This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37312e302f32342d3234203d3e2032363338.roa
File: 3136352e39382e37312e302f32342d3234203d3e2032363338.roa (raw, json)
Hash identifier: gY4TCR3O8mG1CUMtpf//9qiCn5FXZ8cy4gqhmdU5p6k=
Subject key identifier: 66:05:A1:63:45:01:26:3E:7E:2E:B8:A5:E2:61:9C:70:36:63:E0:1F
Certificate issuer: /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial: 0D18B5FE5266E45B7F3081D54051225429A5CA5A
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37312e302f32342d3234203d3e2032363338.roa
Signing time: Thu 27 Nov 2025 19:15:03 +0000
ROA not before: Thu 27 Nov 2025 19:10:03 +0000
ROA not after: Thu 26 Nov 2026 19:15:03 +0000
asID: 2638
IP address blocks: 165.98.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 22:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:18:b5:fe:52:66:e4:5b:7f:30:81:d5:40:51:22:54:29:a5:ca:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Validity
Not Before: Nov 27 19:10:03 2025 GMT
Not After : Nov 26 19:15:03 2026 GMT
Subject: CN=6605A1634501263E7E2EB8A5E2619C703663E01F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:18:ee:3e:7b:ab:37:b6:cc:e3:08:6d:ad:
1a:bd:50:6b:40:aa:a2:98:d2:ee:4c:cf:89:64:46:
a8:15:da:8e:ae:fc:00:1a:b8:14:4a:72:3e:fc:cf:
9d:ac:f4:97:47:84:ea:28:72:ac:ad:7f:51:9f:05:
a7:ee:9e:8e:cd:48:f2:fe:26:aa:a8:bc:71:ab:2d:
6e:d5:6c:0a:0d:12:09:62:dd:54:a7:2d:2d:61:d8:
fb:63:a8:48:6b:9d:ec:a0:70:4d:45:81:6d:ad:1d:
1d:12:b4:2d:f4:2f:e6:84:26:55:6a:39:2b:a5:4a:
59:cb:21:67:f5:73:f5:b3:ea:b9:cc:bb:c9:d6:3b:
68:da:ec:25:d4:a7:cc:06:9b:9e:38:01:c2:b8:a6:
f9:0a:61:13:d9:12:9d:8a:1c:7c:ba:97:3a:18:cf:
2c:1e:22:83:da:6f:18:aa:1c:4a:ac:14:8b:f4:1e:
96:58:67:90:a6:26:85:51:0e:3b:b5:cd:e2:7e:b4:
c1:c2:d7:88:a0:11:56:ef:c7:9e:80:bf:09:c8:5b:
1f:cd:dc:d1:ab:dd:91:67:0f:8c:3b:02:77:6a:86:
f4:06:df:e1:48:56:8f:5c:e6:ba:66:5c:10:7d:d1:
b5:d5:4b:4d:0e:8c:f0:9f:a9:2b:60:b0:46:a4:85:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:05:A1:63:45:01:26:3E:7E:2E:B8:A5:E2:61:9C:70:36:63:E0:1F
X509v3 Authority Key Identifier:
keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37312e302f32342d3234203d3e2032363338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.98.71.0/24
Signature Algorithm: sha256WithRSAEncryption
22:53:4d:ab:14:9a:f6:8c:cb:53:2d:72:97:c4:ab:05:c7:1f:
f8:16:cd:f4:f2:e7:81:87:b9:ce:7a:17:a3:e4:6d:3b:06:63:
b9:78:c1:d7:f1:1d:62:de:08:6d:64:05:bf:ab:1d:52:b3:6e:
75:8e:36:f2:e8:9d:4a:90:24:b8:71:2d:67:9d:c5:78:30:a9:
5a:b0:68:c5:6b:21:2b:64:b5:a9:1f:b1:cc:3d:8a:e0:9b:af:
80:76:9b:f9:c1:69:80:88:2a:8a:37:1b:4c:c6:cc:4b:d9:be:
d7:50:45:9d:06:24:4d:9e:9c:c3:19:e3:2c:c8:03:31:53:bc:
be:ea:38:84:40:79:20:af:06:79:44:dc:f9:f4:91:0d:65:18:
42:dd:2c:4b:f8:20:13:10:23:82:72:7e:6d:e9:10:39:29:bb:
a4:49:93:b9:dc:86:29:fc:ea:18:29:78:3d:74:94:69:70:4c:
fa:26:b8:89:b6:c0:f7:a8:68:56:87:8a:ef:2b:02:35:a6:ed:
29:b5:2e:37:e7:4f:bf:b0:8c:b4:59:fd:78:34:00:1e:ae:c5:
1d:8a:a8:0a:ef:29:4c:04:e5:a1:f6:3c:82:29:e4:59:ef:96:
03:59:97:06:5d:91:86:28:88:19:fc:73:ae:f3:c1:15:20:64:
17:16:ce:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:03:59 2025 by rpki-client