This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3137302e3233382e32302e302f32322d3234203d3e20323633373639.roa
File: 3137302e3233382e32302e302f32322d3234203d3e20323633373639.roa (raw, json)
Hash identifier: hUQeed7/L5bpNGFIhfvu/0wXwGryuVBLIDvpG3CULmc=
Subject key identifier: 84:B7:B1:FE:D7:BB:D9:BB:15:30:B0:21:71:F5:F7:E3:79:DA:72:5B
Certificate issuer: /CN=1A49578DBEACE7E265A25522F50005E6878A40E4
Certificate serial: 1DAA65F13992748317FE4705A87AE5516E0B1F8E
Authority key identifier: 1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3137302e3233382e32302e302f32322d3234203d3e20323633373639.roa
Signing time: Tue 06 Jan 2026 19:21:29 +0000
ROA not before: Tue 06 Jan 2026 19:16:29 +0000
ROA not after: Tue 05 Jan 2027 19:21:29 +0000
asID: 263769
IP address blocks: 170.238.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl
rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:aa:65:f1:39:92:74:83:17:fe:47:05:a8:7a:e5:51:6e:0b:1f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A49578DBEACE7E265A25522F50005E6878A40E4
Validity
Not Before: Jan 6 19:16:29 2026 GMT
Not After : Jan 5 19:21:29 2027 GMT
Subject: CN=84B7B1FED7BBD9BB1530B02171F5F7E379DA725B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:e4:b3:37:c2:37:1e:f7:87:45:73:18:3a:
19:9c:c6:a5:1f:d1:2f:7f:cb:ec:ae:33:0f:d6:4e:
5f:5d:48:5d:8a:b2:a7:fe:46:07:1a:11:35:8f:1f:
2d:6c:35:b4:aa:95:ff:c3:c5:f2:42:19:13:1f:4b:
3d:5e:fe:f7:72:ca:cb:c8:f5:d7:0e:a8:60:77:dc:
53:25:26:99:dc:ff:9d:d8:60:0f:77:da:53:e7:f0:
2e:fa:fa:69:cf:ca:5c:d1:d9:35:f4:55:56:ff:69:
11:53:f8:4f:22:4e:4b:3d:d8:a7:47:f5:ed:b4:16:
f3:04:52:9e:02:fa:2d:dd:ac:5f:bc:9e:ca:df:69:
74:48:9b:49:d6:f5:ea:ab:c5:6d:38:b6:6e:ff:c7:
52:6b:6a:44:6f:35:84:e1:5f:03:aa:c2:12:b4:6f:
d5:c5:b1:b9:9c:ce:ed:9c:9e:a9:dd:f7:85:1f:ed:
a1:73:ba:1a:61:5a:a3:5b:23:9e:05:0c:99:99:9a:
9e:a2:41:54:da:c5:3b:e0:33:03:43:9d:15:35:c3:
08:f6:46:7b:90:a2:e2:40:62:6e:76:98:c8:94:51:
f0:8c:a3:9c:37:6e:44:0c:09:69:2c:e7:2b:70:5f:
bc:57:74:eb:d0:39:f8:71:37:c9:a0:ad:03:b8:30:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:B1:FE:D7:BB:D9:BB:15:30:B0:21:71:F5:F7:E3:79:DA:72:5B
X509v3 Authority Key Identifier:
keyid:1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3137302e3233382e32302e302f32322d3234203d3e20323633373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.20.0/22
Signature Algorithm: sha256WithRSAEncryption
80:70:af:a8:c0:1f:a3:35:a5:d3:91:a1:5e:1c:01:88:1e:62:
61:7f:7e:d5:d6:7f:8a:da:0d:47:69:43:17:84:29:d1:88:b4:
5d:cd:19:3b:9e:22:f4:2c:15:04:8f:8d:f0:db:97:58:33:02:
69:5d:cb:aa:d3:e5:e8:48:67:6e:97:c7:ad:bf:ae:a6:e5:93:
98:54:aa:f0:17:3c:a7:ed:27:2c:eb:ab:37:3f:c9:e1:12:82:
c3:46:67:13:2f:55:88:66:c2:70:57:a9:94:85:63:fe:a9:0b:
c2:e2:80:7f:a7:7d:7f:26:3f:63:c4:27:2c:85:60:d5:5c:02:
a1:03:c6:91:58:82:40:d8:27:1e:02:62:39:81:15:d1:09:33:
ff:7b:34:41:fa:2c:4f:c2:42:1f:ae:13:04:57:f2:37:59:2c:
0f:09:35:0f:ce:16:84:7d:9c:1b:b4:16:4b:9a:c3:37:4c:5e:
c2:96:54:6b:15:70:86:12:cd:2f:4a:2d:2d:91:91:d6:19:81:
09:9a:8e:69:51:5c:bc:e7:98:ac:70:23:ef:6e:7b:43:a4:a7:
25:42:cf:d3:fd:af:e3:75:8f:73:89:cc:c0:0d:53:a5:93:7c:
71:a7:25:14:ac:9a:b3:69:db:ab:61:bf:8f:85:eb:13:2e:83:
9f:a3:b8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:02 2026 by rpki-client