This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/3137302e37392e3130302e302f32322d3234203d3e20323634363831.roa
File: 3137302e37392e3130302e302f32322d3234203d3e20323634363831.roa (raw, json)
Hash identifier: WkxcE4OxqQzIHZl+gXXAhRSedgWhgZAaDZL2lImXUJM=
Subject key identifier: 5B:5B:9E:2D:FF:F6:36:61:5B:93:04:D3:67:6D:13:0C:EF:1D:F5:60
Certificate issuer: /CN=68FDDBE1BF749D2FC48F59317C6389C8186C4613
Certificate serial: 2A1EA35A6D276C4508332673D92360BF3A7F3907
Authority key identifier: 68:FD:DB:E1:BF:74:9D:2F:C4:8F:59:31:7C:63:89:C8:18:6C:46:13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/3137302e37392e3130302e302f32322d3234203d3e20323634363831.roa
Signing time: Tue 06 Jan 2026 18:58:22 +0000
ROA not before: Tue 06 Jan 2026 18:53:22 +0000
ROA not after: Tue 05 Jan 2027 18:58:22 +0000
asID: 264681
IP address blocks: 170.79.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.crl
rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 01:42:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1e:a3:5a:6d:27:6c:45:08:33:26:73:d9:23:60:bf:3a:7f:39:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68FDDBE1BF749D2FC48F59317C6389C8186C4613
Validity
Not Before: Jan 6 18:53:22 2026 GMT
Not After : Jan 5 18:58:22 2027 GMT
Subject: CN=5B5B9E2DFFF636615B9304D3676D130CEF1DF560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:eb:80:b1:55:33:91:c4:dc:3b:51:8d:68:
8a:7d:28:66:03:5d:a2:38:fc:ff:7f:ed:7b:cd:f4:
7e:d1:15:27:17:99:21:62:70:d6:31:c3:35:e3:25:
e0:c7:6c:2e:f6:af:22:c5:a8:5a:31:56:66:9b:ce:
9d:cf:39:a3:69:11:d4:33:c5:5c:da:ae:e3:08:5f:
be:ef:c4:f6:04:93:e9:6e:39:7e:cb:ca:8e:78:d8:
5f:7a:b2:71:75:20:34:11:cc:a1:2d:d3:b7:ef:d1:
2f:de:b8:c8:03:65:4a:71:7a:46:bc:52:fa:9a:ca:
41:af:62:73:87:86:ab:48:79:b6:12:e0:4c:eb:8f:
0d:22:b1:b0:fb:0b:81:5b:97:59:39:22:17:d3:ff:
9c:40:58:e0:0a:3e:cc:c9:bd:6c:9a:89:b6:76:56:
4e:4f:c7:ec:c1:61:0b:02:ae:25:2c:5f:d8:d1:0f:
4b:b3:fc:60:84:09:3a:f3:24:90:e9:71:36:93:e7:
63:b3:ae:a9:ff:d8:d0:f2:f7:f2:bd:62:61:22:df:
08:9e:ab:4c:86:b8:0f:db:08:26:93:cc:c2:aa:2c:
e9:d2:d2:be:26:26:b2:05:0c:34:73:4b:07:c8:f1:
9b:02:5b:67:5e:85:2d:d1:53:f8:24:68:e6:1a:9d:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:9E:2D:FF:F6:36:61:5B:93:04:D3:67:6D:13:0C:EF:1D:F5:60
X509v3 Authority Key Identifier:
keyid:68:FD:DB:E1:BF:74:9D:2F:C4:8F:59:31:7C:63:89:C8:18:6C:46:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/3137302e37392e3130302e302f32322d3234203d3e20323634363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:bb:e1:c4:03:9d:c2:f9:13:30:1d:7c:52:6f:cd:2b:85:01:
c7:16:15:d7:5d:67:e0:b1:d3:d0:97:61:e8:af:a6:83:7e:2f:
b4:59:69:b2:f9:f8:13:af:6e:f9:cb:2a:ca:0d:3a:1f:ad:2a:
93:aa:5f:a4:49:f6:ed:45:2c:13:30:9f:5a:1b:bf:0b:4a:fe:
98:e0:9d:cb:68:b2:95:17:97:0b:fc:ea:41:1f:d7:87:7a:b1:
df:78:e5:95:6e:26:30:40:54:e5:db:3b:20:f8:de:a6:e9:ed:
f1:54:52:a4:4b:20:09:e7:18:c7:bc:6a:71:0e:3c:ba:46:04:
c9:75:49:4e:eb:48:40:f7:65:fa:87:27:ec:42:09:bf:bd:38:
58:fa:b3:f3:35:b4:f4:57:7f:bf:36:9d:07:95:3f:3c:a4:2a:
ba:f6:a0:84:8f:22:64:93:43:70:de:09:8e:3a:b7:67:ef:48:
e5:5c:39:ad:18:75:3c:d2:ad:9a:7b:74:e0:b7:85:2f:d3:29:
1f:2e:da:31:e8:82:ae:79:05:cb:46:6b:a9:c2:0c:7d:08:5d:
56:b7:a5:05:dd:2e:59:f3:14:c7:56:5c:e3:92:4a:42:6a:7b:
0e:e5:3f:1e:85:44:00:fa:1e:ed:20:58:ff:de:29:1d:0e:a3:
4d:b4:fe:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:39:43 2026 by rpki-client