This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A9BA8369014D2824723EEEB786CE41BE8442EC29CC120BFE5C6AD40E425AE39/0/3136372e3135372e302e302f31362d3136203d3e2036353638.roa
File: 3136372e3135372e302e302f31362d3136203d3e2036353638.roa (raw, json)
Hash identifier: NRcp1fy2kisrr6o5ydKrnp0vN+RsbddbmYucIsriQRY=
Subject key identifier: 8D:BC:F6:D9:3E:30:F7:68:18:06:15:0C:9D:A0:EC:DB:CA:D6:81:8B
Certificate issuer: /CN=BEDF93FD3345618402738A641421CCD3B4E3B7F2
Certificate serial: 4167C7CFFCEF99C180E9B00A12A36F3CC3C8B7FD
Authority key identifier: BE:DF:93:FD:33:45:61:84:02:73:8A:64:14:21:CC:D3:B4:E3:B7:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BEDF93FD3345618402738A641421CCD3B4E3B7F2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6A9BA8369014D2824723EEEB786CE41BE8442EC29CC120BFE5C6AD40E425AE39/0/3136372e3135372e302e302f31362d3136203d3e2036353638.roa
Signing time: Sat 24 Jan 2026 01:45:00 +0000
ROA not before: Sat 24 Jan 2026 01:40:00 +0000
ROA not after: Sat 23 Jan 2027 01:45:00 +0000
asID: 6568
IP address blocks: 167.157.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6A9BA8369014D2824723EEEB786CE41BE8442EC29CC120BFE5C6AD40E425AE39/0/BEDF93FD3345618402738A641421CCD3B4E3B7F2.crl
rsync://repository.lacnic.net/rpki/lacnic/6A9BA8369014D2824723EEEB786CE41BE8442EC29CC120BFE5C6AD40E425AE39/0/BEDF93FD3345618402738A641421CCD3B4E3B7F2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BEDF93FD3345618402738A641421CCD3B4E3B7F2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:67:c7:cf:fc:ef:99:c1:80:e9:b0:0a:12:a3:6f:3c:c3:c8:b7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEDF93FD3345618402738A641421CCD3B4E3B7F2
Validity
Not Before: Jan 24 01:40:00 2026 GMT
Not After : Jan 23 01:45:00 2027 GMT
Subject: CN=8DBCF6D93E30F7681806150C9DA0ECDBCAD6818B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:d7:f2:93:bb:1c:9a:b7:31:1d:b9:94:8b:
9f:19:0a:99:26:59:d0:92:a6:3d:9d:4c:59:53:8d:
8e:ef:20:7e:1c:85:1b:62:b3:57:f8:ed:f4:0f:53:
d3:53:89:38:00:87:c7:fb:d6:e8:9c:fe:2e:6a:fb:
b9:c7:44:4f:f7:6d:1d:2e:ff:69:94:66:ee:ee:d3:
a7:14:d9:f3:48:03:86:0c:cc:29:92:9e:67:70:3d:
d9:2a:12:f5:c6:ec:c8:17:0e:4c:2a:4b:7e:5f:32:
0a:69:1a:c9:56:6f:82:ce:f3:79:f3:05:d0:07:8d:
64:a8:38:85:72:a3:2a:59:61:5b:78:80:ce:7f:c9:
17:10:7b:b2:58:80:fd:aa:51:28:40:b9:48:a8:15:
75:89:c6:f7:3e:36:6d:9d:94:d1:15:90:a8:09:29:
0b:bc:fe:59:65:d0:f4:99:78:9e:26:9e:37:38:0e:
df:a9:b5:45:3c:00:17:4d:1f:a8:4e:1b:ef:cd:35:
42:f5:58:20:c7:26:54:d8:e2:c7:aa:90:f6:a7:ea:
97:4d:7d:83:b5:4b:c7:d6:fd:bf:61:39:e9:a4:93:
e8:b2:0f:11:70:b5:35:1e:96:a4:43:f5:dd:c0:31:
21:d5:72:6f:fe:5d:48:ba:21:7f:06:d5:45:3b:1b:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:F6:D9:3E:30:F7:68:18:06:15:0C:9D:A0:EC:DB:CA:D6:81:8B
X509v3 Authority Key Identifier:
keyid:BE:DF:93:FD:33:45:61:84:02:73:8A:64:14:21:CC:D3:B4:E3:B7:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6A9BA8369014D2824723EEEB786CE41BE8442EC29CC120BFE5C6AD40E425AE39/0/BEDF93FD3345618402738A641421CCD3B4E3B7F2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BEDF93FD3345618402738A641421CCD3B4E3B7F2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A9BA8369014D2824723EEEB786CE41BE8442EC29CC120BFE5C6AD40E425AE39/0/3136372e3135372e302e302f31362d3136203d3e2036353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:d3:5c:f4:ee:b6:24:3b:e1:22:14:46:4c:d4:29:72:54:e4:
97:50:7b:8f:1b:ac:38:ce:d0:a1:f0:79:2a:0f:db:6f:70:68:
1b:01:2b:78:81:0d:45:4d:6c:96:9f:e6:b3:3a:b3:fb:e6:6e:
08:f0:ab:1e:a1:e7:e4:1a:b8:6d:78:9a:79:c4:89:7b:17:26:
8c:43:8e:07:14:5f:b3:af:5d:f7:45:bd:89:05:87:e8:b6:0c:
8d:3e:4f:49:8b:66:8d:2e:38:f5:ef:cc:b7:ab:fc:1b:e6:73:
95:e1:1c:2d:98:eb:65:81:de:a1:fc:32:c7:21:f9:ec:aa:3b:
48:9d:16:17:56:d8:3c:69:cc:0e:ea:57:bb:5d:30:d6:3f:5e:
e7:9f:15:18:da:4e:ab:74:3c:5a:47:f4:89:b9:e8:c5:8d:27:
97:1d:00:5b:d8:ed:d8:ae:47:d0:26:d6:8b:0c:ff:45:9f:72:
21:4e:af:46:ae:90:7f:3a:77:32:7a:3f:c6:41:f8:6d:e2:cf:
81:db:44:96:66:0d:d0:e8:c3:a4:52:33:50:7d:04:e4:ff:47:
1e:22:be:4d:c6:9f:b4:01:1a:9d:2d:cf:fe:a1:ff:4f:0e:d2:
a8:ef:6f:14:c9:e0:a9:b9:ea:e0:b8:ce:13:ae:c4:e9:f5:6e:
4a:65:85:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:35 2026 by rpki-client