This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e33322e302f32302d3234203d3e20323632313636.roa
File: 3136382e3233342e33322e302f32302d3234203d3e20323632313636.roa (raw, json)
Hash identifier: NUT7LqAyBbbtU7RfWDxiGUUHSRblwrZKQMzsJb2+0mw=
Subject key identifier: 63:D0:14:CC:5D:70:42:9D:29:51:F2:15:AE:90:61:09:23:0B:20:05
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 7E1309753B1A51E1701A5B89DCC1C8B06A6DBAF0
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e33322e302f32302d3234203d3e20323632313636.roa
Signing time: Tue 06 Jan 2026 18:58:08 +0000
ROA not before: Tue 06 Jan 2026 18:53:08 +0000
ROA not after: Tue 05 Jan 2027 18:58:08 +0000
asID: 262166
IP address blocks: 168.234.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:13:09:75:3b:1a:51:e1:70:1a:5b:89:dc:c1:c8:b0:6a:6d:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Jan 6 18:53:08 2026 GMT
Not After : Jan 5 18:58:08 2027 GMT
Subject: CN=63D014CC5D70429D2951F215AE906109230B2005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:1a:28:5d:7f:40:79:d6:8f:07:cc:9a:58:
9e:b0:71:06:f4:8d:63:f9:f4:f7:f0:47:a5:d7:56:
2b:83:55:0e:6d:f6:ff:92:27:8a:70:c0:3d:b3:a8:
bd:44:51:cf:eb:6f:6d:01:ab:d2:12:f2:31:35:0d:
11:6d:81:a6:ec:a8:2c:51:e3:ae:2f:ac:c9:e6:72:
90:af:b3:03:88:9f:a4:7a:a2:2f:70:91:a1:66:5b:
64:a5:d1:d2:1a:61:c1:2b:29:76:93:3c:4c:28:13:
ea:58:0f:24:0b:66:e6:9a:94:ab:10:13:6a:47:c2:
fa:78:4f:8f:9b:99:65:c5:b9:06:cf:b1:ed:fc:b0:
d9:8c:7d:02:8b:62:02:f3:e3:fd:94:20:6f:12:0f:
9d:fa:8f:4b:41:10:ec:a7:af:03:d6:d5:cd:03:30:
a8:36:18:5e:d0:06:68:e8:65:e7:cb:82:d9:63:cf:
bc:31:da:22:40:5c:7f:cd:6c:a4:dc:fa:25:3f:63:
e8:8a:df:b6:3b:0a:c2:d5:fe:b6:1a:78:27:44:b4:
55:4a:14:3c:e8:36:1e:3f:a3:d2:fd:31:7d:58:27:
44:ab:ae:de:6c:a0:a1:82:27:0d:2b:d6:ee:3b:e6:
d1:fb:ba:75:59:11:af:ae:9a:0a:72:ff:7a:6a:5b:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D0:14:CC:5D:70:42:9D:29:51:F2:15:AE:90:61:09:23:0B:20:05
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e33322e302f32302d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.32.0/20
Signature Algorithm: sha256WithRSAEncryption
78:aa:b2:13:f7:32:d8:ab:aa:5e:26:b4:7f:1e:ce:d9:ee:b0:
ad:23:aa:c1:9a:76:52:9e:a7:55:b7:81:ca:bc:53:d0:ea:8b:
48:a3:61:e6:1a:d2:b0:53:0a:4d:e3:8d:9e:45:c2:f5:24:f5:
9d:f5:d4:e9:10:7d:c5:80:cb:14:a1:9b:f2:47:01:33:cf:00:
28:0f:b4:0f:d3:2b:3b:eb:bf:e0:df:e9:62:24:a4:ed:5a:ca:
8d:49:9a:4d:4b:93:e2:60:f3:af:dc:a2:20:39:a7:f1:d2:dd:
24:30:3c:4a:c6:21:ca:b2:d4:63:ba:9c:47:29:60:fe:a9:29:
c6:e9:af:53:e1:82:e2:74:de:ae:4e:63:b8:90:02:cd:cd:5f:
9b:5c:4b:ac:a9:ba:a7:30:12:f4:26:3f:24:aa:a5:be:8d:dc:
b7:2a:62:d0:29:58:55:f6:03:8b:07:2b:19:87:69:c4:7f:18:
56:1c:78:99:07:8a:a6:c8:93:61:0a:b9:b9:ff:23:cf:dc:ca:
ae:1b:d5:42:b1:3c:53:b4:92:d7:9b:f6:b4:a7:5b:65:54:be:
41:d4:89:2e:03:49:88:8d:11:a5:b2:81:bc:ba:e6:9f:1f:6e:
cb:e0:c1:cb:17:f0:c0:e6:92:c1:da:b8:cb:01:dd:96:42:43:
fe:55:1f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:50:47 2026 by rpki-client