This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3137302e3234352e35362e302f32322d3234203d3e20323632323334.roa
File: 3137302e3234352e35362e302f32322d3234203d3e20323632323334.roa (raw, json)
Hash identifier: fxF++c71TluoImuyJz3mXvRJOZB70++132A2Ds+1BUg=
Subject key identifier: 85:4F:73:CF:6C:84:62:E4:30:E0:FE:DD:88:D9:A0:F9:05:5F:21:96
Certificate issuer: /CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Certificate serial: 1BDE934A9B149ABD808D6EC574C8CDB185E6F795
Authority key identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3137302e3234352e35362e302f32322d3234203d3e20323632323334.roa
Signing time: Tue 06 Jan 2026 18:57:32 +0000
ROA not before: Tue 06 Jan 2026 18:52:32 +0000
ROA not after: Tue 05 Jan 2027 18:57:32 +0000
asID: 262234
IP address blocks: 170.245.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl
rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 00:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:de:93:4a:9b:14:9a:bd:80:8d:6e:c5:74:c8:cd:b1:85:e6:f7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Validity
Not Before: Jan 6 18:52:32 2026 GMT
Not After : Jan 5 18:57:32 2027 GMT
Subject: CN=854F73CF6C8462E430E0FEDD88D9A0F9055F2196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:f9:0c:b9:02:94:7e:cc:a2:72:5c:eb:9e:
8c:6a:97:48:b4:7c:e3:c7:4f:2e:89:f0:d8:6b:d7:
c2:84:0c:0e:01:f8:ef:9b:eb:fe:20:5e:24:8e:f3:
6e:ca:7a:45:dc:11:18:5b:fd:40:03:68:00:2d:dc:
65:b2:8f:89:7d:74:a7:52:87:09:e2:46:56:1c:b3:
cd:74:3a:dd:63:a3:1a:b1:f9:e5:17:93:b2:f8:28:
63:cc:da:fb:f4:52:a0:71:61:e3:dd:e5:50:2f:8b:
fe:56:85:07:d0:9f:8e:2b:b6:aa:89:3b:58:8f:54:
33:33:ec:17:78:67:c6:17:88:40:9e:8b:17:11:05:
a8:89:05:8a:12:db:aa:cb:b4:67:7d:cf:20:ad:7f:
0b:f9:72:0a:0f:b0:52:f4:93:9c:0e:97:f5:cf:fb:
28:09:fc:18:ad:a6:1f:ba:69:bb:fd:08:58:b7:44:
7f:5c:bb:a7:15:23:7a:8a:36:90:d2:a4:48:af:04:
15:70:2b:48:14:7f:16:22:60:77:1c:4a:a1:63:e3:
cc:4a:5e:09:a0:7e:74:68:5a:a2:75:71:b3:f3:ff:
61:de:b4:ec:0e:46:bd:b3:b8:17:20:3f:f1:e0:cc:
da:0f:1c:2b:95:e8:f3:73:6a:33:0c:16:cc:e5:4d:
b4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:73:CF:6C:84:62:E4:30:E0:FE:DD:88:D9:A0:F9:05:5F:21:96
X509v3 Authority Key Identifier:
keyid:22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3137302e3234352e35362e302f32322d3234203d3e20323632323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.56.0/22
Signature Algorithm: sha256WithRSAEncryption
72:44:1e:ea:6b:25:76:22:39:b8:4f:72:ca:20:a0:62:36:21:
97:81:1e:b4:a7:d5:0a:11:d3:20:37:ec:0f:c3:15:d5:ae:4f:
bd:20:90:f3:eb:5c:a0:a6:0e:d0:70:c5:79:7c:bc:97:26:ac:
d2:53:b9:5f:a0:4d:2f:3d:e9:11:81:74:38:c6:60:f8:82:e6:
3e:f1:bd:9f:db:c6:9d:b6:d5:87:e0:22:f2:1c:fa:d8:3f:d0:
6a:46:01:d8:23:b4:e0:79:db:49:4d:30:c9:74:71:99:93:d6:
50:de:04:14:c3:83:06:20:35:7c:3f:f2:3f:dc:f0:a4:50:c9:
b2:cb:43:c9:68:4d:df:a1:4e:12:d1:ec:1e:a6:0e:49:1c:cf:
b3:6b:32:44:23:40:b3:41:bd:e5:b3:68:2a:2a:00:c8:3a:f6:
a8:c0:ac:e1:f7:bd:6c:38:da:ab:59:3d:95:22:5d:77:4d:da:
a0:32:8d:66:76:19:21:d1:42:1f:fa:bf:c4:fb:4c:a0:2b:85:
cf:79:44:28:c1:51:b7:c2:7c:2e:e1:bd:ea:ef:5d:bf:08:3b:
88:75:d1:dc:86:75:3e:96:6c:d2:6f:23:4e:aa:0e:a8:f8:d8:
90:57:33:a9:bd:25:a9:f0:a5:4d:75:91:78:a0:2a:f4:58:08:
b4:b5:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:16 2026 by rpki-client