This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa
File: 3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa (raw, json)
Hash identifier: r+jTGv9UcXFIvNSxPWm0Zf+n9UszY3ATT8X1jwDSvV8=
Subject key identifier: BC:AA:45:2A:05:C6:95:C8:7F:32:C2:32:3E:52:65:18:8D:A4:35:2D
Certificate issuer: /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial: 5046DD8639FFA3E04CB201D0240AE2C9D5A03D30
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa
Signing time: Tue 06 Jan 2026 19:41:52 +0000
ROA not before: Tue 06 Jan 2026 19:36:52 +0000
ROA not after: Tue 05 Jan 2027 19:41:52 +0000
asID: 269750
IP address blocks: 168.194.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:46:dd:86:39:ff:a3:e0:4c:b2:01:d0:24:0a:e2:c9:d5:a0:3d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Validity
Not Before: Jan 6 19:36:52 2026 GMT
Not After : Jan 5 19:41:52 2027 GMT
Subject: CN=BCAA452A05C695C87F32C2323E5265188DA4352D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:0a:b1:80:7b:a0:dd:b8:73:35:91:0f:7f:
00:90:e8:27:8b:61:4b:cf:69:7c:64:e8:74:80:39:
36:cd:dc:5d:60:fa:62:b3:e8:17:ea:58:c4:dc:80:
e2:dc:99:91:ef:e2:f9:58:88:94:22:0a:96:80:ff:
7e:71:b1:4e:40:43:41:a8:31:dc:90:ca:7e:77:d1:
5c:e0:5d:08:69:54:69:94:f8:f7:24:e0:cc:79:01:
c3:7b:a7:3f:9c:fc:99:0e:c5:2d:82:ca:76:d1:55:
d7:5f:41:56:48:a7:85:ca:9e:98:5b:62:7e:c1:fe:
61:02:3c:64:83:5c:30:46:7c:83:09:32:46:fa:ab:
d9:78:b1:95:d3:db:d2:d8:be:f4:20:c2:64:4d:04:
34:ff:e2:72:49:df:10:e4:93:f3:fb:b7:a9:66:dc:
3d:81:1f:eb:05:bf:d2:fc:53:37:9e:5a:ec:e8:06:
d7:46:42:b4:94:8e:84:9f:e3:17:27:b4:7f:01:aa:
ae:24:9e:bb:e2:4c:1d:31:4c:43:46:c0:7c:4c:ae:
7a:83:54:af:a4:30:78:30:25:bf:29:a7:17:af:9c:
5d:f7:25:71:e1:98:6a:5a:5c:0b:29:cd:22:15:a5:
ff:73:05:9f:f1:e0:01:fb:c3:60:13:b3:f7:f4:2f:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AA:45:2A:05:C6:95:C8:7F:32:C2:32:3E:52:65:18:8D:A4:35:2D
X509v3 Authority Key Identifier:
keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:12:dd:04:3b:d9:69:fb:26:3c:c8:58:b1:01:72:d8:18:3c:
2a:1f:ef:b4:13:af:b2:6e:06:b5:04:75:6a:d9:5b:b9:6b:72:
88:ab:6a:dc:20:b6:4a:a4:07:d0:f9:68:e9:21:9e:5f:a1:e8:
c5:19:46:a8:89:55:c5:d9:a3:ed:32:36:e4:20:21:02:24:9b:
20:c9:cc:e7:ee:6f:78:d8:08:dc:5a:1b:b1:9c:91:72:e7:94:
ca:33:37:5b:33:a3:05:ad:46:05:1f:06:5a:b4:85:14:c9:64:
5d:3b:80:1c:59:94:7e:3f:ca:a7:d6:71:b5:cf:f7:0b:8c:da:
41:04:20:36:76:8b:ed:94:1e:b0:cc:75:17:f0:b2:4e:cf:3a:
b6:82:b0:92:5f:8c:c3:e0:75:6b:01:7a:0d:ba:66:9e:46:d8:
28:a1:fd:d2:74:01:57:ff:49:6a:e7:a2:65:f6:5d:eb:7d:cc:
36:05:cb:0f:fc:1d:ff:fe:cd:62:5b:1b:b7:f9:9d:a5:e0:5f:
50:aa:09:b2:d6:64:12:5f:c0:81:09:37:87:9c:70:9a:41:34:
78:cc:6f:88:0c:39:02:57:8f:91:b4:50:ed:2d:8f:61:ff:b9:
37:df:31:06:9a:94:3e:9c:e7:a4:bc:c0:aa:ad:a5:df:71:86:
91:84:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:57:23 2026 by rpki-client