This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33362e302f32342d3234203d3e20323732383039.roa
File: 3136312e32322e33362e302f32342d3234203d3e20323732383039.roa (raw, json)
Hash identifier: JurDlWAOQmrb6IC11es0tzFmpkoHRpySpqO63JlRpJI=
Subject key identifier: C8:C1:4C:78:63:9C:D6:6A:1B:E4:C7:10:01:75:C7:BA:31:7A:E7:48
Certificate issuer: /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial: 3039D223420A2FF49574A5FEEA59EBF88417AB37
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33362e302f32342d3234203d3e20323732383039.roa
Signing time: Tue 06 Jan 2026 19:36:15 +0000
ROA not before: Tue 06 Jan 2026 19:31:15 +0000
ROA not after: Tue 05 Jan 2027 19:36:15 +0000
asID: 272809
IP address blocks: 161.22.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 05:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:39:d2:23:42:0a:2f:f4:95:74:a5:fe:ea:59:eb:f8:84:17:ab:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Validity
Not Before: Jan 6 19:31:15 2026 GMT
Not After : Jan 5 19:36:15 2027 GMT
Subject: CN=C8C14C78639CD66A1BE4C7100175C7BA317AE748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:17:c6:80:3f:38:d6:b4:fe:00:cb:49:98:98:
35:f7:e5:62:f3:07:3d:18:42:ea:fa:23:35:dd:c0:
fa:fd:be:64:ea:92:75:a7:f4:07:a8:e7:3e:49:50:
68:75:0a:fc:24:63:79:f7:a9:3f:28:62:20:6c:03:
7b:eb:f2:c9:9d:a0:33:99:dd:99:40:af:bd:9a:e8:
ba:44:2f:e9:89:0a:5e:3b:36:93:41:50:8f:8f:69:
94:31:41:cc:e0:94:15:0b:1a:54:04:30:58:18:1a:
70:4e:f5:b7:72:94:db:33:c9:e0:cb:bf:ec:5b:e3:
a1:cc:de:01:99:97:3b:03:7e:66:bf:44:86:c6:06:
b3:5b:9f:a4:cd:cc:81:84:f0:8c:5c:94:e0:90:e8:
1e:03:3e:85:cb:78:7a:b9:08:32:8b:18:63:83:31:
46:20:a8:31:ab:3c:9b:a1:2a:b8:86:e6:13:c0:43:
92:a2:2d:d1:77:80:e8:97:cc:c3:47:5b:be:2a:57:
e6:52:24:94:64:b6:35:b7:ae:08:54:7c:28:67:42:
fb:d0:ab:9c:51:fc:aa:43:9d:05:a8:4f:8a:e6:67:
aa:bf:f0:59:83:d8:4f:b1:c3:59:12:e1:25:92:4a:
d7:aa:b5:b4:a9:10:a4:d5:cb:e0:91:d8:d6:c4:29:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C1:4C:78:63:9C:D6:6A:1B:E4:C7:10:01:75:C7:BA:31:7A:E7:48
X509v3 Authority Key Identifier:
keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33362e302f32342d3234203d3e20323732383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.36.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e4:c6:c7:33:46:8d:5b:0a:ad:c3:ad:6a:1e:5c:bd:bf:ed:
94:62:14:7b:a7:49:79:18:31:cd:28:be:38:5e:1d:5d:af:7c:
e5:19:83:3d:5f:11:8a:63:af:4b:82:40:19:fd:d7:6c:43:18:
6a:43:2a:e7:c4:b7:44:dd:ce:05:11:ea:e2:9d:a8:46:0c:8b:
ab:12:0e:c2:2b:f6:44:1c:0f:75:d5:8a:ac:cb:e3:ff:5c:7c:
9d:d0:48:e5:bb:e2:27:41:b2:0e:93:53:17:cf:21:5a:36:85:
6d:d5:80:17:81:34:f2:84:a9:c6:58:76:8c:48:4e:fe:c2:30:
c4:83:58:28:bd:82:c4:d2:d7:96:ea:3a:77:a7:c3:3e:a8:5e:
dd:e8:d4:ff:41:9f:90:09:b2:c0:eb:53:52:81:ad:6e:d0:73:
b3:fb:06:df:40:ed:49:89:b3:f0:90:7e:c5:88:ca:0f:58:13:
90:2e:00:67:5a:14:c7:da:83:c6:81:41:b3:bb:84:d4:74:7a:
f0:da:61:84:a5:7b:fb:1b:66:8a:c3:cb:b8:58:87:a9:f6:76:
11:b1:a5:05:2f:ac:b4:23:6a:b6:44:dd:d2:b8:db:2c:af:c8:
6c:47:28:d2:8d:f7:0a:fb:d8:0a:a8:70:07:ee:e7:34:f5:a9:
67:50:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:23 2026 by rpki-client