This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38392e302f32342d3234203d3e20323637383537.roa
File: 3137302e37392e38392e302f32342d3234203d3e20323637383537.roa (raw, json)
Hash identifier: LzjJOchjqj8wxx3yOcRGJO0DRxamj5FQVAqwGTrA/S0=
Subject key identifier: 98:60:25:B8:13:65:71:C3:90:FA:08:4A:05:F6:AF:95:B8:0A:04:3F
Certificate issuer: /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial: 31D5584AAB6B3F568AA4D36698BC2FB1C4C7EFD4
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38392e302f32342d3234203d3e20323637383537.roa
Signing time: Tue 06 Jan 2026 19:22:48 +0000
ROA not before: Tue 06 Jan 2026 19:17:48 +0000
ROA not after: Tue 05 Jan 2027 19:22:48 +0000
asID: 267857
IP address blocks: 170.79.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 20:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d5:58:4a:ab:6b:3f:56:8a:a4:d3:66:98:bc:2f:b1:c4:c7:ef:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Validity
Not Before: Jan 6 19:17:48 2026 GMT
Not After : Jan 5 19:22:48 2027 GMT
Subject: CN=986025B8136571C390FA084A05F6AF95B80A043F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:45:d5:cf:da:43:4b:c8:ec:99:5c:c9:2a:5b:
b5:9c:50:3e:e7:23:db:e3:66:41:71:c9:6c:68:6a:
7a:80:26:aa:55:31:9b:69:0e:d9:0b:0c:fa:71:04:
2f:32:bc:a6:3b:bd:19:b5:ed:0e:fe:39:1b:46:36:
ce:c0:c8:56:92:c5:41:96:29:0d:5a:cb:81:8a:6e:
80:45:2a:25:91:7e:3e:e3:ea:cf:d6:4a:26:a7:95:
2d:db:e7:1c:9c:cf:f2:ce:be:17:ea:77:33:2b:fe:
13:30:58:9d:98:3a:68:02:95:bc:54:b1:e3:59:9c:
ed:b5:1e:71:0f:6b:8e:02:77:f0:f8:8f:7e:2c:fe:
49:9c:85:ae:e5:94:57:d1:17:07:ea:8c:20:43:20:
d5:c8:f2:c6:ad:b4:2e:e9:f8:aa:35:a1:c6:be:b8:
53:96:b1:93:11:8c:6f:7f:88:7d:06:9d:cb:64:c8:
34:d0:c7:ae:e9:ae:d5:74:7b:54:c6:67:1b:aa:ab:
ed:fb:2d:a9:2b:77:47:0f:f8:ec:71:56:cc:72:6c:
78:f1:fe:6c:1d:4f:16:5c:c5:a8:f7:8b:08:65:22:
9b:2a:b9:f2:7e:6b:97:54:40:51:ae:df:5b:86:0d:
8b:0c:d3:c1:72:a1:77:39:de:5c:12:a6:d0:26:73:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:25:B8:13:65:71:C3:90:FA:08:4A:05:F6:AF:95:B8:0A:04:3F
X509v3 Authority Key Identifier:
keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38392e302f32342d3234203d3e20323637383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.89.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e9:bf:f0:88:d0:43:8f:c2:f3:3c:c6:78:a3:a6:dc:5e:1d:
b0:3b:b4:4d:d7:12:42:69:0e:6b:31:3f:ef:4b:d4:39:bf:79:
fb:5a:f1:1f:88:40:1a:c9:08:ed:48:39:79:f0:47:58:4b:56:
35:41:79:5d:7c:8a:7b:47:84:f5:c7:38:80:55:d8:26:66:dd:
14:af:d4:b7:4e:15:97:ae:67:61:09:2f:5a:d3:e0:11:15:1f:
d9:ad:52:d0:50:9a:fe:9f:81:65:7e:80:4e:e9:07:b7:f6:8c:
f5:e2:2c:fc:2a:05:5f:a4:9a:d8:c6:fb:49:c8:e2:d7:d3:12:
d3:a7:7a:3d:92:47:82:af:b3:f2:24:4a:a5:cd:1d:05:92:51:
1a:fe:1e:b1:11:04:d8:5c:00:72:9e:34:40:ec:7e:43:cf:95:
cc:f5:05:79:9b:9b:03:b2:5a:e5:75:31:e9:37:c4:12:9e:73:
eb:48:73:80:c4:c0:d6:d3:4f:e7:38:71:48:f2:ff:58:ba:f2:
ab:61:55:4d:8c:5f:98:b7:76:f2:13:a2:66:08:a7:eb:32:c7:
ea:2a:1a:25:f1:c3:e3:6a:ca:e1:44:d1:da:a2:f0:7c:0b:c0:
ad:d0:0e:1c:17:bb:11:21:6e:06:d3:77:c2:c2:34:b8:ff:96:
36:f7:e2:94
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMdVYSqtrP1aKpNNmmLwvscTH79QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENDNUFBNEJFREVBOUE4M0JERTg4MjJBNzc0NzIxMTBC
N0E1N0M3NjAeFw0yNjAxMDYxOTE3NDhaFw0yNzAxMDUxOTIyNDhaMDMxMTAvBgNV
BAMTKDk4NjAyNUI4MTM2NTcxQzM5MEZBMDg0QTA1RjZBRjk1QjgwQTA0M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwRdXP2kNLyOyZXMkqW7WcUD7n
I9vjZkFxyWxoanqAJqpVMZtpDtkLDPpxBC8yvKY7vRm17Q7+ORtGNs7AyFaSxUGW
KQ1ay4GKboBFKiWRfj7j6s/WSianlS3b5xycz/LOvhfqdzMr/hMwWJ2YOmgClbxU
seNZnO21HnEPa44Cd/D4j34s/kmcha7llFfRFwfqjCBDINXI8sattC7p+Ko1oca+
uFOWsZMRjG9/iH0GnctkyDTQx67prtV0e1TGZxuqq+37Lakrd0cP+OxxVsxybHjx
/mwdTxZcxaj3iwhlIpsqufJ+a5dUQFGu31uGDYsM08FyoXc53lwSptAmc8FzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmGAluBNlccOQ+ghKBfavlbgKBD8wHwYDVR0j
BBgwFoAUDMWqS+3qmoO96IIqd0chELelfHYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODM4OUI1RTNCMThCN0RBRjUyRDAzMzUzRERFRDI5NUE4
MDk2OTY0M0Q5MkREOUQ4MkRBRUZFOUQwQjczOTc1LzAvMENDNUFBNEJFREVBOUE4
M0JERTg4MjJBNzc0NzIxMTBCN0E1N0M3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0M1QUE0QkVERUE5QTgzQkRF
ODgyMkE3NzQ3MjExMEI3QTU3Qzc2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjgzODlCNUUzQjE4QjdEQUY1MkQwMzM1M0RERUQyOTVBODA5Njk2NDNE
OTJERDlEODJEQUVGRTlEMEI3Mzk3NS8wLzMxMzczMDJlMzczOTJlMzgzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM4MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKpPWTAN
BgkqhkiG9w0BAQsFAAOCAQEAcum/8IjQQ4/C8zzGeKOm3F4dsDu0TdcSQmkOazE/
70vUOb95+1rxH4hAGskI7Ug5efBHWEtWNUF5XXyKe0eE9cc4gFXYJmbdFK/Ut04V
l65nYQkvWtPgERUf2a1S0FCa/p+BZX6ATukHt/aM9eIs/CoFX6Sa2Mb7Scji19MS
06d6PZJHgq+z8iRKpc0dBZJRGv4esREE2FwAcp40QOx+Q8+VzPUFeZubA7Ja5XUx
6TfEEp5z60hzgMTA1tNP5zhxSPL/WLryq2FVTYxfmLd28hOiZgin6zLH6ioaJfHD
42rK4UTR2qLwfAvArdAOHBe7ESFuBtN3wsI0uP+WNvfilA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:23 2026 by rpki-client