This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/3136382e3138312e37322e302f32322d3234203d3e203532343332.roa
File: 3136382e3138312e37322e302f32322d3234203d3e203532343332.roa (raw, json)
Hash identifier: 1XXf76qnI/8jL6gsqzYMd9a9PlaCWVGVHSPSSgJqPlQ=
Subject key identifier: 28:7A:3E:B4:6B:CE:8F:A1:F9:63:2E:04:72:6A:13:51:9C:68:F0:EB
Certificate issuer: /CN=C403FA78404641A71D95DA750617F0EEF3DD464B
Certificate serial: 4A49CB2C4D6CE7B80C0276822393661F999D0695
Authority key identifier: C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/3136382e3138312e37322e302f32322d3234203d3e203532343332.roa
Signing time: Tue 06 Jan 2026 19:45:30 +0000
ROA not before: Tue 06 Jan 2026 19:40:30 +0000
ROA not after: Tue 05 Jan 2027 19:45:30 +0000
asID: 52432
IP address blocks: 168.181.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl
rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:49:cb:2c:4d:6c:e7:b8:0c:02:76:82:23:93:66:1f:99:9d:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C403FA78404641A71D95DA750617F0EEF3DD464B
Validity
Not Before: Jan 6 19:40:30 2026 GMT
Not After : Jan 5 19:45:30 2027 GMT
Subject: CN=287A3EB46BCE8FA1F9632E04726A13519C68F0EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2c:40:a3:5f:4c:68:a8:ba:23:d0:e1:a2:52:
d7:df:5d:f7:db:b5:3e:49:be:df:09:61:89:2b:fb:
6c:d8:7e:26:00:da:b0:d1:bf:eb:b0:3b:73:76:07:
28:69:3d:c1:e2:b5:98:70:e4:e0:de:54:6a:53:d2:
39:5d:c8:ad:40:9e:59:db:98:4c:4c:79:04:e0:8e:
4c:76:17:e5:86:52:a6:66:7d:ea:19:01:60:3b:3e:
3a:57:b1:d6:d4:10:d1:97:51:84:ac:e7:92:1d:97:
c3:ef:03:66:bc:2f:ba:22:61:16:f7:82:4c:25:a5:
34:7a:f4:ad:3e:ec:f1:d1:1f:02:47:28:c2:b0:41:
f2:09:9a:8b:b1:ae:55:b8:46:48:54:81:3a:aa:59:
a6:97:62:15:dd:e5:3c:87:cd:c3:bb:0b:5b:f5:49:
07:e2:40:33:56:bb:9e:15:f3:dc:cc:9d:87:c0:00:
78:52:74:3c:de:a0:63:23:ea:d1:ae:16:22:2c:aa:
15:0d:46:dc:f3:e5:30:73:1a:08:5d:5e:0b:00:d2:
52:b7:c2:01:27:c1:7b:f5:6f:1b:00:2a:35:a1:d9:
e9:67:22:e0:6c:e4:17:43:99:ea:5b:3e:bc:ce:5a:
55:6f:f0:42:09:ff:9f:58:ef:77:fc:de:0a:34:a0:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7A:3E:B4:6B:CE:8F:A1:F9:63:2E:04:72:6A:13:51:9C:68:F0:EB
X509v3 Authority Key Identifier:
keyid:C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/3136382e3138312e37322e302f32322d3234203d3e203532343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.72.0/22
Signature Algorithm: sha256WithRSAEncryption
44:ae:e5:97:4c:ad:95:a6:2d:28:6d:37:bb:4e:e7:18:b1:81:
88:f0:69:f3:e9:97:c7:c2:c6:45:1c:9f:b7:04:c1:9f:7d:5a:
3b:2e:82:07:4e:c6:ac:94:af:27:df:75:dc:88:36:40:af:5e:
73:8b:b5:9c:10:74:5f:0f:7f:4a:ba:79:0e:ad:ee:e8:f1:89:
8d:6a:02:38:65:c1:41:de:ed:92:3c:88:f5:b6:db:41:9f:8b:
b5:99:3e:69:93:ab:6c:a7:3d:b1:0f:ca:59:39:10:88:28:2c:
ad:2e:cb:29:29:22:09:34:b9:3c:6c:66:06:58:b3:00:be:d0:
ba:d6:c5:2a:6a:f1:d3:f1:b8:50:97:a0:34:26:45:9e:5d:3e:
85:0b:d2:84:fa:1f:db:86:bb:39:50:b8:66:4e:be:45:a3:ad:
fa:0b:03:00:60:0b:f2:7e:68:06:48:4c:83:53:f1:c3:ba:22:
5f:a8:a0:96:0c:b2:11:58:bf:d3:7b:67:41:1f:d7:f8:9d:3d:
ee:0c:28:24:45:c4:cc:25:88:f4:b0:a2:de:9e:23:29:06:13:
97:d0:d4:f5:85:e8:9c:e8:4f:10:29:a3:2c:1f:8e:8a:69:7f:
91:14:e9:7a:24:46:f4:47:3b:f4:33:88:28:ca:09:39:52:b7:
22:49:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:59 2026 by rpki-client