:22:cf:90:77:d4:2b:ab:89:d9:ca:ca:dd:3a:fe:87:93:
21:f8:20:52:5d:84:ea:fc:35:7f:4a:0e:eb:a1:8c:4f:d2:32:
65:51:3e:1d:8c:5d:31:54:a1:9c:29:90:e8:19:d7:ff:f7:ea:
fa:ff:b3:0e:58:3a:7d:81:0d:48:3e:0c:fc:b8:56:6e:ca:9a:
c0:97:55:1f:0f:2d:c8:c5:00:d4:1d:7e:18:bc:ef:50:fa:c5:
a3:c7:6f:a6:6c:a6:63:d1:ab:09:a2:1f:ae:61:5d:f7:cc:29:
51:a4:36:81:79:74:77:af:c1:65:1f:f1:ce:f1:d8:08:5a:6f:
12:86:da:ac:f2:89:bb:2d:2e:6c:59:d3:5e:59:e8:2c:20:75:
4d:cd:91:0d:fa:be:7e:b7:d2:82:51:0c:39:4a:4e:d9:8d:c3:
5f:66:c9:0a:7b:59:8a:87:78:df:03:a0:43:01:83:ac:21:62:
a2:f1:b9:67:70:66:f9:54:03:d2:21:11:5f:ac:1c:7d:cc:f0:
63:63:65:1c:72:1e:68:32:50:3d:32:8f:41:b3:0e:be:96:36:
b4:d9:5c:dd:3f:6d:4d:d0:b3:81:23:93:db:82:56:60:84:9e:
96:63:51:63:48:a4:57:61:7e:6d:48:38:73:69:04:df:61:17:
f7:b3:10:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:33 2026 by rpki-client