This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230362e302f32332d3234203d3e203232313232.roa
File: 3134382e3230392e3230362e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier: IwfO+XM/rKkj5LFiRASa05/rBkB+fU3bb9Pf50696tc=
Subject key identifier: EE:7F:CC:A4:A6:D7:BF:9A:1C:AF:4A:72:CF:F7:8E:48:CE:6F:1D:89
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 202DA87282A7C0C2816E4288F284620DEDDAA63B
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230362e302f32332d3234203d3e203232313232.roa
Signing time: Tue 06 Jan 2026 19:32:55 +0000
ROA not before: Tue 06 Jan 2026 19:27:55 +0000
ROA not after: Tue 05 Jan 2027 19:32:55 +0000
asID: 22122
IP address blocks: 148.209.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2d:a8:72:82:a7:c0:c2:81:6e:42:88:f2:84:62:0d:ed:da:a6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Jan 6 19:27:55 2026 GMT
Not After : Jan 5 19:32:55 2027 GMT
Subject: CN=EE7FCCA4A6D7BF9A1CAF4A72CFF78E48CE6F1D89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:98:1d:85:67:b4:90:e3:3c:a9:45:5a:ee:
47:72:62:11:22:5b:cc:a7:2e:cc:5a:d6:97:cd:02:
20:2b:5f:ef:1c:ac:52:91:3d:44:73:0f:1c:a3:d6:
45:62:d9:b0:35:1b:fb:ff:2d:80:08:17:1d:c9:dd:
d4:2c:6e:f3:cc:a7:91:1d:a5:0f:e0:12:ea:b7:7d:
59:74:6b:9e:a2:9c:1e:92:40:8f:47:2a:79:41:fb:
70:a6:56:25:36:ae:f6:ed:66:ef:bd:59:99:1b:fb:
5f:e5:78:f1:7a:11:58:43:f8:00:b4:b8:0a:a1:98:
9a:a4:b2:09:99:a8:88:e5:1e:86:41:7c:50:f8:45:
f4:52:e2:43:69:8b:65:4f:9b:2e:18:e3:35:6d:26:
90:72:1d:14:50:b5:3a:ec:ad:ce:d1:cc:07:30:93:
dd:28:e8:70:26:33:80:32:1a:3e:70:00:3e:08:eb:
78:a7:1b:d1:2d:73:db:87:68:39:69:e6:ea:43:35:
01:e3:7d:c6:08:95:0d:65:f6:98:2a:99:b6:d9:96:
fb:9a:c0:16:c5:84:fa:93:e9:ea:0a:61:76:87:12:
60:fe:4d:a2:84:b9:71:1b:54:c6:6d:38:3a:b0:52:
80:b8:27:f0:ce:a9:f3:03:68:6b:99:d5:c8:af:63:
7d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:CC:A4:A6:D7:BF:9A:1C:AF:4A:72:CF:F7:8E:48:CE:6F:1D:89
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230362e302f32332d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.206.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:b4:4e:72:ca:f7:3c:3a:2f:95:1b:0e:a6:20:6a:d6:ef:c6:
1b:91:92:78:a6:bb:0e:25:33:95:68:ec:7f:8f:22:06:4c:9b:
34:81:e2:23:0b:24:7d:7b:ee:45:83:e3:8d:96:56:68:4d:d1:
58:b5:e7:78:0c:b3:ff:01:81:a3:67:db:8b:b6:37:97:90:c9:
49:0c:0f:cf:73:3d:3d:7c:df:1b:6f:07:09:d3:5c:49:56:44:
69:1d:48:2c:ca:f9:2d:8b:07:c5:51:46:aa:eb:38:ba:4c:da:
3f:4b:b4:97:8a:52:c2:fb:d1:fc:14:73:14:aa:d6:1f:5d:58:
a8:36:d4:87:5e:8a:ef:31:1f:d2:7a:db:ac:83:01:f6:ee:98:
6b:88:78:82:16:fb:a4:24:71:2e:8f:fc:3c:85:b4:52:0f:37:
74:af:62:c4:9b:f9:8a:17:4f:5e:ac:4e:2a:e3:90:b5:af:71:
18:54:fd:72:c5:5f:ff:8c:f9:ee:40:9e:81:62:0a:16:92:90:
bf:62:8a:5c:e9:c0:42:06:c8:4f:2c:29:5a:2b:1e:1c:de:5b:
48:8d:fb:81:84:08:b8:ea:3e:df:15:b0:8f:24:2e:db:2c:47:
d6:5b:d3:8a:56:04:7d:12:26:08:0d:b2:89:9b:5a:bb:d1:1b:
d1:52:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:29:22 2026 by rpki-client