This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa
File: 3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa (raw, json)
Hash identifier: go2L8bE012jCwDz0dUAO/wtTnFm0QW1WtcfRDgc7CoE=
Subject key identifier: 27:1D:E5:13:0F:1E:D6:5D:56:80:28:3B:EC:55:59:22:94:DD:C2:F0
Certificate issuer: /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial: 1238AA2E836EED8520338994D21F15DB223AB31A
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa
Signing time: Tue 06 Jan 2026 18:57:22 +0000
ROA not before: Tue 06 Jan 2026 18:52:22 +0000
ROA not after: Tue 05 Jan 2027 18:57:22 +0000
asID: 262159
IP address blocks: 170.239.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:38:aa:2e:83:6e:ed:85:20:33:89:94:d2:1f:15:db:22:3a:b3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Validity
Not Before: Jan 6 18:52:22 2026 GMT
Not After : Jan 5 18:57:22 2027 GMT
Subject: CN=271DE5130F1ED65D5680283BEC55592294DDC2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:49:49:ff:c4:00:08:6c:c3:9a:c2:cf:fc:
1b:06:b8:66:3b:47:21:d4:e2:a5:58:a0:77:54:88:
af:2b:82:df:01:60:2d:35:ec:60:02:0d:f0:bd:d4:
b0:d5:21:73:f8:75:76:23:88:62:3c:6e:ae:41:a9:
ce:25:86:e5:6c:38:4a:04:1d:1e:6e:da:da:26:de:
89:6e:62:cb:24:05:96:19:1b:7c:99:0a:3b:c4:58:
d6:c1:fa:49:3c:27:c7:d4:53:3e:d1:95:ea:a8:27:
de:cb:ac:b3:a3:c3:02:21:51:86:c2:6c:0a:08:a2:
16:d3:ce:02:27:95:66:1f:75:1f:f7:37:dc:15:31:
77:b4:0e:ff:e5:22:07:2e:13:9c:53:93:45:82:ee:
6b:c9:70:03:2f:11:2c:6a:72:fa:08:73:de:c9:5d:
d0:17:91:fe:96:2e:a8:24:01:ea:d1:59:52:89:2f:
6b:00:a9:8a:dc:93:39:c2:3e:01:33:32:e4:a7:00:
54:41:86:e8:4e:1f:46:08:77:47:95:a6:97:8e:e9:
e4:3b:ef:df:02:58:74:0b:17:a5:a2:a4:88:29:7d:
d5:18:de:6d:21:02:ec:27:5a:fa:12:a0:20:c0:8c:
1d:17:ac:42:ff:60:4b:91:da:59:36:db:a0:83:3c:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1D:E5:13:0F:1E:D6:5D:56:80:28:3B:EC:55:59:22:94:DD:C2:F0
X509v3 Authority Key Identifier:
keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
44:ab:9a:33:4a:89:d4:eb:c8:8f:01:a5:d4:70:ef:65:74:5d:
33:62:ad:94:c9:84:4e:79:f6:5d:f9:bc:c9:ed:01:6b:a1:71:
2d:2a:fd:25:fb:21:d7:66:bc:73:e5:e7:d4:7c:fe:03:26:42:
e9:46:b6:70:18:60:b6:5c:a2:2d:bc:f8:44:ba:84:ad:b6:a8:
f2:31:0b:f2:fc:5a:d8:dd:e7:74:f2:d8:07:bc:b2:9a:ad:c3:
54:1d:16:ec:e1:70:bf:f6:2b:32:28:be:59:d3:05:98:a5:aa:
a7:3b:ad:f0:2f:e1:1d:70:24:7a:47:09:af:ac:5d:99:61:07:
e1:52:28:4f:df:54:ec:ed:75:ee:95:a7:65:b0:f4:bf:fc:cf:
3f:ea:03:ce:13:64:36:37:f1:f5:0b:e0:98:b2:10:d6:1c:be:
40:a0:b7:42:31:a4:cb:73:8f:4d:68:03:64:76:de:ec:3a:8c:
f9:64:6f:28:73:65:49:f6:fa:8f:36:ca:81:48:67:e5:54:8b:
17:b2:71:ba:f5:e7:d1:9b:c5:7e:1a:38:f9:77:1c:40:46:a3:
14:8d:e4:a5:55:53:ba:8e:5e:29:72:ed:ca:f2:92:e6:82:9a:
a2:bb:18:87:c5:41:64:37:ca:b7:5c:89:2a:0a:35:d9:f8:f1:
30:ff:d6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:28 2026 by rpki-client