This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234382e302f32332d3233203d3e203232313232.roa
File: 3134382e3230392e3234382e302f32332d3233203d3e203232313232.roa (raw, json)
Hash identifier: fq4YUE/N4CE30gxQtDeLehrgu+Ngor7uZtjA25QbreM=
Subject key identifier: D7:70:28:4C:DC:00:0D:1A:4B:36:31:91:46:64:1A:E1:E5:E5:49:8B
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 0994F86CFEA28E30D911711AEE33F0EE99B3E6C4
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234382e302f32332d3233203d3e203232313232.roa
Signing time: Tue 06 Jan 2026 19:32:48 +0000
ROA not before: Tue 06 Jan 2026 19:27:48 +0000
ROA not after: Tue 05 Jan 2027 19:32:48 +0000
asID: 22122
IP address blocks: 148.209.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 06:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:94:f8:6c:fe:a2:8e:30:d9:11:71:1a:ee:33:f0:ee:99:b3:e6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Jan 6 19:27:48 2026 GMT
Not After : Jan 5 19:32:48 2027 GMT
Subject: CN=D770284CDC000D1A4B36319146641AE1E5E5498B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:e0:7c:95:10:d6:c9:07:0e:00:fc:33:a2:
d7:d3:7f:43:bc:fc:ec:0a:25:bb:12:0e:87:b1:0e:
6b:c6:21:cd:13:72:39:f8:6d:fc:0c:8a:16:5a:81:
6c:7d:19:e9:32:bd:43:6d:ce:e9:26:f0:1c:55:1c:
bc:47:97:e8:ce:21:23:a5:3b:3e:5b:8d:3c:6a:93:
53:8b:bd:33:80:eb:e7:a9:87:6b:f1:eb:3a:5b:3d:
60:da:7e:75:e6:c0:23:53:2d:e9:bd:be:72:99:23:
92:0f:61:46:8f:c8:e8:f7:1f:4b:cf:82:51:2a:6a:
8e:8c:c4:36:bd:a7:ea:9a:b2:79:5b:3a:d2:c0:1d:
d2:36:e7:0f:af:56:f3:0b:71:52:75:e9:f8:4e:d9:
c4:71:9a:eb:08:ad:08:71:e2:4d:39:a2:e8:67:8d:
01:35:f5:bb:bf:ad:32:f4:1b:b1:22:58:7a:08:89:
bb:e3:08:5a:e3:3d:30:c2:1e:0a:4b:af:0a:af:3b:
0e:36:a4:7f:df:c2:ff:a0:07:25:88:15:68:f6:bd:
03:86:0e:a9:28:75:63:e1:78:bb:1f:ae:df:3b:9d:
d3:be:52:46:fb:2d:6a:e2:20:4d:32:f8:77:2e:90:
18:e7:29:46:d8:80:1d:48:0b:f2:53:11:62:c6:58:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:70:28:4C:DC:00:0D:1A:4B:36:31:91:46:64:1A:E1:E5:E5:49:8B
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234382e302f32332d3233203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.248.0/23
Signature Algorithm: sha256WithRSAEncryption
57:76:2b:c5:1d:01:fa:3d:c1:58:0d:d5:58:28:20:7c:c0:83:
63:61:4c:5a:af:2d:54:1d:ac:d9:be:23:1c:df:90:22:fb:0b:
16:0d:b3:32:5f:6e:93:6f:ec:c7:12:78:4a:83:fa:a0:ba:85:
60:9b:3a:ee:2a:67:3a:8a:a0:89:5c:4d:b0:eb:c1:b8:97:6b:
53:0a:54:3e:65:b5:82:90:81:28:11:66:14:f5:f9:f4:09:3a:
7a:74:18:88:49:ac:86:17:12:48:b0:6c:05:77:4c:f9:e1:ee:
07:20:30:a1:90:8b:84:a7:2a:64:ac:98:1d:30:3b:55:86:bf:
27:29:4e:d7:19:30:31:08:af:10:7b:64:03:9f:dc:24:98:2c:
06:9d:b1:5c:c5:0e:86:39:65:65:30:01:06:c5:6f:89:f2:08:
3b:02:4e:90:68:0b:7f:86:f9:8c:7a:6c:c9:1a:1e:f0:e4:92:
fc:c7:a8:07:5a:3e:92:0e:c7:bd:c2:f9:d5:fc:a0:6a:ca:9a:
c9:64:bb:44:bf:c9:c3:0e:4b:45:35:ef:27:6e:b1:7c:32:64:
ba:5a:52:99:1d:91:e9:73:92:57:d2:11:00:62:5d:6e:29:56:
6e:4a:8b:5d:71:5f:4b:83:ab:52:29:0b:95:76:ec:83:60:68:
ee:a8:c6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:35 2026 by rpki-client