This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e302e302f32302d3234203d3e20323632313636.roa
File: 3136382e3233342e302e302f32302d3234203d3e20323632313636.roa (raw, json)
Hash identifier: Wdt0liGL6k4w+1YcPvBRBPAmBQ9qvZjjBD3gbM/t840=
Subject key identifier: 1C:8D:DB:6A:46:77:68:C1:AF:02:B0:3C:0B:CC:73:5A:34:12:FA:B4
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 0F26D5C5E9261104AEC8F05FBEF959185A28476B
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e302e302f32302d3234203d3e20323632313636.roa
Signing time: Tue 06 Jan 2026 18:58:05 +0000
ROA not before: Tue 06 Jan 2026 18:53:05 +0000
ROA not after: Tue 05 Jan 2027 18:58:05 +0000
asID: 262166
IP address blocks: 168.234.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:26:d5:c5:e9:26:11:04:ae:c8:f0:5f:be:f9:59:18:5a:28:47:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Jan 6 18:53:05 2026 GMT
Not After : Jan 5 18:58:05 2027 GMT
Subject: CN=1C8DDB6A467768C1AF02B03C0BCC735A3412FAB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:55:13:47:33:d4:55:61:b0:c5:70:5d:31:
ab:4e:7f:f6:22:7d:a8:fa:d1:98:21:e0:89:50:24:
8b:4a:51:ec:ef:3f:92:6d:fd:9e:16:77:3e:91:8e:
69:33:2a:a7:f1:e7:2f:7b:d1:3b:7c:77:b3:74:ca:
ab:86:43:44:0e:33:8c:39:1d:85:de:57:00:c5:89:
a8:0f:55:49:93:d5:f6:8b:f9:a9:a0:fa:a5:a6:2f:
9c:d9:ca:ef:8e:bc:48:58:e1:5b:6d:e1:2c:e5:4d:
32:42:d2:40:33:66:af:71:ae:e2:51:7d:5e:4d:75:
cb:b7:f7:51:e0:9b:ad:98:ae:ff:a1:33:4e:0e:ff:
a4:86:d0:38:0c:bb:68:dc:42:94:71:07:9a:e5:be:
3b:96:24:ba:ca:ca:e3:7c:bc:fc:7d:ab:b1:90:69:
e0:42:7d:bf:a0:fa:1e:d4:f2:53:0b:20:b8:b5:85:
db:0b:c6:6f:a6:7c:52:03:6a:7b:66:36:c2:57:c5:
30:30:31:63:fc:57:2d:00:20:f0:cd:4b:3d:11:06:
55:54:27:27:ba:c6:9d:ad:39:a7:50:85:57:40:2a:
95:46:d0:53:85:af:47:c7:3b:58:86:53:40:0c:92:
81:82:04:be:17:55:6f:a9:43:c7:ee:94:ad:d6:94:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8D:DB:6A:46:77:68:C1:AF:02:B0:3C:0B:CC:73:5A:34:12:FA:B4
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e302e302f32302d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:3a:f9:7f:d3:0d:a0:a5:1b:61:9d:c6:d2:81:96:31:ca:5f:
b1:56:e0:32:44:8b:54:af:77:06:ef:9b:87:d2:57:9f:01:1a:
5e:ed:b7:d0:08:44:12:93:01:31:bc:8c:9e:6e:4e:46:89:83:
6b:be:a9:cf:e3:96:b2:c4:46:7c:40:1b:46:d1:2d:a5:e5:14:
24:b0:fc:37:28:45:26:31:bc:fe:d8:a3:b3:88:fb:11:d9:ee:
51:35:62:4a:4e:8f:61:d6:1e:3b:59:64:ad:b2:19:31:e6:46:
d4:22:eb:a5:25:ba:e1:78:46:66:51:ef:28:26:02:0c:2f:5f:
c2:98:2a:00:ac:8c:cb:5d:1e:3a:8b:97:ab:1b:6e:96:db:6a:
a1:09:01:95:1a:64:d8:12:6f:40:84:76:01:05:91:0f:da:f9:
a5:4a:32:fd:2b:bd:c7:53:fd:51:f6:01:f0:a7:2a:8c:86:38:
64:d9:c9:35:44:3d:c0:52:bf:76:79:97:d3:64:8c:ee:8d:d4:
ca:2b:58:40:ba:0b:88:ae:cc:d6:cd:01:df:4f:07:5d:31:d4:
d9:d5:a7:85:3b:9b:dc:fa:f0:25:f1:b1:27:f0:e3:b9:6d:2d:
91:15:8b:f3:75:4b:d7:8e:39:d2:9e:e3:08:ea:8e:bd:c1:9c:
c1:c8:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:27:26 2026 by rpki-client