This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138382e302f32332d3234203d3e20323632313636.roa
File: 3136382e3233342e3138382e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier: PQo24PN8OJluUmcHJiAl21238TF360b/tdLVCcv8FRU=
Subject key identifier: EF:0A:41:BC:40:57:D8:89:41:37:2F:33:75:80:5B:A2:C6:42:5C:FF
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 3CA94F5FC11C1DEB5394DB7A3E074D9F93BD5559
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138382e302f32332d3234203d3e20323632313636.roa
Signing time: Tue 06 Jan 2026 18:58:08 +0000
ROA not before: Tue 06 Jan 2026 18:53:08 +0000
ROA not after: Tue 05 Jan 2027 18:58:08 +0000
asID: 262166
IP address blocks: 168.234.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a9:4f:5f:c1:1c:1d:eb:53:94:db:7a:3e:07:4d:9f:93:bd:55:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Jan 6 18:53:08 2026 GMT
Not After : Jan 5 18:58:08 2027 GMT
Subject: CN=EF0A41BC4057D88941372F3375805BA2C6425CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0b:52:cd:00:4f:cc:1a:78:8a:14:87:93:dc:
03:d8:b4:db:9c:50:a6:82:b2:80:1f:d0:bc:a1:84:
5d:15:5e:ed:5e:02:3a:a6:db:cb:6e:68:99:b9:06:
32:c0:34:ef:bd:b4:d2:80:39:ba:c1:67:d9:a9:7b:
ff:0f:be:da:86:29:d5:78:68:34:9f:58:99:90:db:
98:d9:98:16:1f:ae:f5:ad:91:4c:12:b8:41:32:a8:
f1:e1:2c:ee:bb:d0:21:8d:34:cc:a7:41:00:08:43:
2b:d3:69:91:5c:90:5c:9f:6c:d6:ed:6c:d8:64:37:
3e:12:c2:7f:0d:40:70:1d:92:93:1c:d9:28:07:16:
48:85:49:c3:3e:84:ac:c5:62:a2:53:6a:71:88:f2:
2c:f6:86:4d:d4:a3:20:2e:3f:02:e5:38:b0:4c:75:
5e:a9:ca:0a:f2:4f:7b:de:c4:f9:ee:93:a0:e7:93:
6b:30:64:48:48:c8:0d:60:44:57:00:14:cd:95:a9:
17:15:e9:43:77:a6:15:d6:2d:21:45:b3:c6:a4:97:
73:40:e1:03:88:03:56:4d:4a:ef:62:ad:13:21:45:
e1:52:07:73:c6:2f:98:ec:6c:2c:e7:ac:b0:b1:0c:
60:f8:2b:1c:e8:d8:4f:02:ed:f4:2f:3f:da:6e:67:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0A:41:BC:40:57:D8:89:41:37:2F:33:75:80:5B:A2:C6:42:5C:FF
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138382e302f32332d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.188.0/23
Signature Algorithm: sha256WithRSAEncryption
29:63:a3:fb:55:af:07:ac:dd:91:17:31:b2:ed:10:a2:c0:4e:
ac:86:64:db:01:4f:22:21:22:08:46:5e:d3:1f:75:80:25:aa:
09:1f:05:f0:dc:7e:23:e4:cd:21:98:66:d6:58:a5:a8:9a:50:
cb:74:7e:13:64:8b:a3:0d:ba:f4:71:23:de:ac:b2:94:d5:d0:
9e:77:74:6d:94:d4:95:e9:52:ba:84:82:6b:8f:63:c9:45:54:
88:52:d1:97:62:5a:43:7b:de:de:c8:0e:04:eb:20:06:f1:79:
ad:23:fc:c5:5f:2e:23:e5:db:de:c8:5d:23:73:bf:65:f8:f9:
88:3c:14:e1:60:b9:87:7d:69:f7:29:bb:f4:56:8f:26:f1:2b:
0c:41:b2:63:b6:0e:4f:cb:90:58:b6:97:0b:c2:f0:5e:2d:cb:
9a:de:7d:42:92:1c:f2:9e:76:31:43:16:78:4b:5b:c5:36:8e:
23:8f:4e:42:da:12:fc:c6:f6:a3:f5:68:cb:dc:6e:ca:67:ee:
25:ff:87:06:3c:88:9e:83:8f:84:92:c1:65:45:aa:1b:66:33:
6e:d5:ef:90:58:99:07:55:08:fa:2f:65:3e:cf:81:67:a8:67:
13:68:89:f2:9a:2b:0b:cd:6b:43:36:dc:ec:66:47:ac:41:5f:
30:34:74:b1
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUPKlPX8EcHetTlNt6PgdNn5O9VVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1
MzkyQkJDMzAeFw0yNjAxMDYxODUzMDhaFw0yNzAxMDUxODU4MDhaMDMxMTAvBgNV
BAMTKEVGMEE0MUJDNDA1N0Q4ODk0MTM3MkYzMzc1ODA1QkEyQzY0MjVDRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkC1LNAE/MGniKFIeT3APYtNuc
UKaCsoAf0LyhhF0VXu1eAjqm28tuaJm5BjLANO+9tNKAObrBZ9mpe/8PvtqGKdV4
aDSfWJmQ25jZmBYfrvWtkUwSuEEyqPHhLO670CGNNMynQQAIQyvTaZFckFyfbNbt
bNhkNz4Swn8NQHAdkpMc2SgHFkiFScM+hKzFYqJTanGI8iz2hk3UoyAuPwLlOLBM
dV6pygryT3vexPnuk6Dnk2swZEhIyA1gRFcAFM2VqRcV6UN3phXWLSFFs8akl3NA
4QOIA1ZNSu9irRMhReFSB3PGL5jsbCznrLCxDGD4Kxzo2E8C7fQvP9puZ+2bAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU7wpBvEBX2IlBNy8zdYBbosZCXP8wHwYDVR0j
BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4
RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5
RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5
NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE
NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMTM4Mzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGo
6rwwDQYJKoZIhvcNAQELBQADggEBACljo/tVrwes3ZEXMbLtEKLATqyGZNsBTyIh
IghGXtMfdYAlqgkfBfDcfiPkzSGYZtZYpaiaUMt0fhNki6MNuvRxI96sspTV0J53
dG2U1JXpUrqEgmuPY8lFVIhS0ZdiWkN73t7IDgTrIAbxea0j/MVfLiPl297IXSNz
v2X4+Yg8FOFguYd9afcpu/RWjybxKwxBsmO2Dk/LkFi2lwvC8F4ty5refUKSHPKe
djFDFnhLW8U2jiOPTkLaEvzG9qP1aMvcbspn7iX/hwY8iJ6Dj4SSwWVFqhtmM27V
75BYmQdVCPovZT7PgWeoZxNoifKaKwvNa0M23OxmR6xBXzA0dLE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:21 2026 by rpki-client