This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3234203d3e20323634383031.roa
File: 3137302e3233382e3137302e302f32332d3234203d3e20323634383031.roa (raw, json)
Hash identifier: nCzdlVW9K9Q3eFuUTRyOd5BnfSDCn9c06RlOsg1pHVI=
Subject key identifier: F7:F6:F9:E7:BB:DB:D4:8A:E3:84:7D:89:9C:B5:7E:B0:27:1F:A9:9F
Certificate issuer: /CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Certificate serial: 3116B6CAD1668BF947170367F1D5A62E53DAC649
Authority key identifier: BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3234203d3e20323634383031.roa
Signing time: Tue 25 Nov 2025 20:55:00 +0000
ROA not before: Tue 25 Nov 2025 20:50:00 +0000
ROA not after: Tue 24 Nov 2026 20:55:00 +0000
asID: 264801
IP address blocks: 170.238.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 20:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:16:b6:ca:d1:66:8b:f9:47:17:03:67:f1:d5:a6:2e:53:da:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Validity
Not Before: Nov 25 20:50:00 2025 GMT
Not After : Nov 24 20:55:00 2026 GMT
Subject: CN=F7F6F9E7BBDBD48AE3847D899CB57EB0271FA99F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:ea:c1:2f:fa:65:16:4c:98:66:5c:2f:d6:
97:3a:ed:78:84:1a:54:69:f1:45:04:a0:15:e2:87:
38:19:88:ad:a3:3c:57:2b:4e:0b:63:9d:cc:db:94:
f8:55:d0:49:65:c2:12:15:7c:bc:15:74:d6:48:cc:
89:39:e7:1c:c8:0e:77:2f:92:63:69:c5:76:f4:f7:
f6:09:0b:dd:cc:6c:06:a1:cc:61:b0:4b:fb:6e:78:
a8:77:13:2e:94:db:1e:f8:9c:8f:d7:63:86:bd:7b:
e7:96:97:46:ff:a2:ac:d5:d1:d5:9a:90:3c:e4:a2:
6e:a1:da:36:90:58:3f:b3:00:fd:ae:31:ad:eb:d2:
86:b3:15:b9:66:d7:24:d8:93:ce:c2:d9:8b:26:0c:
19:26:1c:f5:3e:05:8e:dc:d2:92:9a:18:c3:69:ec:
40:b7:c6:30:0b:28:be:91:70:ef:a3:e2:bc:3f:d3:
0b:56:f1:ad:31:b5:a9:12:2e:61:67:32:1e:ce:be:
fd:56:17:d4:c4:90:c5:5f:9e:4e:0e:3f:c8:2a:b7:
a4:53:d8:60:4e:e4:6a:5f:3c:2d:6b:d0:d7:55:d4:
a5:0e:7b:be:0c:79:02:fb:57:fa:ba:c8:e9:f8:53:
5d:54:f2:e1:8c:19:76:06:ac:3d:77:bf:7d:1a:80:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F6:F9:E7:BB:DB:D4:8A:E3:84:7D:89:9C:B5:7E:B0:27:1F:A9:9F
X509v3 Authority Key Identifier:
keyid:BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3234203d3e20323634383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.170.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:11:ed:0f:ba:2f:cb:2f:4b:e5:ca:82:09:a9:94:0c:1c:af:
dd:87:ca:3c:26:c7:16:e3:83:f2:41:f2:f3:83:c7:f9:5b:ab:
bf:cf:82:10:d8:39:fe:1c:dd:41:a3:7a:ed:f9:b9:01:cf:71:
5e:97:be:0f:1d:2d:90:a0:e2:63:e6:47:72:c7:c0:84:94:3e:
1d:bf:8b:8d:db:16:a0:15:c2:c5:30:39:d2:28:88:67:87:a7:
fd:e9:ed:e4:07:c6:40:0a:a5:b6:a9:53:90:7f:1e:d8:b6:1a:
cb:8b:59:b7:13:21:c0:df:f6:e3:f9:24:2f:93:e2:bd:04:d9:
76:7a:4d:23:bb:5f:32:13:50:c8:ab:f1:eb:67:0b:3d:29:4c:
e3:3a:7b:5d:ce:75:f6:e8:a3:fc:d0:5d:84:6a:cb:5a:7e:ea:
5d:87:f8:23:92:21:7a:12:88:71:f9:79:41:4c:67:4f:6f:f0:
0e:fc:d5:0d:e8:1d:96:78:06:87:8a:ca:cd:46:3e:b3:a3:de:
aa:d2:d6:bc:df:23:c3:b6:df:55:6d:e8:55:81:55:5b:64:57:
d9:7c:a3:3f:4b:22:6e:26:2a:c8:28:b0:7a:6f:aa:af:c0:8a:
1f:e5:a2:69:d7:29:d1:8c:35:a6:d6:36:8f:19:96:6e:ec:6d:
b5:67:a2:d9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMRa2ytFmi/lHFwNn8dWmLlPaxkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ5NTU1NzI2MEZEN0EzNkU2MzM4QkE2MUVEMEJBQThE
QjQxODNGODAeFw0yNTExMjUyMDUwMDBaFw0yNjExMjQyMDU1MDBaMDMxMTAvBgNV
BAMTKEY3RjZGOUU3QkJEQkQ0OEFFMzg0N0Q4OTlDQjU3RUIwMjcxRkE5OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP/erBL/plFkyYZlwv1pc67XiE
GlRp8UUEoBXihzgZiK2jPFcrTgtjnczblPhV0EllwhIVfLwVdNZIzIk55xzIDncv
kmNpxXb09/YJC93MbAahzGGwS/tueKh3Ey6U2x74nI/XY4a9e+eWl0b/oqzV0dWa
kDzkom6h2jaQWD+zAP2uMa3r0oazFblm1yTYk87C2YsmDBkmHPU+BY7c0pKaGMNp
7EC3xjALKL6RcO+j4rw/0wtW8a0xtakSLmFnMh7Ovv1WF9TEkMVfnk4OP8gqt6RT
2GBO5GpfPC1r0NdV1KUOe74MeQL7V/q6yOn4U11U8uGMGXYGrD13v30agPVBAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU9/b557vb1IrjhH2JnLV+sCcfqZ8wHwYDVR0j
BBgwFoAUvZVVcmD9ejbmM4umHtC6qNtBg/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTIyQkY4QUMzNkY5Qjc5OUJDMjgwNjQxN0ExNzM5M0Y3
NzBFODA0M0FGMDBERDY4QkQyMkU0NjhBMjZFMUFELzAvQkQ5NTU1NzI2MEZEN0Ez
NkU2MzM4QkE2MUVEMEJBQThEQjQxODNGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDk1NTU3MjYwRkQ3QTM2RTYz
MzhCQTYxRUQwQkFBOERCNDE4M0Y4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0UyMkJGOEFDMzZGOUI3OTlCQzI4MDY0MTdBMTczOTNGNzcwRTgwNDNB
RjAwREQ2OEJEMjJFNDY4QTI2RTFBRC8wLzMxMzczMDJlMzIzMzM4MmUzMTM3MzAy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzQzODMwMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGq
7qowDQYJKoZIhvcNAQELBQADggEBAKAR7Q+6L8svS+XKggmplAwcr92Hyjwmxxbj
g/JB8vODx/lbq7/PghDYOf4c3UGjeu35uQHPcV6Xvg8dLZCg4mPmR3LHwISUPh2/
i43bFqAVwsUwOdIoiGeHp/3p7eQHxkAKpbapU5B/Hti2GsuLWbcTIcDf9uP5JC+T
4r0E2XZ6TSO7XzITUMir8etnCz0pTOM6e13Odfboo/zQXYRqy1p+6l2H+COSIXoS
iHH5eUFMZ09v8A781Q3oHZZ4BoeKys1GPrOj3qrS1rzfI8O231Vt6FWBVVtkV9l8
oz9LIm4mKsgosHpvqq/Aih/lomnXKdGMNabWNo8Zlm7sbbVnotk=
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:57:37 2025 by rpki-client