This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32342d3234203d3e20323730303439.roa
File: 36362e3233312e37322e302f32342d3234203d3e20323730303439.roa (raw, json)
Hash identifier: QU7hftLvXoRHOS0j7zTc046mHOjjutWoZwJngzzb+i8=
Subject key identifier: 94:50:63:12:49:64:3C:A6:8E:5F:E0:91:C0:B7:3A:77:06:DE:B0:AA
Certificate issuer: /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial: 2BC80E22D1D58B76EF8240A200CD9A5049A642B3
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32342d3234203d3e20323730303439.roa
Signing time: Tue 06 Jan 2026 19:33:26 +0000
ROA not before: Tue 06 Jan 2026 19:28:26 +0000
ROA not after: Tue 05 Jan 2027 19:33:26 +0000
asID: 270049
IP address blocks: 66.231.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 02:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c8:0e:22:d1:d5:8b:76:ef:82:40:a2:00:cd:9a:50:49:a6:42:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Validity
Not Before: Jan 6 19:28:26 2026 GMT
Not After : Jan 5 19:33:26 2027 GMT
Subject: CN=9450631249643CA68E5FE091C0B73A7706DEB0AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:de:ff:c5:65:1c:84:93:95:aa:6b:e0:4c:
e3:fc:16:c4:97:96:1f:a4:c9:ca:05:8d:ba:0e:92:
63:b5:91:60:1f:e0:f9:82:31:b7:15:ed:50:7c:aa:
65:35:6d:a5:f5:45:28:70:d9:97:a0:40:25:9b:02:
00:bd:47:e7:72:60:f9:10:02:f0:2e:21:53:e9:81:
fd:ad:ef:ee:8b:30:98:65:fe:fb:31:3e:a4:3b:6b:
d0:ac:4d:55:56:ee:cf:93:54:13:1b:ce:42:c5:61:
12:b3:92:55:ce:80:cd:80:12:8a:e8:bd:d3:59:71:
30:b9:f2:22:83:cf:ee:dc:85:34:3f:a8:5e:aa:63:
09:ef:3b:9f:a6:6c:da:75:99:6a:7c:51:8d:a0:59:
e8:3c:7d:8b:34:a6:d3:07:f3:8e:b2:7c:08:6c:99:
ba:16:f6:87:c0:56:2e:b2:4c:16:aa:2b:36:aa:96:
dc:bd:a6:ed:ae:d3:86:3d:8d:2e:47:ea:17:81:19:
7d:26:40:fb:41:e4:b0:51:05:ab:84:1b:b5:0a:5f:
47:a1:ab:18:a3:e8:59:0a:bc:13:dd:84:70:10:fa:
69:84:a4:86:bc:97:af:3e:5b:4f:35:82:b4:42:90:
35:32:e9:3d:a4:6d:91:51:5d:fe:d4:dd:e0:53:44:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:50:63:12:49:64:3C:A6:8E:5F:E0:91:C0:B7:3A:77:06:DE:B0:AA
X509v3 Authority Key Identifier:
keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32342d3234203d3e20323730303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.72.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:23:31:81:3b:2c:e1:c2:ea:8f:b7:51:33:1e:2a:2a:7a:f1:
9d:e8:c6:71:85:06:bb:ec:9f:af:33:87:ca:cd:e1:8f:9d:5b:
d9:5a:62:67:67:db:ff:0e:39:f8:84:d5:86:08:f9:69:22:71:
d0:6f:99:04:5f:56:15:6f:f5:f5:ca:9f:87:2f:27:ef:99:04:
4f:72:13:b1:84:1d:ed:6c:5d:80:f0:ec:bb:1e:f1:bb:a7:a1:
be:87:1a:c2:03:1b:75:23:98:67:25:4f:23:e4:37:a6:70:ed:
3f:ec:4b:e0:79:b3:c1:b7:df:ea:62:42:c4:bd:8f:6e:61:4f:
33:64:5b:19:00:2c:6b:22:1a:fa:89:4c:87:5e:cc:12:f7:cb:
94:4e:90:c2:77:e7:66:41:44:04:cd:55:9b:9a:3b:20:89:0a:
15:81:8d:98:66:71:0c:7b:eb:c9:e3:95:de:76:b1:c2:f4:e8:
92:34:55:4b:45:3f:fc:62:b8:42:e1:39:d5:5d:40:6d:9d:45:
75:82:ae:2b:ab:43:c0:7b:40:72:b4:fa:1a:1d:29:f3:8d:a1:
1c:07:7b:ae:55:02:a5:63:6f:f3:80:35:b6:6e:5b:9d:b6:51:
f7:59:c3:e6:2a:0c:e1:84:a3:3d:b6:0a:7a:74:09:0e:73:a0:
c6:76:e3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:31 2026 by rpki-client