This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3234203d3e20313938393439.roa
File: 3137302e3233382e3137302e302f32332d3234203d3e20313938393439.roa (raw, json)
Hash identifier: 1QJIqSvEmkr52RJiZg53KSguAbsdjkWw4RLk0YwFCis=
Subject key identifier: 36:F4:74:B5:F0:34:C2:6E:91:93:69:86:FC:81:AD:42:5E:10:7D:8D
Certificate issuer: /CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Certificate serial: 74F5335B85A934B4EA1ED9EE4F05DFAD4D753435
Authority key identifier: BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3234203d3e20313938393439.roa
Signing time: Tue 25 Nov 2025 20:55:00 +0000
ROA not before: Tue 25 Nov 2025 20:50:00 +0000
ROA not after: Tue 24 Nov 2026 20:55:00 +0000
asID: 198949
IP address blocks: 170.238.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 20:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f5:33:5b:85:a9:34:b4:ea:1e:d9:ee:4f:05:df:ad:4d:75:34:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Validity
Not Before: Nov 25 20:50:00 2025 GMT
Not After : Nov 24 20:55:00 2026 GMT
Subject: CN=36F474B5F034C26E91936986FC81AD425E107D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:1e:73:9f:8f:35:08:1e:67:ca:2f:30:15:
33:50:44:1c:52:e5:1b:b7:c4:91:6a:c2:fe:15:f4:
5e:3e:f3:0a:2d:30:d6:dd:39:fa:68:89:4d:43:b0:
29:91:73:e1:9b:5d:23:72:7b:c1:62:c6:d8:cd:b1:
5c:15:88:f9:5b:82:c3:65:81:3e:b6:ca:da:01:b9:
00:34:8d:e1:e9:a6:a1:c0:3e:fc:d0:44:6b:03:9c:
2b:c6:d8:5b:16:50:82:be:0b:cf:73:f2:fa:34:70:
c2:9f:86:bd:ea:0a:34:ab:d8:a4:c2:85:92:72:6c:
51:48:ce:c9:c0:68:3d:80:08:12:c1:61:1e:85:b1:
41:81:9c:e7:34:10:91:2f:23:4d:31:78:d8:0f:89:
27:b2:59:30:ec:20:a0:c4:e5:d4:32:43:0d:6b:23:
d2:f4:b7:b8:50:ef:e8:f5:5b:3a:2e:27:9c:10:e0:
c0:33:58:e9:88:1c:e1:1c:be:ea:48:9f:cb:52:d7:
a8:c2:91:a8:2d:70:7b:80:83:0f:0f:29:34:61:fd:
14:f6:f7:44:33:17:23:00:0e:a2:f9:67:02:99:cb:
41:e5:fa:89:2d:be:c4:58:94:01:11:11:a7:55:92:
91:80:ae:f5:00:56:47:2b:f8:1b:00:f5:32:22:02:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:74:B5:F0:34:C2:6E:91:93:69:86:FC:81:AD:42:5E:10:7D:8D
X509v3 Authority Key Identifier:
keyid:BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3234203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.170.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:07:44:82:0a:29:e9:4d:1a:5b:df:13:b9:f0:7f:73:45:d6:
83:42:a8:4d:7e:4b:6d:1f:09:5e:b7:f8:d8:4a:c1:3a:d1:fe:
ba:49:fe:5c:76:e4:6b:67:d5:01:c9:4a:d0:45:ba:dd:a0:82:
d5:e9:90:cd:b4:9c:d6:e2:ae:45:42:d7:ac:16:9c:81:86:38:
d5:dc:c2:36:64:5a:6c:92:dd:f2:61:09:b9:4b:55:de:96:43:
86:42:83:52:5a:4c:88:31:7a:20:12:ef:f1:26:0f:ff:c5:41:
5b:aa:56:3d:d2:f2:a9:a2:96:37:34:71:d4:03:4c:96:98:3f:
6d:c0:28:1f:21:56:b1:c1:dd:fd:3b:16:a9:a2:99:d2:48:e4:
47:93:6d:b9:3a:3f:26:85:04:a7:f9:08:24:e2:ad:35:0a:6b:
7f:bc:14:f1:71:b8:38:da:66:51:57:ee:51:61:12:19:7b:65:
d0:83:90:90:d6:da:d8:5c:94:d5:90:79:5b:39:81:79:59:a7:
ff:1b:f1:f7:98:43:a8:8f:e8:89:03:77:82:95:45:80:c3:33:
a0:76:fb:e8:0f:97:6f:43:66:08:4f:40:e8:c2:9c:e0:fa:16:
48:a7:90:1c:6c:6a:d9:a9:a8:7a:12:19:ea:f6:4f:39:cf:c0:
ae:b7:e2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:08:47 2025 by rpki-client