This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35362e302f32342d3234203d3e20323731383134.roa
File: 3137302e3234362e35362e302f32342d3234203d3e20323731383134.roa (raw, json)
Hash identifier: VX7uLtOcJ7/morKJWDarxZaxnkAw9YcaiQ99uxjHNe0=
Subject key identifier: F7:CB:3D:D2:7F:2C:90:98:AD:7B:FD:DC:67:F6:62:E6:8A:74:24:BE
Certificate issuer: /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial: 23FF6FEE7FF667ADD537D092F68E7EB431557A2B
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35362e302f32342d3234203d3e20323731383134.roa
Signing time: Tue 06 Jan 2026 18:59:36 +0000
ROA not before: Tue 06 Jan 2026 18:54:36 +0000
ROA not after: Tue 05 Jan 2027 18:59:36 +0000
asID: 271814
IP address blocks: 170.246.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ff:6f:ee:7f:f6:67:ad:d5:37:d0:92:f6:8e:7e:b4:31:55:7a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
Validity
Not Before: Jan 6 18:54:36 2026 GMT
Not After : Jan 5 18:59:36 2027 GMT
Subject: CN=F7CB3DD27F2C9098AD7BFDDC67F662E68A7424BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:25:df:75:50:54:ca:04:5a:d5:b0:f2:af:
a7:05:58:10:ff:cd:1e:bb:80:e9:d1:79:19:bc:e4:
53:f6:ab:c9:55:3c:2a:b1:56:2b:0b:b1:31:ff:f1:
09:3b:23:49:fe:d8:d3:be:b5:20:af:86:4c:11:f7:
a6:6a:c3:8d:5b:19:9c:e6:9f:94:f4:5e:ca:d3:08:
b4:2a:3b:64:f6:1e:26:79:05:5d:22:94:bb:5e:4d:
ab:90:a8:dc:1b:8e:29:2a:38:ca:f7:88:98:b9:89:
fa:65:57:ed:f9:0d:db:a1:44:93:82:cd:30:96:1e:
3d:71:78:9b:94:c7:41:91:1b:b2:d1:cc:9d:5c:28:
5f:f9:51:c4:06:54:11:fd:cb:26:74:15:52:b7:e5:
bf:06:79:a4:0d:12:96:3c:e0:95:c9:1c:7e:b2:aa:
68:45:a3:d8:c7:02:3b:70:79:a5:28:6f:c6:2a:76:
eb:f9:77:8c:e9:9a:41:1d:db:1c:9c:02:b9:f5:f2:
8d:a2:66:cc:02:07:9f:63:aa:18:64:75:0f:17:3d:
55:48:9c:82:08:67:46:2a:f6:99:32:34:ad:d6:5a:
91:fe:17:ce:9e:68:38:d9:d1:82:45:e3:c3:06:99:
b1:03:d3:82:a7:27:32:9e:eb:54:72:0d:d5:01:cf:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:3D:D2:7F:2C:90:98:AD:7B:FD:DC:67:F6:62:E6:8A:74:24:BE
X509v3 Authority Key Identifier:
keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35362e302f32342d3234203d3e20323731383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8b:08:9f:99:d0:11:77:13:1b:7b:c1:e7:b1:e8:85:b5:b7:
73:03:59:4d:45:b1:e3:09:62:dd:4c:4b:ce:fa:94:79:7b:59:
3e:6b:53:c9:be:7d:a8:c5:13:32:a6:f1:7e:15:4c:a2:8c:80:
32:bb:14:30:21:aa:69:4f:47:ea:2a:cd:a4:15:f7:1c:12:bb:
d9:0d:9c:7c:ab:42:45:13:f3:c1:aa:f3:82:98:f0:dd:bb:7b:
15:f2:4d:a5:a3:12:7d:ed:9d:48:e7:0f:01:f1:bc:c0:93:8c:
06:20:f6:a6:e9:0e:61:3f:d7:8e:9a:5c:90:64:4d:19:1f:fe:
d8:92:bb:9b:03:73:30:d9:0e:3e:e3:9f:ec:ce:6b:51:92:39:
08:ab:39:da:c3:3f:eb:4d:53:95:68:60:a9:5a:4b:bb:89:36:
8f:12:8b:c0:41:e5:9f:5e:26:79:b3:fd:8e:1f:82:cb:99:1f:
4c:42:9c:a5:aa:d8:6b:1d:6d:70:8f:fc:65:2c:c9:e6:37:ee:
fa:cd:d9:cc:a4:84:6f:d8:83:2b:7e:db:43:33:57:ca:0c:57:
fc:0e:ee:70:77:de:b9:98:41:00:ba:53:94:57:e4:b2:55:e4:
8a:4b:cb:dd:1c:ba:e1:32:50:61:54:a6:e6:37:37:52:74:ed:
0b:9b:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:46 2026 by rpki-client