This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa
File: 3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa (raw, json)
Hash identifier: 1r51XrLSM+wAbuBKAWM84Xe/ryC5hZCFAW3m1cVhZlY=
Subject key identifier: 62:5E:EC:99:21:CF:0C:0A:E7:0F:A0:B7:86:51:CF:BE:8C:7E:50:20
Certificate issuer: /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial: 03A10E3D4C15DC1029FCBAF5B831881B54FD36C8
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa
Signing time: Tue 06 Jan 2026 19:21:27 +0000
ROA not before: Tue 06 Jan 2026 19:16:27 +0000
ROA not after: Tue 05 Jan 2027 19:21:27 +0000
asID: 265639
IP address blocks: 170.246.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl
rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 09:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a1:0e:3d:4c:15:dc:10:29:fc:ba:f5:b8:31:88:1b:54:fd:36:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Validity
Not Before: Jan 6 19:16:27 2026 GMT
Not After : Jan 5 19:21:27 2027 GMT
Subject: CN=625EEC9921CF0C0AE70FA0B78651CFBE8C7E5020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:1c:ce:78:df:4f:7e:a6:8d:82:27:95:2a:
e7:04:75:d1:da:23:28:c6:02:fb:06:83:24:e5:b4:
68:02:7f:22:1f:37:0a:a9:2f:1c:69:81:ea:5a:64:
db:98:77:8a:bf:a2:f5:87:06:47:d9:68:03:fc:2e:
0f:73:99:e7:e8:3f:57:3b:24:07:31:de:d4:b4:29:
71:9a:d1:e4:da:9a:af:c2:0f:ca:8d:0e:6a:df:ea:
f1:c8:41:53:2e:4f:ad:32:ad:09:29:5f:df:2b:95:
47:ab:ea:96:26:db:e9:36:4a:9b:ec:bc:05:33:c3:
2e:63:0a:67:ef:12:b4:c5:2e:d7:17:60:3a:a1:5f:
55:74:fd:cf:a4:6d:7e:b6:a5:68:28:26:86:9b:0a:
68:1e:79:4c:d8:9a:e5:bd:2d:f6:0a:7e:82:9d:78:
16:47:63:05:ff:d1:75:b6:f6:7a:08:65:29:a2:8f:
55:0b:64:02:da:c9:e6:06:de:34:70:bc:84:15:a2:
81:05:6d:a7:6f:1d:b8:5a:e1:c2:ce:cd:94:3a:cc:
23:d3:b8:f2:0e:e9:94:43:02:9f:72:38:2d:7e:95:
f3:18:c7:2b:25:96:a7:a2:2f:54:82:f2:fd:ff:67:
03:c4:1b:e2:23:57:08:08:09:29:10:0b:db:1e:6e:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5E:EC:99:21:CF:0C:0A:E7:0F:A0:B7:86:51:CF:BE:8C:7E:50:20
X509v3 Authority Key Identifier:
keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.88.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:77:73:69:5e:92:83:7b:8a:3f:0b:92:d1:18:c6:95:04:bb:
8a:4f:c7:45:0b:c1:c4:e6:01:76:58:eb:0c:5c:ce:a6:b4:7f:
61:ff:2f:3a:e5:87:3e:c0:93:26:cd:11:92:75:dd:c2:96:f2:
e4:09:99:28:2c:dd:c9:07:a7:08:0e:f1:82:3f:76:8d:fe:eb:
54:cf:1c:0a:92:d3:0b:52:12:10:1d:a0:ea:12:c5:a9:0d:a9:
49:cc:f6:4d:39:25:fb:88:e2:24:0c:6f:17:41:b1:3d:37:93:
c6:be:8b:db:66:09:d7:80:51:fb:f4:f2:85:16:e3:fc:47:4e:
a4:b0:16:61:99:93:0f:5a:91:35:63:53:1a:33:e0:53:4a:84:
a2:07:21:73:b5:3c:10:86:bd:0b:78:23:a1:c0:6b:c7:68:bc:
29:cc:85:79:00:e3:77:9c:3d:e9:96:38:d3:22:2e:cc:28:4c:
7b:e4:16:03:c2:16:59:2b:a4:2a:5a:75:cc:40:96:8c:94:bb:
d9:61:f9:bb:a7:2b:bd:2d:89:3a:20:c5:bd:1c:30:d1:9a:39:
c9:b4:f7:cb:53:68:61:41:21:1e:1e:aa:94:ca:00:e2:ec:fc:
d0:f0:62:3a:18:b7:61:ff:9a:e2:00:b0:04:06:be:bd:a0:48:
07:2c:9f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:41 2026 by rpki-client