This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3137302e3233382e36362e302f32342d3234203d3e20323634373938.roa
File: 3137302e3233382e36362e302f32342d3234203d3e20323634373938.roa (raw, json)
Hash identifier: B+HGGrK5M0Cy4lh9hn52DtaYEuQSA/kJYFdSyoiuDN0=
Subject key identifier: 08:70:6B:C4:E1:FD:54:BA:E0:D4:AC:A0:1F:F7:04:7B:BA:63:85:E8
Certificate issuer: /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial: 4BED86276CADF72FCBF41E6828FBD5328DE58435
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3137302e3233382e36362e302f32342d3234203d3e20323634373938.roa
Signing time: Mon 17 Nov 2025 11:52:48 +0000
ROA not before: Mon 17 Nov 2025 11:47:48 +0000
ROA not after: Mon 16 Nov 2026 11:52:48 +0000
asID: 264798
IP address blocks: 170.238.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 03:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ed:86:27:6c:ad:f7:2f:cb:f4:1e:68:28:fb:d5:32:8d:e5:84:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Validity
Not Before: Nov 17 11:47:48 2025 GMT
Not After : Nov 16 11:52:48 2026 GMT
Subject: CN=08706BC4E1FD54BAE0D4ACA01FF7047BBA6385E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:d5:c8:07:d7:82:9b:cd:72:4e:4d:1b:5e:
45:ef:d2:36:c8:b3:52:00:18:e5:58:1a:f4:d5:ba:
e6:fe:33:74:72:37:12:4a:72:50:6b:2a:86:13:ca:
66:08:af:be:e3:84:79:7a:4a:8c:35:0c:e3:0b:b2:
4b:2c:3b:d4:e3:06:21:f1:94:f6:48:fb:d3:7d:1d:
5f:e7:de:3f:92:88:66:04:8a:82:bd:67:95:62:2e:
d2:dd:61:7f:c4:d1:55:3c:d2:cc:43:d1:dd:6d:aa:
b9:8d:ce:45:22:41:a3:1b:91:fa:5d:df:fa:9b:6a:
cb:b3:88:3d:73:12:75:48:16:ce:45:ae:0f:0e:d0:
29:2a:39:68:91:99:52:2f:11:67:51:5a:89:63:71:
3d:51:42:52:30:41:1e:3e:d6:ae:70:5a:4f:3d:92:
78:51:d6:71:79:6d:88:49:14:56:5b:0d:b8:7d:c4:
19:a0:a9:f4:f1:64:f8:b8:bf:93:73:8f:40:e4:f4:
bd:02:f4:fd:42:c8:66:02:4d:7f:b8:5e:56:00:64:
92:31:dc:13:68:22:48:38:be:38:42:d3:4d:35:4f:
9c:1d:5c:6a:77:c8:88:fd:68:e3:9d:1e:3f:92:89:
9c:72:96:e9:ec:a2:e7:8d:67:88:56:fd:b1:2c:8b:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:70:6B:C4:E1:FD:54:BA:E0:D4:AC:A0:1F:F7:04:7B:BA:63:85:E8
X509v3 Authority Key Identifier:
keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3137302e3233382e36362e302f32342d3234203d3e20323634373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.66.0/24
Signature Algorithm: sha256WithRSAEncryption
30:40:4c:6a:7a:af:ef:22:96:56:5f:bd:4d:e8:c5:dd:62:4f:
32:8d:b0:a3:8f:77:ec:cf:46:9e:9b:78:51:53:1a:c2:73:50:
e6:57:02:73:e9:fb:92:26:56:3d:a9:4f:47:31:75:b6:16:13:
bc:69:c5:b0:d6:2e:b6:d6:8b:28:a4:32:8a:3f:9e:fd:96:d5:
a6:c4:35:f8:e1:fc:77:59:bf:b6:7a:a4:49:29:9d:89:61:a6:
45:6a:b5:24:ad:fc:2d:b8:2c:f9:f5:80:6e:2b:16:fc:09:f2:
9e:b9:db:a0:5e:06:22:7c:70:1f:3c:73:3c:a8:64:7d:97:0a:
29:32:a2:71:ed:c2:26:a2:dd:f9:5a:82:54:78:a3:e3:98:77:
cb:c0:ec:35:31:76:28:c7:48:a7:d2:05:40:0c:76:ce:f3:c6:
3b:28:1d:53:d2:e4:30:db:0d:c6:a7:b9:f0:9e:8b:5c:ab:67:
49:8d:c6:29:fb:1e:fe:16:95:00:dd:08:95:10:66:4c:de:57:
87:26:82:d8:e8:66:db:d8:d7:81:8e:ad:23:1d:44:2e:5c:91:
ca:b7:e3:fc:2c:79:4c:13:45:14:9a:55:5e:fa:5c:74:e9:e6:
ec:6d:88:33:62:d0:29:b2:e6:05:34:45:9d:bc:91:5d:f0:68:
ed:cf:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:41:34 2025 by rpki-client