This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3136382e3139362e3234302e302f32322d3232203d3e20323633373434.roa
File: 3136382e3139362e3234302e302f32322d3232203d3e20323633373434.roa (raw, json)
Hash identifier: gcrW421IMAkBn+t3oinkMIdaaK+V96WwUdURr2QgSDw=
Subject key identifier: 14:3F:37:BF:49:42:BA:0D:C3:81:CE:E3:EE:2D:FE:8E:9E:11:B0:49
Certificate issuer: /CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
Certificate serial: 067CDADED1D6EE018B6650029CF4652F546F07B0
Authority key identifier: DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3136382e3139362e3234302e302f32322d3232203d3e20323633373434.roa
Signing time: Tue 06 Jan 2026 19:23:53 +0000
ROA not before: Tue 06 Jan 2026 19:18:53 +0000
ROA not after: Tue 05 Jan 2027 19:23:53 +0000
asID: 263744
IP address blocks: 168.196.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl
rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7c:da:de:d1:d6:ee:01:8b:66:50:02:9c:f4:65:2f:54:6f:07:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
Validity
Not Before: Jan 6 19:18:53 2026 GMT
Not After : Jan 5 19:23:53 2027 GMT
Subject: CN=143F37BF4942BA0DC381CEE3EE2DFE8E9E11B049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:95:53:09:9b:3f:bf:17:65:32:8f:30:40:
aa:88:c1:39:ac:43:38:5c:88:dd:a7:aa:2e:6c:84:
8b:aa:3c:2d:f9:5f:05:4c:09:df:0a:b9:8c:7e:fd:
8c:1a:b4:ae:19:99:c8:8e:0a:6e:44:f0:68:63:51:
1b:6d:9d:e2:9a:48:f7:bf:9e:02:ac:88:9b:83:c0:
bb:d8:ef:fc:a3:d5:a6:15:be:71:72:68:e9:c7:f9:
4d:34:27:f1:8e:04:fc:fc:2b:d8:c4:ef:4d:92:3f:
55:f0:1c:21:93:d5:33:a9:fa:ce:e2:d9:d2:de:23:
f9:10:88:2e:29:6d:c8:eb:9b:82:f5:70:18:2d:d7:
b5:98:b7:65:54:be:e1:36:b0:95:9c:28:0c:93:46:
d7:3c:d6:2d:07:85:b3:1e:26:27:03:dc:23:3a:e8:
a6:99:72:6e:7d:49:21:6b:29:8b:3a:8b:bf:3b:1c:
fc:c4:32:42:08:b4:41:ed:0e:f4:3d:b8:1d:78:35:
24:e6:f6:86:80:09:88:84:0a:33:a5:63:8a:9f:72:
96:3f:68:7e:dc:8a:07:ee:7d:91:09:d8:8f:87:0a:
1a:49:ec:8b:fa:fd:11:1a:ce:88:ee:ef:d8:30:7a:
73:cc:f7:8b:aa:54:47:15:d8:df:21:44:2a:28:dc:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:37:BF:49:42:BA:0D:C3:81:CE:E3:EE:2D:FE:8E:9E:11:B0:49
X509v3 Authority Key Identifier:
keyid:DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3136382e3139362e3234302e302f32322d3232203d3e20323633373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:ed:e0:de:47:d3:1d:95:6f:a4:bf:a0:72:b4:4c:a1:60:33:
2c:aa:1d:f4:f0:e6:db:ff:c7:55:40:ca:44:19:b1:f8:70:75:
ba:c9:bd:33:00:6d:54:41:f5:c2:92:a0:93:ec:fa:4e:84:ab:
d8:cc:c7:fb:5a:8d:5b:3f:a0:24:b4:37:58:77:d2:18:be:51:
59:76:09:09:02:5b:bc:8f:6e:58:a3:66:63:5a:f6:95:ff:c5:
52:43:7d:31:af:da:2b:0d:f7:8f:da:9f:85:a0:c4:86:b8:1b:
79:46:63:f2:8b:23:90:03:fe:fa:d7:97:3a:e1:66:cd:d1:57:
a3:bb:8f:ce:11:0a:ed:99:67:23:0a:f2:5d:c9:7b:cf:c2:3e:
15:dc:11:20:dc:47:50:d0:8c:43:05:3a:cb:28:32:81:c4:26:
88:42:fb:34:62:65:69:5d:b9:39:05:31:07:ef:4b:31:ac:1c:
f3:24:b3:18:90:64:c9:c8:82:58:98:46:fe:e9:84:98:98:d6:
6b:f0:2c:df:30:28:e1:0a:e9:3a:03:b2:2c:cc:15:39:1c:3a:
ed:a1:ee:d5:02:be:70:07:c9:be:93:ba:a4:61:af:69:d3:e1:
a9:f9:1c:65:60:7d:72:1f:ac:ae:06:81:70:80:4f:c9:f0:77:
45:c8:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:08:06 2026 by rpki-client