This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32382e302f32342d3234203d3e20323637363939.roa
File: 3137302e3235342e32382e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier: wnYuIbcmWWSi/Vsk+OI8ogGucgv2PTUYd+6iYHLTfw8=
Subject key identifier: 00:6F:73:AA:CC:29:A7:EE:A9:81:54:1A:6C:1D:BF:A0:F3:AD:80:28
Certificate issuer: /CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Certificate serial: 242816896E48FA0C1ACBAEF9726D5F991EB6BA97
Authority key identifier: DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32382e302f32342d3234203d3e20323637363939.roa
Signing time: Tue 06 Jan 2026 20:55:41 +0000
ROA not before: Tue 06 Jan 2026 20:50:41 +0000
ROA not after: Tue 05 Jan 2027 20:55:41 +0000
asID: 267699
IP address blocks: 170.254.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:28:16:89:6e:48:fa:0c:1a:cb:ae:f9:72:6d:5f:99:1e:b6:ba:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Validity
Not Before: Jan 6 20:50:41 2026 GMT
Not After : Jan 5 20:55:41 2027 GMT
Subject: CN=006F73AACC29A7EEA981541A6C1DBFA0F3AD8028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:6e:ee:3a:fb:e8:0f:15:87:31:80:3a:32:
ad:91:f3:e0:6a:3f:83:98:50:f8:eb:76:1d:3e:7a:
04:22:13:16:99:46:67:a6:3d:a3:9a:79:c1:80:58:
83:eb:49:ab:5f:33:4a:70:5e:51:8d:10:88:9c:92:
45:e6:f5:a5:c3:51:2a:cc:bb:c3:e5:68:07:ff:46:
5c:51:66:b8:10:a6:3d:a4:7b:70:bb:5b:89:00:de:
42:dd:64:ef:9a:62:bf:01:3e:7c:b3:63:a3:8f:d4:
70:04:55:46:52:6d:a3:58:31:2b:de:44:e4:c1:6c:
dc:c1:9b:6b:45:86:cb:0a:67:0e:6b:73:3a:91:7b:
29:15:50:4c:c2:31:0d:3e:46:f8:71:de:c8:93:23:
7a:1d:4e:e8:53:83:60:bd:01:0a:d4:56:3c:2d:10:
51:bb:c6:68:6f:50:fd:1f:6b:ba:0a:a3:86:2c:e4:
82:82:d6:c3:d6:cd:f2:bf:17:c9:95:d6:23:7b:2f:
6b:6c:9f:75:62:cb:3c:fc:4f:cb:89:33:d8:c5:11:
88:9b:6d:7d:e8:0e:0c:f8:22:14:ef:5e:31:6e:1f:
3f:a4:35:c3:4e:7b:60:00:7c:78:eb:a8:a2:46:57:
64:5c:27:68:df:96:9a:39:27:fa:52:e7:7e:74:de:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6F:73:AA:CC:29:A7:EE:A9:81:54:1A:6C:1D:BF:A0:F3:AD:80:28
X509v3 Authority Key Identifier:
keyid:DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32382e302f32342d3234203d3e20323637363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fa:29:00:89:74:fd:c9:f9:55:ff:1f:a0:c5:dd:1d:4f:4d:
9e:3e:ca:bb:9a:80:8d:c7:24:1f:c4:93:a2:af:d0:6e:31:dd:
c1:85:18:c4:b6:1b:02:f2:4f:f6:9b:1c:20:1e:71:4f:cb:86:
fc:33:59:67:ac:d7:1b:5b:18:41:ff:f9:fd:95:97:a7:cd:a1:
d4:63:3e:89:7a:65:cb:2a:5e:9d:2d:4e:18:b1:15:cd:bd:c9:
76:06:18:74:c1:ef:9a:0f:29:c9:ce:9e:c6:5d:a0:12:fa:ba:
b8:69:dd:24:42:2f:ef:2e:a1:e1:6d:5b:b2:11:46:91:85:dc:
c0:4d:fc:2d:be:08:c5:c5:aa:ab:16:7b:50:9f:09:72:eb:e2:
1d:1c:43:55:71:0a:f8:4c:cf:93:5f:bc:be:9b:df:95:3b:9f:
81:30:b9:6f:c9:da:bc:fe:ed:62:1a:ed:97:61:c7:e5:0c:34:
ac:7c:ca:fc:68:a7:05:61:06:2e:f2:86:a1:22:cb:8a:d1:1f:
3c:91:47:6c:f3:06:37:91:0d:f1:02:ea:6b:9d:8f:3a:da:86:
d4:3a:b4:d6:4f:70:be:f3:1c:d7:86:53:94:f3:ac:60:4b:e3:
25:9a:06:ab:5b:65:a7:84:05:ca:4c:7c:93:47:45:48:ad:e5:
12:da:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:01 2026 by rpki-client