This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa
File: 3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa (raw, json)
Hash identifier: 6HzmN+jerB62/FFztC97PHnwzVtF5n5WRA60BjziCsI=
Subject key identifier: 5B:DA:61:5A:E9:40:AA:2D:78:B7:D3:B7:D5:98:0E:DD:37:E4:B8:B8
Certificate issuer: /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
Certificate serial: 6BCAFB0E4CC9FA4EE7F69DE7F592FED4276B4EBB
Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa
Signing time: Tue 06 Jan 2026 18:58:54 +0000
ROA not before: Tue 06 Jan 2026 18:53:54 +0000
ROA not after: Tue 05 Jan 2027 18:58:54 +0000
asID: 262231
IP address blocks: 170.245.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl
rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ca:fb:0e:4c:c9:fa:4e:e7:f6:9d:e7:f5:92:fe:d4:27:6b:4e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
Validity
Not Before: Jan 6 18:53:54 2026 GMT
Not After : Jan 5 18:58:54 2027 GMT
Subject: CN=5BDA615AE940AA2D78B7D3B7D5980EDD37E4B8B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:06:96:5b:e2:11:90:af:3c:72:9b:97:91:
26:1a:ce:1d:da:48:f0:3b:a6:e6:eb:b5:7f:90:43:
ae:84:ba:50:aa:49:cc:3f:8a:f5:17:6a:33:cb:5b:
fb:4f:27:ba:f7:0e:ab:67:97:d2:63:25:71:42:4d:
65:1a:bd:30:d7:5e:a9:fa:cc:2c:4e:75:0e:39:bd:
b5:18:f4:ce:c6:79:89:d7:0d:c8:0a:47:f3:93:bf:
c2:24:3e:f3:84:73:b8:da:f4:5c:87:29:a8:30:36:
84:da:a7:c6:a6:86:f0:5f:3b:85:73:fe:c8:44:d2:
79:11:1c:9f:c0:a5:c0:e9:68:af:c6:a3:6e:53:a3:
8c:ed:22:0a:16:90:df:7c:e0:38:a7:9e:2a:37:03:
8c:a9:50:88:c7:51:49:de:34:4e:31:31:d7:e4:36:
2a:dd:4b:e9:66:cb:6b:5f:0f:c8:b3:8e:02:f5:64:
95:e4:ba:24:47:7b:cf:63:c1:a5:a2:ca:41:14:ae:
4d:b4:c5:51:a2:e3:6a:86:08:f0:b2:ca:19:40:f3:
b1:26:14:62:4c:e2:30:74:fe:83:83:69:43:2d:77:
2e:9f:1b:15:6e:0e:a1:51:0d:a5:e0:13:07:73:f3:
e2:42:91:dd:70:b4:30:c9:cf:7d:5b:50:9e:12:47:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:61:5A:E9:40:AA:2D:78:B7:D3:B7:D5:98:0E:DD:37:E4:B8:B8
X509v3 Authority Key Identifier:
keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:39:74:d2:36:4c:b4:51:97:78:04:d0:e5:4f:ba:1a:17:89:
14:87:4e:93:ba:86:09:d7:34:b2:c0:a9:bc:33:2d:ac:b2:2c:
fa:a9:69:04:00:07:c2:47:65:72:7e:5a:09:e2:aa:b6:1e:c4:
73:45:a1:7a:79:78:c5:88:e4:2c:b0:81:f9:cf:66:e0:82:92:
41:94:64:f2:b2:7e:05:3f:61:51:00:62:15:ef:ed:49:48:f4:
97:3e:84:3c:49:48:c0:2a:00:ac:5c:5f:3e:f5:ce:4c:51:43:
69:fd:2d:a4:f3:15:c1:93:69:ca:9a:27:e5:da:d4:59:5b:e8:
8a:b6:66:43:23:28:38:c6:3a:b5:10:3c:87:de:83:28:d0:8d:
c5:b5:74:a1:d6:85:cd:f1:37:7a:fe:01:b4:c8:56:6b:0d:9a:
74:3c:2e:10:15:51:8e:82:a4:0c:92:d2:7a:2f:03:b7:dd:a2:
b7:2b:e2:ac:0c:e0:77:e9:4c:b9:22:3a:e5:11:32:c4:b9:ce:
33:01:e1:d5:c7:00:82:43:78:e3:e8:ca:ac:48:a2:15:db:bc:
fb:50:6e:ee:57:33:bf:0c:88:88:c8:25:e8:d5:d3:15:95:a4:
e0:0e:5a:8b:88:32:75:06:47:f4:04:70:ed:65:b2:f3:7a:60:
8a:84:74:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:29 2026 by rpki-client