This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa
File: 3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa (raw, json)
Hash identifier: pC+ZPffVAzXjb0RZRuF4k9vWuByL0NUon1qIWdPCXWY=
Subject key identifier: 9C:9F:1F:F3:97:CC:02:24:37:60:B0:BF:B2:1C:F2:27:67:36:06:4D
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 7558BA4A7E4F713C474CC2739B4EEEEE79DE9C7F
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa
Signing time: Tue 06 Jan 2026 19:32:50 +0000
ROA not before: Tue 06 Jan 2026 19:27:50 +0000
ROA not after: Tue 05 Jan 2027 19:32:50 +0000
asID: 22122
IP address blocks: 148.209.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:58:ba:4a:7e:4f:71:3c:47:4c:c2:73:9b:4e:ee:ee:79:de:9c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Jan 6 19:27:50 2026 GMT
Not After : Jan 5 19:32:50 2027 GMT
Subject: CN=9C9F1FF397CC02243760B0BFB21CF2276736064D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:6e:24:bd:9a:8d:6c:e5:bb:80:40:e2:2d:
6d:0e:7d:67:fd:46:1d:2f:a4:20:c8:5d:4e:13:b5:
0e:24:ab:ab:7f:19:71:ac:6e:02:2e:23:14:0f:8a:
eb:86:df:ee:49:d4:0b:dd:24:48:b2:26:8b:55:72:
75:1d:54:2c:33:d0:1e:7c:15:9a:b4:6d:a8:6d:ed:
59:f1:ec:6a:8f:eb:79:d6:3c:f2:7a:6b:a2:b7:fe:
fd:13:03:d7:53:64:e3:a7:41:3b:d3:bd:7c:39:22:
75:6d:53:ee:1f:91:3f:b1:ed:01:84:6e:55:90:0e:
74:21:19:2b:29:2e:8f:a0:2d:7b:c2:70:6b:03:d8:
ba:69:25:2f:76:c2:1c:26:9f:53:51:e6:9e:b3:bc:
51:9e:9b:d7:85:eb:d1:9c:ee:ee:7f:cb:3a:eb:3b:
69:83:53:b0:ac:da:b2:f2:0b:65:4c:a2:b2:6c:72:
e4:1c:2e:eb:90:03:b5:4d:33:33:98:ca:ba:87:dc:
4f:92:19:fa:48:5d:af:1f:a8:7d:e6:a9:8f:12:08:
f7:1b:71:17:f0:f0:e5:29:61:bd:ec:4a:d0:36:d5:
08:84:55:bf:cb:cb:ec:64:92:29:89:53:a2:ea:4e:
b0:71:b0:3a:b5:6d:65:c3:fb:2a:62:7b:9f:40:a9:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9F:1F:F3:97:CC:02:24:37:60:B0:BF:B2:1C:F2:27:67:36:06:4D
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.142.0/23
Signature Algorithm: sha256WithRSAEncryption
26:1c:5f:77:99:5e:82:fd:85:24:bb:87:eb:19:3b:2d:22:ba:
f6:17:21:77:1a:93:e2:bb:a6:76:bb:1a:ff:1e:07:9e:47:6b:
96:44:3b:c4:02:9f:0c:0c:04:ef:2b:6a:47:d6:9a:af:a4:1e:
61:22:70:a5:ba:64:7c:c7:66:7e:9f:c1:73:77:c8:30:02:dd:
50:37:50:e9:5c:ca:5d:b7:4c:12:72:84:d5:48:0f:d1:56:1d:
32:34:25:de:af:61:31:95:7f:61:2d:57:a9:bb:36:94:4b:92:
3f:f5:c2:39:1e:3c:de:86:2a:30:d5:4b:fb:76:e3:32:2c:57:
03:3d:89:fc:b8:3a:91:6f:0f:2e:6f:65:22:46:1b:5a:95:09:
ef:e6:de:93:0f:71:cc:1a:a2:71:5c:a0:bb:78:45:85:60:96:
2a:fd:43:27:be:27:e8:5f:ab:a5:25:2f:3b:ba:01:c3:f9:60:
49:80:7d:d1:ad:43:41:4f:80:9c:a4:fe:51:1f:32:6c:99:c0:
e6:4f:82:12:cf:91:76:7a:00:b0:78:c7:3a:4f:af:e8:12:7d:
aa:f1:75:e0:65:fd:09:e8:fe:a5:02:21:06:a7:14:57:88:52:
e5:fc:79:88:00:3d:b9:19:6c:d3:79:61:45:b2:a4:64:b5:51:
ca:66:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:29:28 2026 by rpki-client