This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33322e302f32342d3234203d3e20323637373839.roa
File: 3136312e32322e33322e302f32342d3234203d3e20323637373839.roa (raw, json)
Hash identifier: Ep2sx5wU/kCD3BGBI0vtTbsFqo/omyWAg1unQm6Zxs8=
Subject key identifier: 4C:3D:F1:E4:AF:81:64:E5:15:40:9C:E3:5E:0D:83:D2:10:1F:B4:F1
Certificate issuer: /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial: 7C6CD973DBCFB53F66435C656BCC27D57452719C
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33322e302f32342d3234203d3e20323637373839.roa
Signing time: Tue 06 Jan 2026 19:36:14 +0000
ROA not before: Tue 06 Jan 2026 19:31:14 +0000
ROA not after: Tue 05 Jan 2027 19:36:14 +0000
asID: 267789
IP address blocks: 161.22.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 05:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6c:d9:73:db:cf:b5:3f:66:43:5c:65:6b:cc:27:d5:74:52:71:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Validity
Not Before: Jan 6 19:31:14 2026 GMT
Not After : Jan 5 19:36:14 2027 GMT
Subject: CN=4C3DF1E4AF8164E515409CE35E0D83D2101FB4F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:a8:7a:f5:c6:48:8e:a3:f9:e0:0d:04:67:
98:3a:b5:91:fe:87:aa:92:01:45:b0:e1:a0:1e:b9:
f2:24:94:89:9e:dc:a1:66:d6:ae:88:14:fe:00:fc:
99:0e:b4:44:ad:ac:a8:58:4f:ed:16:cc:0e:c4:9c:
25:2f:5c:86:55:24:7d:80:cb:77:03:ee:c6:bc:12:
3f:f0:b8:05:3e:e1:85:56:cf:fb:d6:34:d2:08:0c:
25:ea:35:2d:9c:da:a5:37:4d:6f:2d:42:1e:05:ed:
f8:43:bd:d2:00:e8:53:c7:0d:f6:b7:f1:ca:9a:7b:
88:8a:0b:73:44:78:4b:11:c8:66:9c:99:2e:28:60:
b9:44:3c:d0:a6:43:5b:0b:0a:5f:8d:e6:59:32:e2:
3b:7c:99:bb:05:da:be:ee:a7:95:32:45:23:38:95:
e2:2c:e2:ad:37:46:c6:fd:75:89:b6:3e:5e:62:88:
af:b8:96:f5:24:83:5e:1a:3b:cb:80:36:b0:89:a6:
91:89:fe:0b:ce:6a:b4:f1:cb:06:fc:0c:ed:5a:e2:
53:17:98:7e:5c:be:00:32:66:11:c9:5b:08:8d:3b:
b7:3c:4e:df:93:2c:1c:22:cd:2c:2e:81:55:64:0d:
b9:70:de:b2:78:f7:e6:e2:ee:44:c3:4f:c6:cc:b3:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:F1:E4:AF:81:64:E5:15:40:9C:E3:5E:0D:83:D2:10:1F:B4:F1
X509v3 Authority Key Identifier:
keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33322e302f32342d3234203d3e20323637373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.32.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d7:4e:3d:88:42:e4:52:7f:99:88:85:cf:15:98:b3:23:df:
e6:03:ce:98:b0:73:52:da:9c:76:94:ac:6c:fc:04:22:4b:19:
e4:83:1d:d3:46:16:dc:3c:57:0a:c6:8b:79:26:fe:d9:81:39:
d5:da:4e:4e:85:b3:99:a6:87:57:2d:e5:87:67:aa:03:b6:93:
64:e0:8a:ff:fe:1c:87:8e:dc:d3:75:c5:b9:9a:29:6d:7d:83:
21:ac:d1:fd:f4:89:78:ef:54:e8:9a:ae:cb:f9:25:6b:5a:d3:
35:3d:53:91:9e:0c:88:09:d7:a1:98:74:46:ae:b2:d3:16:5c:
70:a6:64:ef:60:0c:18:01:a1:93:37:ed:74:9a:33:d2:a9:e6:
99:6b:ef:e1:14:da:d1:39:18:6c:fe:22:e4:46:45:6c:74:dd:
ba:e9:28:9d:a1:00:f7:38:ce:4e:c6:92:f4:6a:84:87:df:13:
2e:ca:75:47:24:48:53:48:39:b6:15:e0:2f:08:ef:bf:15:e5:
f6:9f:7d:22:2e:b9:d5:6b:b3:2a:33:dc:f9:e0:ff:c2:00:8b:
63:95:42:86:84:08:5a:99:d8:4b:2e:ce:12:cd:89:d5:cf:f1:
9f:02:da:37:46:ac:54:62:62:22:71:2f:0e:50:cc:13:a3:a1:
44:66:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:06 2026 by rpki-client