This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3137302e3234362e3135322e302f32322d3234203d3e203138383430.roa
File: 3137302e3234362e3135322e302f32322d3234203d3e203138383430.roa (raw, json)
Hash identifier: ZaOt+G7ipNDi9QV6gePchS1dWVp1sC6p4Cy4Fhpl+nA=
Subject key identifier: 6B:60:95:6B:DD:BD:28:18:9D:A2:93:54:DD:90:95:D5:5C:4D:6B:36
Certificate issuer: /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
Certificate serial: 4829EC1F12011DA20D8CBA37892D51BDD5B49972
Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3137302e3234362e3135322e302f32322d3234203d3e203138383430.roa
Signing time: Tue 06 Jan 2026 19:26:26 +0000
ROA not before: Tue 06 Jan 2026 19:21:26 +0000
ROA not after: Tue 05 Jan 2027 19:26:26 +0000
asID: 18840
IP address blocks: 170.246.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl
rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:29:ec:1f:12:01:1d:a2:0d:8c:ba:37:89:2d:51:bd:d5:b4:99:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
Validity
Not Before: Jan 6 19:21:26 2026 GMT
Not After : Jan 5 19:26:26 2027 GMT
Subject: CN=6B60956BDDBD28189DA29354DD9095D55C4D6B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:90:05:dd:2a:0c:e1:0a:ee:46:6b:dd:15:
98:42:73:ae:4d:7b:ef:59:0c:ed:69:2d:73:2e:de:
48:8d:bc:65:e7:62:4b:76:44:ac:9f:c5:fb:d2:5b:
fa:c7:c3:1e:8e:03:de:96:0c:bc:8e:80:4f:76:fa:
d8:cf:19:47:86:43:26:b7:ca:ef:e2:83:33:71:9b:
ab:ca:44:15:6c:f2:25:b2:56:0c:44:09:73:58:03:
1c:4f:98:76:61:f5:e6:d1:02:9c:c0:5c:cd:84:ea:
bb:66:5a:a4:3b:e8:61:16:bd:40:17:2c:d3:bb:c9:
8b:32:42:8f:3a:bd:f0:6d:0a:82:02:de:7d:32:c0:
df:86:e0:15:89:57:f6:f6:a8:d6:25:ce:15:9e:34:
9e:db:88:f0:c6:88:7a:52:c6:b5:d7:40:81:8e:2b:
72:a4:c6:bf:88:d7:41:54:b8:ca:95:6e:a8:2b:76:
aa:67:db:97:30:5c:76:c6:75:67:3c:06:f6:88:df:
8a:12:a4:ed:aa:ef:fd:16:a8:50:23:a3:34:84:30:
b1:a3:63:31:ec:b0:3e:1c:51:2d:df:13:a6:37:e1:
f6:2a:fb:d9:ca:27:31:b6:f4:70:5e:d6:a5:8f:08:
9b:5f:bf:4b:09:91:3d:1a:3e:16:51:6f:77:2b:5e:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:60:95:6B:DD:BD:28:18:9D:A2:93:54:DD:90:95:D5:5C:4D:6B:36
X509v3 Authority Key Identifier:
keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3137302e3234362e3135322e302f32322d3234203d3e203138383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:5e:31:26:12:79:a9:73:93:ed:96:0a:b6:71:2e:eb:a5:62:
25:92:07:e4:4c:89:2e:6c:9d:da:4a:c2:50:91:71:d5:89:36:
18:22:92:3d:ac:1c:b9:52:76:5f:71:55:bc:c9:8b:d5:7a:f8:
94:a3:2d:1a:06:15:8a:68:51:63:22:d4:74:1c:d5:95:2b:ef:
ee:cb:cb:d8:16:ca:09:ea:b5:ac:56:b4:ef:de:7f:67:4a:fd:
99:f3:47:3a:5a:2b:5c:41:c9:b3:24:92:bb:00:b7:53:b6:20:
91:58:03:b7:ba:97:f2:c1:af:8c:81:76:cf:68:57:46:93:66:
8c:a2:ff:f4:ae:e2:3b:db:40:53:a4:5e:d3:36:57:1a:de:c2:
fb:ee:21:9b:5a:94:16:c7:44:a1:f1:6e:4e:cd:41:94:a7:e6:
80:85:10:45:90:4e:ae:b4:83:ae:98:8f:4d:e9:03:3f:c7:a5:
28:49:b0:b2:0f:65:1b:cf:6a:1f:c1:a1:e7:2d:50:14:ef:c2:
66:6d:fd:3e:52:a5:f8:5d:3c:34:70:20:a7:75:a3:dc:6f:62:
da:c7:d2:48:ba:57:fb:aa:e5:e7:2e:1e:07:8e:ed:77:cd:6e:
ec:5f:ae:e0:82:82:17:c7:46:da:cc:ae:e0:fc:3f:44:61:85:
85:b3:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:07:12 2026 by rpki-client