This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230382e302f32312d3234203d3e20323632313636.roa
File: 3136382e3233342e3230382e302f32312d3234203d3e20323632313636.roa (raw, json)
Hash identifier: kVOzmiGnUEPbgmLRv9m1bHZcMPpPOKglSKd8Dl7NPRY=
Subject key identifier: 76:0E:24:CC:3C:57:1C:64:FE:92:06:BC:5C:37:8F:35:8D:7F:EE:2D
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 7381BDD5D75B20356993CA99C77F27B8FA8154B6
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230382e302f32312d3234203d3e20323632313636.roa
Signing time: Tue 06 Jan 2026 18:58:05 +0000
ROA not before: Tue 06 Jan 2026 18:53:05 +0000
ROA not after: Tue 05 Jan 2027 18:58:05 +0000
asID: 262166
IP address blocks: 168.234.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:81:bd:d5:d7:5b:20:35:69:93:ca:99:c7:7f:27:b8:fa:81:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Jan 6 18:53:05 2026 GMT
Not After : Jan 5 18:58:05 2027 GMT
Subject: CN=760E24CC3C571C64FE9206BC5C378F358D7FEE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:ae:22:36:e6:b8:12:3e:fa:a0:13:2b:9f:
72:d1:55:b9:15:a8:38:54:3f:bd:86:7e:92:3e:0b:
5a:3c:c0:f9:79:ef:0d:88:46:cb:27:93:61:10:d6:
e9:08:aa:14:3a:a2:26:3b:98:e0:83:07:43:96:fc:
80:49:0b:0f:1a:37:5a:f7:ce:e9:a3:62:d4:e0:99:
7b:04:10:52:c6:d2:31:cd:92:83:c8:60:49:02:7c:
74:5b:37:fc:54:16:ad:9b:24:68:4a:54:7a:74:a0:
27:60:96:cd:8a:66:fc:f6:f7:59:02:3a:12:47:50:
a1:a9:ed:d2:a7:ea:60:f5:dd:05:20:10:c4:1e:c9:
d8:6c:a8:6c:4b:d3:8e:3c:80:ee:d7:da:47:f2:2b:
37:97:c4:d7:de:20:97:cc:7a:44:aa:3a:d2:ab:e2:
b1:43:d5:93:ce:f2:ce:07:3c:6e:b7:66:d6:31:36:
ca:3f:71:1d:54:9c:38:3e:28:69:58:12:3d:82:64:
a7:30:b2:5d:04:c6:0e:e2:f2:aa:2e:b0:3a:59:df:
cb:23:1e:63:93:ab:9d:62:fb:69:10:91:4d:57:60:
91:c6:36:40:de:bf:5d:f4:ba:cf:9e:85:d9:73:a1:
b3:e1:75:17:29:15:19:fa:4f:2c:ac:47:bb:29:92:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0E:24:CC:3C:57:1C:64:FE:92:06:BC:5C:37:8F:35:8D:7F:EE:2D
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230382e302f32312d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.208.0/21
Signature Algorithm: sha256WithRSAEncryption
38:54:6e:dc:4e:19:5b:94:44:1c:24:15:54:f1:70:a0:5c:d8:
96:b3:8e:fe:7c:21:27:43:63:36:15:21:70:8b:b5:5d:2a:6f:
ee:2c:12:ca:cc:db:df:24:64:24:a0:81:61:b0:47:d9:ba:88:
df:c9:e8:10:b6:09:b9:4b:28:b7:be:3b:81:f6:20:41:72:bc:
e2:26:cd:df:1c:17:1d:42:6a:20:06:5e:88:1a:21:c2:63:41:
9f:b0:03:c0:c6:7a:d3:c4:0f:78:fd:94:e5:7c:77:a2:6e:67:
56:22:e0:93:47:c1:71:a8:49:a9:5c:88:99:0c:46:1a:7c:69:
75:7a:9f:7d:bd:ea:cf:30:bd:0e:ea:34:40:7d:c8:29:cc:21:
49:54:df:54:49:fb:52:b7:cd:89:37:5a:41:23:8c:41:f6:b4:
a2:f9:9c:21:b7:41:c7:e4:02:e2:db:6f:29:23:b6:d0:9f:29:
24:2e:10:15:07:fa:9c:4b:50:38:ac:b6:a0:6a:bb:eb:fa:6e:
69:ed:e9:32:cd:45:fb:dc:28:56:3a:74:7d:c3:a0:45:f3:03:
7f:69:1d:d6:db:f0:ab:79:5e:c3:2a:b8:41:ab:a1:a0:de:1a:
10:c4:8a:aa:b0:50:ab:97:0b:2c:9c:cf:eb:d8:d2:9e:24:c7:
0a:7a:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:11:39 2026 by rpki-client