This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203336353131.roa
File: 3137302e3233332e37332e302f32342d3234203d3e203336353131.roa (raw, json)
Hash identifier: RkOGaaRKkWxa05w2nkzOzq9FaikNcyvGAGEu6k6ZygU=
Subject key identifier: F1:E7:08:65:AA:66:AB:0F:3E:F2:D4:F7:AF:54:1B:ED:50:C1:98:51
Certificate issuer: /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial: 685C54EDA270BBF725BC0CDF5949AADA266064C7
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203336353131.roa
Signing time: Tue 18 Nov 2025 15:53:04 +0000
ROA not before: Tue 18 Nov 2025 15:48:04 +0000
ROA not after: Tue 17 Nov 2026 15:53:04 +0000
asID: 36511
IP address blocks: 170.233.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5c:54:ed:a2:70:bb:f7:25:bc:0c:df:59:49:aa:da:26:60:64:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Validity
Not Before: Nov 18 15:48:04 2025 GMT
Not After : Nov 17 15:53:04 2026 GMT
Subject: CN=F1E70865AA66AB0F3EF2D4F7AF541BED50C19851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:48:ab:90:db:41:e5:50:25:ec:9c:ac:7b:
71:7b:2a:0a:86:5f:30:b0:c9:4e:7b:20:17:88:7e:
84:f7:09:69:5c:77:43:12:69:bf:7e:b2:ab:b6:9f:
42:31:c1:5d:38:6c:5a:bf:6b:54:d2:c9:52:e7:a6:
7f:22:8b:cf:20:77:ad:8b:f8:9f:f3:87:0f:1d:2a:
0f:74:91:3d:43:f2:6e:9e:7f:95:2e:e4:ef:47:1b:
22:95:10:ff:36:04:8f:1f:2b:b8:25:7e:8c:6c:57:
a8:d6:29:74:f3:09:4c:d0:6e:25:41:c0:1e:53:84:
c2:6d:37:83:de:d4:ba:3d:f2:9b:97:59:63:8f:ec:
f0:ef:e2:13:a1:2e:d0:fa:69:19:c8:cb:11:ee:ec:
c3:a9:4c:bc:bf:35:e4:60:58:ca:19:6d:34:dd:c2:
25:5d:8a:9f:aa:93:0b:29:0e:7e:75:b9:08:23:67:
17:a3:d9:90:c2:d2:d3:40:e3:f9:ca:36:0b:47:00:
be:97:1a:49:85:59:b4:b7:22:8c:03:fb:4e:ea:4d:
33:5b:f2:35:c3:d8:9f:d3:b1:48:06:94:04:8a:61:
9b:50:b9:a1:30:06:f5:a4:c7:f6:76:a0:8b:aa:ac:
af:03:4b:a5:e7:2a:ee:b0:fe:8c:fe:5f:23:57:f9:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E7:08:65:AA:66:AB:0F:3E:F2:D4:F7:AF:54:1B:ED:50:C1:98:51
X509v3 Authority Key Identifier:
keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203336353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.73.0/24
Signature Algorithm: sha256WithRSAEncryption
02:00:a4:e1:e4:07:af:ef:da:c5:e8:62:05:96:0e:f2:55:93:
50:7f:ba:96:f7:b1:07:b3:13:36:56:41:e6:a7:b7:a9:cd:00:
9f:da:f1:7f:0d:b3:c4:37:6d:2a:4c:12:b1:b9:9e:23:ed:3d:
c8:a8:78:14:47:e7:ed:c9:68:0d:7d:15:d1:55:fa:44:c4:a3:
87:88:f9:11:47:15:cc:35:9f:1b:56:aa:6c:e5:b5:78:59:fd:
eb:5a:db:5e:b1:c6:7e:d7:d3:78:5c:a8:10:1d:87:56:4e:1a:
41:7e:5e:95:df:79:2e:8b:ba:55:6e:65:fb:c4:1a:73:34:ea:
a6:a2:dd:10:7d:76:04:b7:39:4f:39:39:63:1b:09:62:a0:bf:
84:5d:c3:77:0c:e5:55:6c:aa:a2:aa:24:8c:ca:3b:bc:01:0a:
48:4c:82:df:5a:1f:59:68:2b:53:44:d9:66:bd:d0:ac:45:ff:
a4:a3:84:f9:ed:fc:8e:92:e8:81:4e:cb:12:0c:76:c2:a5:58:
17:80:d8:80:6a:1b:34:09:77:41:d1:b3:c3:3e:02:95:a1:73:
e1:c8:28:44:28:62:7d:03:64:6a:90:62:a6:b3:18:67:54:28:
7a:b9:1f:23:c2:09:7f:ee:cf:16:8c:b8:ae:27:d3:89:62:ca:
b5:75:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:11:09 2025 by rpki-client