This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232302e302f32342d3234203d3e20323632313636.roa
File: 3136382e3233342e3232302e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier: tzXnHS2jYqYP/Wq/UJa4ZQB1Iv8Qa68igpvlADxHSCE=
Subject key identifier: 93:66:7F:F2:B3:DC:88:B8:9C:2C:20:1E:6D:25:BF:8D:9E:02:63:B1
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 0467D738B4D4B902F5A108A3929C9A197FB86115
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232302e302f32342d3234203d3e20323632313636.roa
Signing time: Tue 18 Nov 2025 14:53:00 +0000
ROA not before: Tue 18 Nov 2025 14:48:00 +0000
ROA not after: Tue 17 Nov 2026 14:53:00 +0000
asID: 262166
IP address blocks: 168.234.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:67:d7:38:b4:d4:b9:02:f5:a1:08:a3:92:9c:9a:19:7f:b8:61:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Nov 18 14:48:00 2025 GMT
Not After : Nov 17 14:53:00 2026 GMT
Subject: CN=93667FF2B3DC88B89C2C201E6D25BF8D9E0263B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:13:e0:63:dd:8d:cf:4d:a7:66:0a:b3:ec:
8b:7c:b1:c2:07:7d:ba:00:ad:e4:a3:da:4b:ed:c3:
0d:10:5b:af:25:f0:1f:5a:44:80:63:56:13:04:04:
d3:a7:aa:11:59:5f:36:8d:57:63:3a:4d:ac:ad:3c:
e2:48:d2:fa:00:69:ad:9a:bf:6c:e0:55:4c:8c:80:
11:21:85:b5:15:26:a1:c7:73:ac:04:79:37:62:eb:
fb:f4:87:35:c6:52:7f:6f:f6:a0:d4:f2:6c:5a:ef:
6a:12:b3:dc:9c:95:dd:a8:d3:c4:52:e0:05:99:95:
b0:54:3a:8b:69:78:e9:a8:ad:41:59:2c:a8:35:19:
d5:fd:eb:6d:1b:52:8a:37:70:d2:40:76:9e:c8:39:
99:1c:b0:33:2a:21:a8:98:66:a2:c0:73:0f:6b:8b:
c3:33:3c:11:19:c6:b8:fa:71:13:f1:18:6d:4d:1b:
00:fe:1d:87:33:52:3f:ad:5e:73:18:a8:0a:3d:1d:
a4:8d:1f:54:ba:10:be:6b:72:f0:8d:81:9b:ab:75:
fe:2d:20:37:56:35:b5:52:f7:2e:6b:16:9d:7f:ce:
b6:58:93:63:42:7d:5f:92:46:83:3c:a3:c7:5b:94:
d4:0e:bf:ee:ba:4a:ce:20:26:56:f1:47:35:99:14:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:7F:F2:B3:DC:88:B8:9C:2C:20:1E:6D:25:BF:8D:9E:02:63:B1
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232302e302f32342d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:94:16:1e:74:27:0f:ae:97:2e:e6:06:91:26:0e:e1:10:45:
6b:b5:ec:62:e0:e6:c7:79:4a:af:2f:cc:72:a6:33:a4:65:6c:
7b:eb:09:a6:bb:15:77:3f:72:d1:fb:83:60:73:e9:b1:b5:e9:
8d:79:51:74:b7:73:23:ba:c4:a7:e0:13:c7:a5:ef:83:5e:2f:
19:bf:6f:6a:fb:1f:2c:43:dc:8c:81:ee:16:f3:77:a5:84:e1:
2b:d9:17:c6:0b:49:8b:ef:e5:21:4d:3b:b1:27:7d:2a:57:68:
33:0d:c6:ed:b2:d1:da:41:ab:9a:cc:fe:04:2b:e5:46:63:db:
89:7f:ff:61:64:1c:dd:0b:e2:61:61:d3:f1:50:5a:bf:8e:4c:
6f:49:4c:d4:33:f9:85:df:93:9c:9e:c9:d9:ac:43:b1:6c:cd:
33:0f:13:37:68:0e:2c:36:e1:ed:2f:e0:bf:2d:ed:bb:72:db:
5e:c6:b2:e1:fc:ea:5a:e0:3d:80:1a:15:53:20:bb:23:d0:2d:
4e:e6:27:3e:39:03:0f:b9:d9:ee:bc:9a:0f:5f:67:24:57:53:
a7:5c:5c:33:21:96:84:6b:7e:45:04:fd:c2:3d:a0:5d:b1:da:
8b:f7:3d:c0:79:e1:01:45:3e:77:99:b6:45:68:e4:08:82:1f:
63:dd:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:48:56 2025 by rpki-client