This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa
File: 3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier: bapm38hMXZNJ7I4Sp8rVFqCGh8kGn8Owe13hSQhn8MY=
Subject key identifier: FB:CA:F2:02:19:CA:2B:4D:2F:A2:FC:95:06:17:ED:E9:12:3F:4B:DE
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 7C099D9DEE4C6A60D806724F52C2DD85CCBAD718
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa
Signing time: Tue 06 Jan 2026 18:58:14 +0000
ROA not before: Tue 06 Jan 2026 18:53:14 +0000
ROA not after: Tue 05 Jan 2027 18:58:14 +0000
asID: 262166
IP address blocks: 168.234.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:09:9d:9d:ee:4c:6a:60:d8:06:72:4f:52:c2:dd:85:cc:ba:d7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Jan 6 18:53:14 2026 GMT
Not After : Jan 5 18:58:14 2027 GMT
Subject: CN=FBCAF20219CA2B4D2FA2FC950617EDE9123F4BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:13:77:25:9f:c3:89:c4:36:e7:d4:7c:a1:
2c:e6:29:21:42:c2:cf:32:96:8f:bf:d4:7c:49:18:
05:6f:d0:8e:67:1e:84:31:eb:07:1f:58:5d:27:5b:
1d:47:70:c2:e4:e0:f7:3e:78:8d:0f:c3:d4:37:47:
54:9b:a8:aa:ef:ed:6f:ff:b8:15:f5:48:db:68:8e:
d5:55:28:69:0e:9b:d1:79:11:9b:ec:3f:69:43:df:
dd:79:43:9a:37:1e:08:7a:99:4e:b4:50:a5:0e:f4:
81:25:18:3e:7b:47:f3:bb:20:c8:39:69:e1:aa:ca:
13:8f:6e:8b:55:24:41:14:4a:d0:ae:e3:ee:13:c6:
71:2e:b7:12:53:80:be:d6:7a:b4:94:47:b1:e4:57:
34:a9:86:9e:66:9c:91:f3:3f:a0:e8:12:a4:ab:82:
bb:d5:18:37:3b:1d:69:84:e3:07:bb:3b:11:93:f8:
e6:df:69:ad:b6:3c:14:cb:11:6a:4d:b7:d5:5c:e0:
79:4c:bf:ce:15:5d:24:a2:2a:2a:14:76:64:d9:85:
a3:69:d8:d3:dd:a1:35:45:37:74:09:8d:a4:40:55:
8d:57:90:ea:a8:1a:3d:e7:9f:5a:c3:cf:e6:6a:d5:
66:0a:ec:f9:64:49:66:8c:94:1f:e5:18:e5:17:b3:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CA:F2:02:19:CA:2B:4D:2F:A2:FC:95:06:17:ED:E9:12:3F:4B:DE
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.19.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2c:25:aa:3d:75:73:54:fd:58:9a:0d:7c:37:8d:99:de:7d:
13:56:09:3d:bf:9d:85:38:81:65:1b:33:06:af:05:ff:91:df:
ce:86:a5:5e:4f:6a:75:2b:5f:ea:d8:7f:a8:73:ec:80:9f:68:
a7:dc:15:27:48:eb:22:33:9b:da:16:2b:3e:cb:b5:e8:92:1a:
2c:58:e0:71:28:72:0a:43:c8:f7:d1:0c:a5:61:2b:b7:2b:8d:
4c:1a:db:c3:d1:79:4c:e5:6b:6c:d9:30:e4:fa:bd:53:a3:23:
33:80:32:cc:08:6f:00:1a:bc:b7:9c:9d:5f:50:bf:d6:c5:63:
be:7b:4d:33:d5:6e:ca:8d:24:55:65:08:9d:66:8d:d4:7f:2d:
7b:50:25:1d:12:a9:a9:3d:3e:8b:d1:fe:fb:83:b2:d0:33:62:
e1:86:9c:65:ac:49:60:dc:0f:4d:7d:74:45:66:4e:b0:3b:e5:
c3:14:2c:0a:d1:a4:19:21:93:51:8c:a7:c6:0b:47:27:04:25:
b7:9c:32:a1:51:e6:88:53:ed:4f:a9:31:a1:82:6d:6d:a2:0e:
b4:2c:34:fd:08:44:27:0f:91:6a:de:b9:f6:99:29:f9:73:95:
66:a9:89:4c:d9:a2:ec:ba:5c:76:71:1c:01:b1:d4:f3:b0:eb:
2e:da:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:13:16 2026 by rpki-client