This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3137302e3234362e3134382e302f32322d3234203d3e20323632323032.roa
File: 3137302e3234362e3134382e302f32322d3234203d3e20323632323032.roa (raw, json)
Hash identifier: 4uAK/yS46xPRC2E1B+1P4/jaqAO9xgKGvv2IV1BXxjU=
Subject key identifier: 1E:52:4F:C5:F7:AA:6B:10:93:E5:A1:0C:91:04:D4:2A:83:77:D6:CE
Certificate issuer: /CN=C3A4C72D613B89220886ECA00755498ABF1F663F
Certificate serial: 6D8B5458CA2AF68F0EA446894CEBCB7DCB947199
Authority key identifier: C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3137302e3234362e3134382e302f32322d3234203d3e20323632323032.roa
Signing time: Tue 06 Jan 2026 19:33:41 +0000
ROA not before: Tue 06 Jan 2026 19:28:41 +0000
ROA not after: Tue 05 Jan 2027 19:33:41 +0000
asID: 262202
IP address blocks: 170.246.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl
rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 17:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8b:54:58:ca:2a:f6:8f:0e:a4:46:89:4c:eb:cb:7d:cb:94:71:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3A4C72D613B89220886ECA00755498ABF1F663F
Validity
Not Before: Jan 6 19:28:41 2026 GMT
Not After : Jan 5 19:33:41 2027 GMT
Subject: CN=1E524FC5F7AA6B1093E5A10C9104D42A8377D6CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:98:ff:11:63:55:16:8c:24:78:cb:11:a0:
8f:b4:32:27:8b:ff:a8:89:aa:f2:38:a8:66:8f:59:
de:e7:30:23:f1:0f:fc:95:85:fe:05:28:1d:b9:d2:
bb:7a:ed:b1:a7:d6:f9:e6:58:a1:21:fc:c8:b4:f4:
47:37:15:50:95:86:47:2d:dd:70:bd:8f:5e:08:70:
0f:e2:dd:dc:7d:8d:bc:dd:b2:0f:b4:af:3e:ce:3a:
d7:36:a2:9a:3f:b1:8e:ff:6d:6e:0a:ae:70:b1:92:
04:eb:10:ad:7a:4f:9a:81:fd:f0:87:1b:4e:d2:03:
5c:29:34:3f:3b:59:a4:9d:b3:7c:60:8a:28:04:ab:
88:f9:10:15:0b:33:87:bf:a5:d5:49:2e:e9:4d:6a:
9c:4d:c8:d8:86:66:d2:07:b0:63:f1:93:cf:34:b6:
f1:20:5b:eb:74:a8:9f:32:12:9d:8b:58:ce:b5:2a:
5e:11:4c:1f:93:d6:1a:3b:f8:b1:f9:f9:70:42:28:
6d:23:2e:1d:96:ab:fe:17:af:b6:8c:c1:10:00:62:
ba:e9:4d:fe:e5:de:c5:83:19:5e:a1:26:ec:81:2f:
05:4b:5d:3d:d5:83:4d:5c:99:d3:83:f0:11:60:09:
50:77:5c:e4:0a:c9:77:ce:37:ca:61:e4:e8:4c:d9:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:4F:C5:F7:AA:6B:10:93:E5:A1:0C:91:04:D4:2A:83:77:D6:CE
X509v3 Authority Key Identifier:
keyid:C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3137302e3234362e3134382e302f32322d3234203d3e20323632323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:d2:fb:02:ba:7c:e9:cd:df:e9:9e:d1:24:90:ec:c9:35:03:
97:43:54:b6:fa:e5:86:ff:49:f8:f7:c8:22:c4:d4:b9:46:dc:
e7:62:ac:65:64:f5:52:70:76:b1:ca:9e:e1:dc:8b:fb:f5:71:
f9:b9:16:a8:a3:6b:d2:d5:e3:f2:f2:6d:d8:8c:db:29:76:bd:
32:c0:26:26:ec:d8:71:10:6a:a5:f4:95:3d:89:87:19:bf:c6:
25:32:91:d1:5a:e5:95:d2:25:ed:37:12:7a:9f:36:75:a5:f9:
ad:11:8c:fc:0d:5c:65:ab:f8:c6:00:55:f6:5c:1d:95:1e:7b:
f7:c0:39:ca:fa:24:6c:c2:46:d0:30:fa:22:4f:0e:60:5b:45:
25:02:c7:9e:e1:73:87:e9:b5:48:ae:0f:9c:08:72:e0:04:a4:
12:3b:a9:d1:61:a1:57:6d:86:9c:1e:aa:3f:ca:54:65:e8:40:
5b:c6:18:6b:fa:90:37:ce:02:e3:de:62:d1:d9:38:17:e8:74:
91:27:29:a4:df:a7:75:2a:00:6e:ab:c8:d6:d2:df:dd:78:c1:
55:a6:75:a7:30:15:c3:d4:62:72:1a:b4:e8:09:fb:72:ad:f9:
ca:c0:42:8e:fb:fd:e2:0f:76:d0:32:b8:0a:55:08:90:61:c6:
97:ab:d4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:44 2026 by rpki-client