This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32332d3234203d3e203634313339.roa
File: 3136372e3234392e32382e302f32332d3234203d3e203634313339.roa (raw, json)
Hash identifier: xAvxlELMv0UZJwljqQjvSe3D+CWZiYIe9M2wxi2iSa4=
Subject key identifier: 0F:6B:F5:A8:BD:77:F3:B2:C1:52:4C:32:C5:9A:BF:EA:27:E4:38:F2
Certificate issuer: /CN=E26827C02EA6431AE7B4F616C8625DC85A94F800
Certificate serial: 4FFC8E89CDA35954B3CEC2BB268D6807680163F8
Authority key identifier: E2:68:27:C0:2E:A6:43:1A:E7:B4:F6:16:C8:62:5D:C8:5A:94:F8:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32332d3234203d3e203634313339.roa
Signing time: Tue 06 Jan 2026 19:14:29 +0000
ROA not before: Tue 06 Jan 2026 19:09:29 +0000
ROA not after: Tue 05 Jan 2027 19:14:29 +0000
asID: 64139
IP address blocks: 167.249.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.crl
rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fc:8e:89:cd:a3:59:54:b3:ce:c2:bb:26:8d:68:07:68:01:63:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E26827C02EA6431AE7B4F616C8625DC85A94F800
Validity
Not Before: Jan 6 19:09:29 2026 GMT
Not After : Jan 5 19:14:29 2027 GMT
Subject: CN=0F6BF5A8BD77F3B2C1524C32C59ABFEA27E438F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:aa:5b:41:b3:95:a1:66:15:d2:b2:62:99:
8a:f5:f4:4a:b3:60:f0:61:b5:ff:a9:9d:68:e4:0a:
12:cf:9d:3e:ba:f8:ca:4e:9d:5c:f8:3c:74:06:37:
01:c5:8b:ef:7f:ad:f9:a7:55:72:e0:a9:98:00:20:
cd:a5:14:c4:83:53:20:8c:7e:45:ec:12:0f:68:27:
a0:1c:d5:6d:38:8b:96:6a:22:42:49:eb:1a:fa:05:
ed:4a:c2:81:6b:88:c1:db:ae:e7:c3:74:b7:c6:4f:
d2:a2:40:49:0b:cb:b9:9d:aa:6a:a2:50:da:ce:20:
cb:f1:f6:98:6f:82:80:7b:bf:76:c1:cd:1a:a6:01:
22:18:4c:1d:b9:4f:3c:c0:9b:96:9d:09:cc:a6:ad:
6e:c4:de:c4:e4:01:cc:4d:7d:93:fd:40:32:5c:e3:
2a:f6:aa:ab:a0:9b:f8:be:1f:93:8b:7c:b6:b9:40:
3c:b2:d4:e9:9d:aa:d5:34:f6:dd:35:d4:de:c2:84:
ae:ca:71:61:f8:47:f2:7d:e1:24:19:70:11:1e:fb:
9f:7d:f0:42:19:7a:fe:ea:83:f8:b1:d5:7f:0d:0c:
23:ea:b7:ec:2c:80:e0:a3:c3:8d:df:23:aa:91:7c:
18:62:65:1a:bc:62:22:74:80:bb:14:6d:27:26:34:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6B:F5:A8:BD:77:F3:B2:C1:52:4C:32:C5:9A:BF:EA:27:E4:38:F2
X509v3 Authority Key Identifier:
keyid:E2:68:27:C0:2E:A6:43:1A:E7:B4:F6:16:C8:62:5D:C8:5A:94:F8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/3136372e3234392e32382e302f32332d3234203d3e203634313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.28.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:a4:ed:07:88:48:fc:76:f6:2d:a7:3c:8a:1a:ba:18:bf:73:
c0:f3:6a:8c:f3:eb:71:b6:18:fd:d1:20:4d:22:29:5f:0e:a2:
16:2e:35:26:89:fc:00:e6:cd:a4:65:14:1d:16:d6:2a:38:42:
83:4b:3d:62:44:7d:37:5a:bb:1d:86:be:8f:8e:03:e2:d0:7f:
aa:3a:84:f3:ce:04:f4:4e:0c:20:3f:6f:ed:0d:0a:9a:2a:c7:
89:b3:0b:d9:d2:27:be:8a:dc:09:63:c6:3c:de:86:fb:8b:35:
df:b3:17:3a:cb:88:61:c8:0d:95:41:bd:7e:27:60:87:5d:31:
c4:01:d9:bc:7c:99:36:10:f1:c7:07:fd:64:26:f3:f3:3b:5a:
28:ea:03:b0:06:08:0e:46:3c:c9:c8:8a:9f:c9:d5:4b:76:c6:
50:6f:ad:9b:e1:ea:d7:03:3d:d0:29:21:df:89:b4:2c:24:59:
95:2e:5b:c9:4d:27:a3:38:6d:6e:40:8d:f3:9d:d9:6c:25:f6:
2c:16:9e:0e:62:eb:54:d2:4f:db:b4:55:a0:f9:27:4b:e3:4a:
9f:65:2c:b9:d2:c8:e8:ca:07:89:82:c9:a8:e6:76:7e:04:27:
e0:1f:8a:7b:a7:e4:64:7c:49:ff:1a:fd:a8:cd:6c:fc:d0:21:
fe:ca:61:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:45 2026 by rpki-client