This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3232322e302f32342d3234203d3e203532333134.roa
File: 3137302e3231302e3232322e302f32342d3234203d3e203532333134.roa (raw, json)
Hash identifier: rsqKIeO7na9V2hI98Ju6eGTq5usz/y67gk79y3pJp2w=
Subject key identifier: E9:94:A1:A5:D0:2E:19:BB:91:56:18:9E:31:7F:F8:9B:84:F0:9F:C1
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 2B01CF736F1AAAEAD7056ACC69D4EB77F0E008FF
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3232322e302f32342d3234203d3e203532333134.roa
Signing time: Tue 06 Jan 2026 19:22:14 +0000
ROA not before: Tue 06 Jan 2026 19:17:14 +0000
ROA not after: Tue 05 Jan 2027 19:22:14 +0000
asID: 52314
IP address blocks: 170.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 15:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:01:cf:73:6f:1a:aa:ea:d7:05:6a:cc:69:d4:eb:77:f0:e0:08:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Jan 6 19:17:14 2026 GMT
Not After : Jan 5 19:22:14 2027 GMT
Subject: CN=E994A1A5D02E19BB9156189E317FF89B84F09FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:4d:9c:bf:6a:7d:19:52:b1:41:03:9d:e9:
f0:f6:00:5c:b4:10:91:b2:ab:94:53:1a:1d:c4:28:
e4:85:3c:d7:2b:1b:38:59:f5:dd:35:15:75:7e:1a:
76:02:f0:c4:b0:ea:7c:26:fc:4b:b5:cf:43:93:53:
fb:07:e1:da:de:41:65:bb:77:2c:8c:bc:53:a8:07:
e1:a6:2f:7d:6d:05:87:ae:90:11:f8:35:ca:d3:89:
6c:18:ea:b7:e9:86:68:86:56:a8:58:67:0a:ac:e7:
a9:31:05:34:7d:83:2d:49:ea:a1:f4:bf:a1:0e:1a:
6f:28:0b:14:77:b7:25:86:4c:f7:59:3c:46:9e:a2:
65:ec:f9:a0:71:26:b0:fd:c5:49:66:f7:3e:2a:37:
4f:8b:04:c6:45:51:60:1f:29:fb:f0:74:26:29:43:
2a:29:5f:1e:4d:56:7c:98:66:54:37:75:01:b5:f2:
6f:79:92:df:40:8a:16:62:a6:a9:6b:a0:72:9d:37:
31:ff:f1:8d:4c:90:2a:77:55:87:3f:8b:cf:31:56:
f4:64:e3:8c:71:ea:de:88:44:42:17:47:db:56:6f:
15:b4:25:f6:6d:5a:f0:64:b8:49:e9:4a:5e:bb:bb:
87:1a:9f:00:88:8b:e7:27:00:05:c7:fc:23:84:5f:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:A1:A5:D0:2E:19:BB:91:56:18:9E:31:7F:F8:9B:84:F0:9F:C1
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3232322e302f32342d3234203d3e203532333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:98:cf:be:b0:b9:58:87:fc:98:94:39:f2:c4:0c:48:8e:b8:
e8:67:35:24:df:53:96:95:e5:e0:ef:fe:1b:59:88:06:88:47:
3a:aa:73:5c:4e:d5:37:c9:2c:6d:cd:f1:be:21:18:3b:4a:0c:
50:5a:20:11:10:12:a0:0f:b2:6b:25:ec:74:02:e8:e9:d1:82:
05:c3:6c:88:52:c4:16:7b:81:e7:47:ad:e8:a6:58:8f:5c:c9:
73:b3:f5:f4:86:f1:22:a2:df:91:29:68:30:69:45:7d:81:c5:
a6:b2:45:8a:7b:b7:9c:7e:40:e0:2b:36:77:83:34:c6:db:44:
30:c1:1b:92:9c:70:07:7e:d5:45:46:ad:86:34:c8:60:bf:20:
dd:08:15:98:57:c9:86:60:d0:80:59:d6:ea:28:4f:2b:f8:39:
3d:ec:9d:33:dd:07:df:a3:71:73:fe:95:58:5c:9f:84:d1:a0:
63:36:7d:6d:48:99:a7:1d:23:4e:5e:e8:7d:f3:c1:98:81:65:
1d:58:2c:3d:fd:c5:69:bd:e6:ff:88:a8:7d:8c:50:f8:87:b3:
20:b5:24:a8:69:ed:b1:5f:9e:97:7c:83:b8:6a:04:a6:4d:4e:
59:12:e3:52:39:a8:17:03:a3:f1:cd:f3:38:92:9e:80:08:0f:
cc:1c:57:a2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKwHPc28aqurXBWrMadTrd/DgCP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNjAxMDYxOTE3MTRaFw0yNzAxMDUxOTIyMTRaMDMxMTAvBgNV
BAMTKEU5OTRBMUE1RDAyRTE5QkI5MTU2MTg5RTMxN0ZGODlCODRGMDlGQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErk2cv2p9GVKxQQOd6fD2AFy0
EJGyq5RTGh3EKOSFPNcrGzhZ9d01FXV+GnYC8MSw6nwm/Eu1z0OTU/sH4dreQWW7
dyyMvFOoB+GmL31tBYeukBH4NcrTiWwY6rfphmiGVqhYZwqs56kxBTR9gy1J6qH0
v6EOGm8oCxR3tyWGTPdZPEaeomXs+aBxJrD9xUlm9z4qN0+LBMZFUWAfKfvwdCYp
QyopXx5NVnyYZlQ3dQG18m95kt9AihZipqlroHKdNzH/8Y1MkCp3VYc/i88xVvRk
44xx6t6IREIXR9tWbxW0JfZtWvBkuEnpSl67u4canwCIi+cnAAXH/COEX0KtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU6ZShpdAuGbuRVhieMX/4m4Twn8EwHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMxMzczMDJlMzIzMTMwMmUzMjMyMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqtLe
MA0GCSqGSIb3DQEBCwUAA4IBAQArmM++sLlYh/yYlDnyxAxIjrjoZzUk31OWleXg
7/4bWYgGiEc6qnNcTtU3ySxtzfG+IRg7SgxQWiAREBKgD7JrJex0Aujp0YIFw2yI
UsQWe4HnR63opliPXMlzs/X0hvEiot+RKWgwaUV9gcWmskWKe7ecfkDgKzZ3gzTG
20QwwRuSnHAHftVFRq2GNMhgvyDdCBWYV8mGYNCAWdbqKE8r+Dk97J0z3Qffo3Fz
/pVYXJ+E0aBjNn1tSJmnHSNOXuh988GYgWUdWCw9/cVpveb/iKh9jFD4h7MgtSSo
ae2xX56XfIO4agSmTU5ZEuNSOagXA6PxzfM4kp6ACA/MHFei
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:20 2026 by rpki-client