This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3137302e38342e3133362e302f32322d3234203d3e203231383236.roa
File: 3137302e38342e3133362e302f32322d3234203d3e203231383236.roa (raw, json)
Hash identifier: V7GoadyssF67BK05ZI4txSeSJmYpRPP7aRTS/G6NHq8=
Subject key identifier: DB:52:31:8B:EC:5A:F5:65:2D:06:19:A9:41:10:4E:78:AE:53:3F:98
Certificate issuer: /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial: 08BB428DF6D4AFCAA68F257F973B467BB23683EA
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3137302e38342e3133362e302f32322d3234203d3e203231383236.roa
Signing time: Tue 06 Jan 2026 19:37:44 +0000
ROA not before: Tue 06 Jan 2026 19:32:44 +0000
ROA not after: Tue 05 Jan 2027 19:37:44 +0000
asID: 21826
IP address blocks: 170.84.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 05:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:bb:42:8d:f6:d4:af:ca:a6:8f:25:7f:97:3b:46:7b:b2:36:83:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Validity
Not Before: Jan 6 19:32:44 2026 GMT
Not After : Jan 5 19:37:44 2027 GMT
Subject: CN=DB52318BEC5AF5652D0619A941104E78AE533F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:d7:ee:db:d7:ce:4e:6e:71:a3:8e:7c:8f:
5d:8a:a6:5d:be:24:89:80:cf:d1:f1:33:dc:68:f8:
c6:94:7a:d2:7a:33:e7:c1:59:66:7b:a2:86:61:98:
af:17:3b:f8:29:c1:78:80:77:0b:cd:59:c0:ee:53:
e8:d0:f4:4c:5d:3d:66:ff:2e:4d:6d:a4:76:ab:84:
ff:3a:70:ef:f8:33:94:5d:fa:7c:13:eb:80:c3:5f:
d8:ec:ff:ee:c6:8a:98:62:a5:35:7e:e0:d1:3e:54:
fb:ec:09:22:4f:11:c4:58:3e:1a:1e:9b:5b:5f:f2:
cd:ca:91:b0:5e:a8:4d:19:26:5e:88:09:96:df:1f:
eb:ce:65:8f:67:bd:a7:0a:c5:6c:7e:f1:60:04:19:
b1:9c:ce:c0:fa:c3:41:3a:49:91:72:5f:c3:a7:60:
c2:49:d4:8f:1d:d6:ae:60:ef:d2:cd:76:fe:66:e4:
bf:36:85:dd:0f:41:ab:44:59:99:3d:7c:67:40:a7:
89:2e:06:84:2b:37:68:eb:01:cc:c4:7f:24:bd:b9:
65:b8:ca:cd:ed:af:0d:5f:31:4f:d1:8c:00:1b:c1:
74:31:b0:34:77:c0:cc:f7:66:f9:6e:7f:cb:9e:8f:
b1:c7:ee:da:2b:12:02:1f:c4:4a:72:e2:88:db:75:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:52:31:8B:EC:5A:F5:65:2D:06:19:A9:41:10:4E:78:AE:53:3F:98
X509v3 Authority Key Identifier:
keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3137302e38342e3133362e302f32322d3234203d3e203231383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.136.0/22
Signature Algorithm: sha256WithRSAEncryption
17:ca:2e:3a:c5:b2:d7:19:7e:31:41:ae:33:99:49:ca:63:da:
70:08:63:05:dd:43:5d:fd:97:27:2d:6e:94:75:8c:68:9c:db:
28:e1:4b:b5:5f:36:28:1f:29:3a:46:05:3d:8c:0f:cf:b1:ca:
07:7f:75:67:7b:40:aa:e7:6b:22:83:17:a7:88:3d:42:02:79:
3e:bc:63:61:9e:19:77:5d:10:37:cf:39:79:e2:a5:57:d9:0f:
7f:15:ec:b9:4a:be:92:7f:35:9a:dd:77:07:21:05:91:ea:a3:
20:a5:cf:7a:f2:1a:bd:a0:92:b7:a1:d4:7f:89:4e:23:a3:a7:
c9:4a:e3:98:83:4b:52:db:a4:b4:8f:47:bc:77:42:78:97:bd:
e8:98:25:38:32:e2:c5:9c:fa:c8:54:26:af:92:62:35:ea:64:
19:97:31:f6:ca:f8:28:1c:9a:d7:b8:95:df:41:a7:1f:e6:36:
0f:31:ac:df:b0:61:ed:d2:a4:82:96:7e:a1:b6:97:09:dd:c5:
ab:e8:b6:ed:f0:a6:9b:75:af:ae:fe:b6:88:5e:f6:ac:97:3c:
cd:33:c0:4b:e8:86:16:76:d6:cd:51:fc:68:26:97:7a:9d:4b:
50:ab:6c:3f:b2:8e:94:31:79:9d:b8:0a:a5:c1:da:91:ca:0c:
78:21:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:18 2026 by rpki-client