This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34352e302f32342d3234203d3e203237383433.roa
File: 3136382e3132312e34352e302f32342d3234203d3e203237383433.roa (raw, json)
Hash identifier: 8LHv8/z7BByoOVwbYGDC9v4Aw8FWlEhhNiNhE6KZ9eQ=
Subject key identifier: 3A:8A:9C:BB:2A:D9:57:8F:99:0E:87:2C:5D:20:69:86:08:1C:C0:9A
Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial: 48C3597F1CCF806F433413B3624A28DC4048D90B
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34352e302f32342d3234203d3e203237383433.roa
Signing time: Tue 06 Jan 2026 19:03:54 +0000
ROA not before: Tue 06 Jan 2026 18:58:54 +0000
ROA not after: Tue 05 Jan 2027 19:03:54 +0000
asID: 27843
IP address blocks: 168.121.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 11:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c3:59:7f:1c:cf:80:6f:43:34:13:b3:62:4a:28:dc:40:48:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Validity
Not Before: Jan 6 18:58:54 2026 GMT
Not After : Jan 5 19:03:54 2027 GMT
Subject: CN=3A8A9CBB2AD9578F990E872C5D206986081CC09A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dc:aa:8f:95:e7:f4:21:3f:59:dd:c1:68:35:
af:9e:26:94:f6:22:b5:aa:50:c8:3a:31:91:58:d0:
41:92:f3:8c:6a:6c:d8:81:e4:6f:09:c3:c5:f0:40:
f9:85:c1:a1:d7:e2:1f:00:5e:29:af:3b:21:dd:17:
d6:bd:9d:17:2f:57:5c:90:17:a7:f5:67:89:14:a8:
31:82:45:6a:6a:98:34:38:c3:1e:09:32:36:3a:c3:
c4:a5:2e:df:da:fd:15:6c:20:e5:79:b7:11:d4:2f:
e0:48:95:57:a4:77:0c:d4:bb:85:40:e4:1a:3f:44:
9f:25:bd:60:98:da:dd:3a:23:6e:a8:19:d2:59:34:
d6:42:3f:be:88:62:16:69:26:1f:1d:60:08:0c:b6:
ff:7c:3e:ee:2d:00:40:6e:e4:ae:65:44:76:88:99:
99:2c:0b:99:69:08:4d:f1:3a:95:4c:9c:d2:5d:ae:
ef:8b:da:dd:e0:f9:a3:de:9d:fa:c0:45:31:f3:c4:
34:54:a4:6a:cf:44:63:fe:74:1b:fa:d8:e3:ea:b5:
25:b1:e4:a1:f5:20:05:99:94:17:cf:c9:57:0b:39:
c3:87:16:41:e5:93:f1:c1:4a:db:fe:f7:b4:11:c6:
8d:7b:a0:90:6a:15:f4:0a:d1:1b:75:15:c9:0e:81:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:9C:BB:2A:D9:57:8F:99:0E:87:2C:5D:20:69:86:08:1C:C0:9A
X509v3 Authority Key Identifier:
keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34352e302f32342d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.45.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cb:7d:53:13:87:12:dd:11:40:4a:10:b9:84:0b:da:b3:fd:
c8:f8:5e:46:b6:86:06:81:66:19:41:05:4c:2c:d4:da:10:92:
56:ad:8a:12:c1:44:1d:db:6d:4d:bd:f9:37:ef:72:ca:c9:68:
a7:70:06:72:71:d2:32:50:27:3a:a9:4f:f6:23:64:4a:75:29:
11:b6:64:d5:40:12:ad:3e:aa:15:b3:84:7c:5d:76:d8:8a:c6:
ce:8a:57:1b:16:17:d0:be:07:77:df:0c:3b:3d:43:84:33:62:
18:97:c7:35:28:36:46:bb:ef:23:8b:a8:28:04:a0:b9:7e:8e:
c0:cc:ef:06:3d:c2:84:26:e3:c3:15:1c:a0:dd:8f:29:08:6f:
b8:66:6b:83:b9:1f:bf:11:03:fd:8f:f0:f0:91:ef:67:dc:b3:
77:95:dd:96:1e:91:e1:7f:10:c8:88:91:1c:7d:7e:c9:8c:76:
f2:ea:2e:25:44:b3:3a:dd:92:3f:f1:7c:56:f1:72:e5:7b:30:
6d:44:f6:52:bf:52:8b:59:ac:84:50:74:d2:82:9c:7f:3f:41:
07:a1:7f:f8:8a:7e:23:4e:65:c8:f8:12:c8:2b:b8:6e:10:dd:
9e:30:fd:01:f9:e7:54:40:62:35:f8:de:44:ed:a6:56:c6:86:
7a:99:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:58 2026 by rpki-client