This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa
File: 3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa (raw, json)
Hash identifier: 922q3btruiIXQhAvJVjGIIstF0euMc4LFtaCNhdP5y4=
Subject key identifier: 52:AB:6C:BF:0C:16:EF:2C:FB:D0:0D:51:B0:63:03:BB:85:56:C7:E3
Certificate issuer: /CN=3424CAC085E77B82A8878925FC49A646944DB380
Certificate serial: 4B326050C17D4759F618A32C59314EFE414597BD
Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa
Signing time: Tue 06 Jan 2026 19:31:32 +0000
ROA not before: Tue 06 Jan 2026 19:26:32 +0000
ROA not after: Tue 05 Jan 2027 19:31:32 +0000
asID: 263799
IP address blocks: 168.195.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:32:60:50:c1:7d:47:59:f6:18:a3:2c:59:31:4e:fe:41:45:97:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380
Validity
Not Before: Jan 6 19:26:32 2026 GMT
Not After : Jan 5 19:31:32 2027 GMT
Subject: CN=52AB6CBF0C16EF2CFBD00D51B06303BB8556C7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b7:31:3d:c3:d2:af:ae:42:fe:bb:80:13:a9:
01:40:d8:a3:21:86:93:b8:17:a7:f3:2e:b1:d3:b6:
6e:93:97:bf:70:76:4e:3e:3b:c3:a9:b6:06:11:55:
83:1b:60:ad:37:c7:0f:e4:6a:22:08:9b:2e:aa:56:
72:96:ef:99:77:bc:cf:ca:e9:e8:73:f1:31:52:18:
90:f4:51:64:62:9d:d4:cb:74:b9:b1:24:5b:59:df:
61:c9:6d:47:1f:07:18:ac:4a:26:7d:92:27:8d:c0:
31:25:9d:51:e3:53:78:63:78:52:93:7c:56:b3:31:
ea:b0:3a:59:e3:a9:ce:fd:cd:fa:82:27:a4:a5:56:
4b:ef:7f:22:fd:be:7e:ee:ed:ef:fe:da:df:00:5e:
96:c0:e8:99:57:a8:6c:86:38:b3:dc:04:08:e4:62:
7f:ee:93:36:26:76:88:48:8c:bd:a0:a5:a0:bd:bb:
e0:7f:07:d5:a2:73:2c:2a:26:e8:06:f8:37:4b:3a:
08:de:16:cd:16:f8:a5:49:32:cb:5a:c9:1b:e3:50:
d5:64:d4:f6:15:f0:6e:d0:1d:91:59:25:96:57:5d:
b9:b6:8f:fe:21:a3:06:1e:23:b6:5f:27:80:e5:3e:
cd:10:09:bd:10:ae:0d:90:ab:a4:16:3b:92:51:92:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AB:6C:BF:0C:16:EF:2C:FB:D0:0D:51:B0:63:03:BB:85:56:C7:E3
X509v3 Authority Key Identifier:
keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.216.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:76:cc:90:c3:f4:9b:8c:37:da:f9:d7:af:2e:41:4d:ef:9d:
19:9d:a2:fa:54:18:20:2a:1f:6b:75:38:43:f4:8d:92:8b:c2:
84:95:28:e1:a2:cf:ca:63:2f:96:0a:fe:0a:3a:37:20:92:0a:
ad:4a:b4:2f:dd:08:cd:ba:92:40:ce:92:14:48:42:9a:d1:19:
ec:60:0c:77:64:88:7f:6f:8f:69:fc:cc:d1:95:57:c9:13:2a:
4b:16:78:87:50:bc:4b:05:f5:ff:64:c7:54:8f:23:73:98:55:
3e:4f:6a:e4:19:9b:50:61:2e:cf:70:78:2f:66:d0:74:b6:14:
d1:7a:01:f1:f0:98:cc:30:0c:24:87:a2:f2:1d:c2:2a:4f:f2:
e3:8d:60:1c:27:92:c2:94:7b:5a:b1:bb:4e:5a:64:80:38:33:
92:2a:6b:5f:1e:bf:2f:15:51:59:15:66:76:e0:ae:db:60:16:
f2:ee:4e:57:07:4c:85:05:a0:7a:c3:14:46:4d:4b:5e:52:2b:
c4:62:b4:b3:43:fe:da:7d:b4:dc:d4:ac:77:b9:15:14:e4:10:
2c:33:37:59:1b:17:00:01:89:76:56:d1:e4:ff:75:1b:91:c5:
5a:d4:59:f5:df:3c:f0:bc:93:b3:a9:64:9a:16:b7:a2:f8:4e:
84:bd:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:39 2026 by rpki-client