This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/3137302e3234362e3137362e302f32322d3232203d3e20323635363438.roa
File: 3137302e3234362e3137362e302f32322d3232203d3e20323635363438.roa (raw, json)
Hash identifier: hAN7QdR4nK1JOtrYJ4ghBQ4ncaRPQsqwlOHJyZF7Q+c=
Subject key identifier: BE:94:81:D3:12:63:0F:28:66:89:36:37:27:5A:32:AE:45:8B:EA:61
Certificate issuer: /CN=1655015D0CFFC00B88C76A99B46DC5A567F0A0B0
Certificate serial: 5123F7870441CB99A5541BA52FA0DBD14A5372BD
Authority key identifier: 16:55:01:5D:0C:FF:C0:0B:88:C7:6A:99:B4:6D:C5:A5:67:F0:A0:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/3137302e3234362e3137362e302f32322d3232203d3e20323635363438.roa
Signing time: Tue 06 Jan 2026 20:55:16 +0000
ROA not before: Tue 06 Jan 2026 20:50:16 +0000
ROA not after: Tue 05 Jan 2027 20:55:16 +0000
asID: 265648
IP address blocks: 170.246.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.crl
rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:23:f7:87:04:41:cb:99:a5:54:1b:a5:2f:a0:db:d1:4a:53:72:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1655015D0CFFC00B88C76A99B46DC5A567F0A0B0
Validity
Not Before: Jan 6 20:50:16 2026 GMT
Not After : Jan 5 20:55:16 2027 GMT
Subject: CN=BE9481D312630F2866893637275A32AE458BEA61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:da:4f:94:6d:6c:7f:57:20:b0:49:98:96:
0f:a3:53:12:b1:6a:fe:13:bb:6b:b8:d1:22:09:aa:
74:21:f9:54:f3:33:5a:6b:5c:a8:3f:6c:d6:79:94:
40:ef:7b:74:cb:4e:ae:ea:01:c9:85:b3:52:02:e7:
1f:5d:cb:0c:c8:95:61:64:20:36:0d:9e:81:48:f0:
b6:f6:77:7d:97:12:ec:8d:77:53:b4:c8:73:9b:cc:
cb:15:db:de:7c:ec:ea:49:67:58:3d:83:7a:94:f7:
9e:61:9c:26:d8:de:5e:2c:b1:a9:bd:60:3b:8f:dd:
33:69:c3:e4:a6:cf:e6:cf:75:8b:5f:ab:d1:d9:ac:
f8:90:4e:c0:9b:d6:57:76:0b:e1:b3:f2:41:21:de:
0e:a1:b0:1e:e9:43:0e:16:4f:12:7f:57:78:f2:ea:
fa:9b:2c:e5:57:e5:9f:7d:b2:e9:33:b7:0b:cf:8f:
6f:ec:eb:57:5e:52:ff:7c:6e:f0:c6:aa:5d:2a:8b:
9a:73:3b:22:18:02:04:17:18:13:d9:ac:28:aa:7b:
63:9a:2a:ae:a4:e8:57:57:27:a5:cb:01:88:e0:6f:
c6:3d:97:81:70:68:78:2c:23:90:8a:eb:2b:59:6c:
61:b1:b3:86:54:a5:3a:c2:df:0d:b8:b0:5a:9d:84:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:94:81:D3:12:63:0F:28:66:89:36:37:27:5A:32:AE:45:8B:EA:61
X509v3 Authority Key Identifier:
keyid:16:55:01:5D:0C:FF:C0:0B:88:C7:6A:99:B4:6D:C5:A5:67:F0:A0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/3137302e3234362e3137362e302f32322d3232203d3e20323635363438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.176.0/22
Signature Algorithm: sha256WithRSAEncryption
65:3d:66:4b:9c:58:06:b2:78:bf:34:e5:99:68:83:80:0c:2d:
fa:b7:8c:66:46:d6:8b:fe:4c:c7:e4:2d:bc:84:c5:3a:17:a8:
6f:35:47:67:ef:43:53:50:ef:44:24:82:c0:00:0a:b7:be:9b:
72:96:b4:99:f4:34:1f:90:2b:22:bc:eb:fa:06:54:80:62:0c:
45:fb:02:35:09:eb:16:1b:42:6d:6b:d8:dc:6e:7b:83:09:2e:
52:8d:e4:39:c3:06:99:cb:72:ad:e4:cb:c3:d6:28:17:ca:58:
39:2b:bc:61:36:f1:69:35:2c:b1:75:8c:cb:73:d7:c6:d0:1b:
e2:22:71:8e:76:a8:8b:d8:33:14:7d:08:4e:ea:0d:b6:c9:28:
a8:22:db:3a:7e:7e:a0:82:5e:44:53:63:e4:7b:22:b3:1f:75:
e3:d7:8c:91:2d:2b:84:f7:52:84:66:ee:aa:02:c7:2c:65:01:
3c:81:73:c7:d8:11:f8:cc:67:38:94:ee:d7:1d:a6:a5:bf:f3:
b9:fa:aa:66:88:ce:6d:0b:51:2a:10:6a:fc:bd:d7:9e:40:dc:
e6:46:f0:2a:72:89:db:fc:c4:84:19:b5:84:c9:16:9f:8a:aa:
8e:aa:10:e1:5a:af:e3:08:3f:c2:9f:97:76:44:89:93:42:29:
7c:c6:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:49 2026 by rpki-client