This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137302e3235342e38382e302f32322d3234203d3e20323635353234.roa
File: 3137302e3235342e38382e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier: DdbOAwm41lCf8EtI6JarQHH9NFtgrQ1WgI2/mn9Lr4g=
Subject key identifier: C4:6D:B3:81:59:75:7C:C4:5D:46:C5:83:9E:52:AC:12:27:6D:AC:2A
Certificate issuer: /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial: 044BF46F8DFA711B587E0BFC01B7B67B568FBD47
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137302e3235342e38382e302f32322d3234203d3e20323635353234.roa
Signing time: Wed 07 Jan 2026 07:59:09 +0000
ROA not before: Wed 07 Jan 2026 07:54:09 +0000
ROA not after: Wed 06 Jan 2027 07:59:09 +0000
asID: 265524
IP address blocks: 170.254.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4b:f4:6f:8d:fa:71:1b:58:7e:0b:fc:01:b7:b6:7b:56:8f:bd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Validity
Not Before: Jan 7 07:54:09 2026 GMT
Not After : Jan 6 07:59:09 2027 GMT
Subject: CN=C46DB38159757CC45D46C5839E52AC12276DAC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:22:c0:76:45:4a:08:29:87:35:57:7a:ae:
1f:07:24:23:18:42:09:39:96:31:cd:3e:54:ee:4c:
e9:0c:fe:7c:85:55:2b:2a:9b:e4:6d:e7:60:0d:a3:
16:2d:59:b3:0c:3b:2e:08:51:c4:45:5d:07:a9:21:
bc:08:f9:98:46:ab:d8:64:24:ee:8c:cd:4d:7f:7b:
c2:b1:97:6a:75:a4:56:d0:94:bf:64:52:67:7b:ab:
e8:5f:63:3c:0f:90:5d:cd:5e:c5:6c:2b:fb:1d:dd:
cd:58:89:da:b8:4b:73:db:64:b6:f4:ed:8f:d9:38:
0b:55:db:18:3c:9b:e8:19:14:1d:d2:c1:85:05:25:
5f:2b:9b:24:8d:01:3b:86:97:ec:56:66:80:82:4b:
34:72:1f:f4:09:e8:e8:95:2e:4c:72:aa:1f:df:76:
ee:5c:1c:bf:dc:19:d5:f8:18:f7:49:41:f7:64:84:
ab:bf:29:2e:79:2d:db:1b:30:0f:77:41:95:64:81:
97:4a:9f:e8:a2:4f:40:c7:14:ff:f2:ac:9a:4e:c6:
2d:a8:0f:57:b2:e6:23:c8:5e:cd:ae:e6:f6:48:33:
db:5b:35:d4:60:98:be:2f:65:17:8a:10:be:f0:46:
22:cf:77:9b:87:8f:71:c4:39:5e:5e:ed:6a:02:1f:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6D:B3:81:59:75:7C:C4:5D:46:C5:83:9E:52:AC:12:27:6D:AC:2A
X509v3 Authority Key Identifier:
keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137302e3235342e38382e302f32322d3234203d3e20323635353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.88.0/22
Signature Algorithm: sha256WithRSAEncryption
05:e4:e1:ec:38:50:87:00:40:b6:d1:4c:d1:e5:39:9f:04:86:
21:2e:59:93:c2:42:41:b0:50:34:fe:de:94:31:3c:f7:a3:35:
6f:17:4b:80:7a:f3:78:7b:a8:bc:98:2b:83:ea:19:77:e2:24:
07:1d:56:72:af:d3:bd:57:28:45:b7:a0:c1:45:bd:29:ec:11:
00:d3:03:2a:24:cb:aa:71:7a:c8:54:45:78:07:7e:55:62:53:
aa:27:1d:45:48:1b:e2:ac:d9:b3:0f:42:28:08:1c:1c:4d:e2:
65:ac:85:dc:74:f0:6d:15:53:a0:ae:94:a9:60:4e:0d:a5:15:
9c:17:d5:9c:de:c9:d5:3f:65:d9:7c:08:24:c6:27:fe:c4:aa:
0b:bc:e5:c4:c1:e7:4f:c9:56:5f:56:5d:f1:cb:31:1e:e6:a2:
44:68:77:b8:4f:8d:aa:95:f8:ef:9f:4c:94:ed:3f:f7:39:ae:
25:31:d0:3d:b0:91:95:46:2a:11:f4:c4:b9:d5:2b:21:36:3c:
74:a7:3c:06:92:72:00:5d:a5:17:e7:28:35:10:c1:04:21:da:
3d:03:4d:55:7c:80:a7:a2:4e:8b:f0:d5:0e:cd:b1:cf:23:f7:
7a:3c:dc:92:0e:e5:34:37:ca:f6:36:10:db:12:1b:d3:b5:af:
d8:0b:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:15:41 2026 by rpki-client