This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3137302e3233332e3131362e302f32322d3234203d3e20323634373338.roa
File: 3137302e3233332e3131362e302f32322d3234203d3e20323634373338.roa (raw, json)
Hash identifier: Tr6F2Kq/4HuAMGjto7D6K+9n3dgPz+hk7yPeob111SY=
Subject key identifier: D2:0D:D1:BB:34:4C:95:A5:48:11:81:76:88:17:E0:89:60:3C:64:2A
Certificate issuer: /CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4
Certificate serial: 235525F8CF6F374BEE4B1C8C69FF69092B3F96BE
Authority key identifier: B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3137302e3233332e3131362e302f32322d3234203d3e20323634373338.roa
Signing time: Tue 06 Jan 2026 19:17:17 +0000
ROA not before: Tue 06 Jan 2026 19:12:17 +0000
ROA not after: Tue 05 Jan 2027 19:17:17 +0000
asID: 264738
IP address blocks: 170.233.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.crl
rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:55:25:f8:cf:6f:37:4b:ee:4b:1c:8c:69:ff:69:09:2b:3f:96:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4
Validity
Not Before: Jan 6 19:12:17 2026 GMT
Not After : Jan 5 19:17:17 2027 GMT
Subject: CN=D20DD1BB344C95A5481181768817E089603C642A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:a0:c9:05:39:66:ee:97:2f:92:4c:47:84:
3f:c6:2d:81:1a:0c:d5:58:80:3c:f2:72:ee:40:50:
f4:37:be:c1:f4:91:5b:a2:08:a4:35:bb:d6:fe:46:
1b:6b:3f:9e:d3:7a:44:13:5c:fc:a3:d6:79:00:c3:
65:8e:8e:98:e6:23:24:20:7b:47:12:1a:69:6b:b2:
15:52:5a:07:4b:72:54:93:ba:d3:81:ab:ee:fc:fe:
79:b8:0c:02:ea:23:4c:5a:ac:57:41:4a:7a:ff:d0:
45:ce:99:64:d4:30:02:7e:9b:18:aa:ed:d0:e5:3a:
85:1d:29:6c:d6:fd:90:3e:1d:9e:d7:84:4a:c7:33:
e3:83:dc:40:14:30:25:b1:fe:be:aa:ef:dc:ab:02:
2f:a6:7b:8f:51:1f:4a:6a:c0:af:a3:70:07:2d:61:
0a:82:84:9c:1d:fd:1d:ca:50:89:66:45:b0:49:d1:
84:95:79:e8:dc:da:9c:e1:84:f4:e0:ed:23:40:67:
74:c1:d9:3e:5c:80:af:1f:95:a3:96:36:ff:db:83:
76:b3:56:13:81:3b:0f:8c:9b:64:cd:d9:db:6c:46:
54:3f:20:ac:2c:70:39:ec:8d:e0:e9:88:fc:9f:56:
ee:61:72:83:f3:89:4d:c1:bc:ae:87:71:f8:d1:73:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:D1:BB:34:4C:95:A5:48:11:81:76:88:17:E0:89:60:3C:64:2A
X509v3 Authority Key Identifier:
keyid:B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3137302e3233332e3131362e302f32322d3234203d3e20323634373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:03:74:21:a3:d7:b8:be:2c:28:30:21:de:02:52:d8:6f:68:
57:69:db:dd:4e:75:f0:78:d5:03:4a:a8:95:ea:c3:27:ea:ed:
74:1c:02:ae:32:bc:d0:89:bc:e3:fc:69:dd:f3:aa:36:4a:b8:
99:6e:9e:e3:10:96:08:99:71:d3:4a:c7:ab:b2:92:d2:03:ba:
56:41:1d:77:f7:67:44:f9:39:e1:e7:6a:6a:52:09:0e:00:7a:
6c:ae:d0:f7:3e:8a:1a:d8:d4:c4:a6:67:76:ae:4d:ed:ae:0e:
14:3c:ec:fc:d6:85:89:8f:b0:be:38:59:32:08:9a:ab:47:2a:
a5:8b:7f:4e:96:8f:90:09:7c:67:10:71:3d:f5:92:1c:44:6d:
35:5c:b0:3c:9d:47:8d:76:41:cb:c8:38:27:d4:fc:e9:4c:2d:
9f:2f:a6:02:67:cd:ed:7f:57:e3:d8:a2:d0:84:73:91:3b:b6:
04:bf:85:6a:96:21:e5:89:e3:89:23:03:dd:2c:b6:fb:a6:35:
5d:4d:0c:3a:67:32:ed:90:59:2d:04:55:0c:3a:fe:e3:7f:24:
8a:03:db:4d:f9:da:d6:29:59:5c:34:19:80:55:7c:e7:7f:ea:
14:b9:1e:15:98:91:9c:5e:98:d7:40:4b:40:dc:da:7a:47:4e:
e7:83:c0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:59:07 2026 by rpki-client