This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3136382e302f32342d3234203d3e20323634383135.roa
File: 3137302e3233392e3136382e302f32342d3234203d3e20323634383135.roa (raw, json)
Hash identifier: pQTrXxub2/t6DYqJpFqI2qyf/WILhFDPg8EFi6yuZMo=
Subject key identifier: A0:20:A1:C0:BB:2E:53:FA:98:28:25:ED:09:FC:05:C3:21:4A:F3:07
Certificate issuer: /CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
Certificate serial: 0D2A14DCCC4A7961807C4993F1EDD82801BA2D17
Authority key identifier: 1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3136382e302f32342d3234203d3e20323634383135.roa
Signing time: Mon 10 Nov 2025 18:05:01 +0000
ROA not before: Mon 10 Nov 2025 18:00:01 +0000
ROA not after: Mon 09 Nov 2026 18:05:01 +0000
asID: 264815
IP address blocks: 170.239.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl
rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2a:14:dc:cc:4a:79:61:80:7c:49:93:f1:ed:d8:28:01:ba:2d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
Validity
Not Before: Nov 10 18:00:01 2025 GMT
Not After : Nov 9 18:05:01 2026 GMT
Subject: CN=A020A1C0BB2E53FA982825ED09FC05C3214AF307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:cb:04:a3:0a:8d:f5:da:e3:1e:2d:f8:58:
42:3a:21:6d:e1:8a:fa:32:96:44:08:b6:ff:5f:1e:
8d:21:cf:d5:14:9d:0b:13:ce:63:5a:75:96:f1:4f:
76:ee:ba:f8:e3:a0:a4:2b:23:66:9e:6d:1f:09:62:
38:22:6e:3d:57:a1:68:41:6a:7e:71:36:92:c9:6f:
bf:96:e3:70:54:e2:f9:63:1d:58:03:8e:a4:62:34:
8f:4b:bc:8f:d4:e3:dd:7d:af:62:2e:65:82:a4:29:
d4:2b:8a:a9:e8:b6:7d:19:34:b6:97:ae:86:b6:ae:
41:6d:10:8c:87:c9:68:31:e7:78:4e:85:57:f2:d2:
06:d5:dc:f7:9f:e6:fa:1b:db:d6:ad:07:52:ec:96:
ba:96:36:e4:22:f1:cd:c7:30:ff:a4:e2:80:55:ff:
61:f6:38:6c:ef:a0:63:00:20:e0:79:29:dd:e0:06:
1d:77:e5:9d:48:2c:e6:ad:98:4d:5c:fb:40:2b:b8:
90:5a:d5:a6:37:92:c0:0d:9c:af:d7:b4:cf:0f:2c:
6e:5e:5e:24:c3:61:cd:79:02:dc:91:c8:ef:7c:e2:
e5:6d:5d:5e:4d:3c:21:56:f2:07:bc:b2:ee:5e:c3:
9f:f5:44:fd:db:ee:23:9e:6f:a7:dc:24:f5:e8:3d:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:20:A1:C0:BB:2E:53:FA:98:28:25:ED:09:FC:05:C3:21:4A:F3:07
X509v3 Authority Key Identifier:
keyid:1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3136382e302f32342d3234203d3e20323634383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:03:8b:77:24:c1:b6:16:75:78:0c:e5:93:49:38:d6:f7:30:
7e:68:e3:ab:e8:0f:52:95:ea:e7:f6:aa:5a:b0:3e:f4:70:02:
11:8a:86:2a:55:be:0b:dc:e6:a5:72:7f:d4:aa:e0:af:31:23:
b4:b6:84:78:c8:b1:b6:ae:d4:87:62:c4:bf:e1:61:08:85:9a:
0b:27:4d:69:8e:fc:3e:9a:dd:0e:bb:f5:81:be:83:de:41:72:
50:d3:45:18:c5:0b:15:48:9c:54:40:bb:15:12:69:cc:47:38:
b6:ac:af:86:55:0e:14:60:45:bf:a7:ad:32:6b:e1:1b:9e:b6:
1f:84:32:f2:d1:e6:95:12:5d:48:b5:25:af:41:78:2e:72:eb:
db:1b:b5:96:a2:6d:1a:bd:b9:37:c4:37:0c:84:39:65:b2:82:
8a:03:f9:b4:11:36:a3:52:3e:84:1b:e5:1f:fc:3a:5f:6f:b2:
5f:a2:42:fb:6d:b8:22:1d:0a:f3:d1:d6:1d:e9:f1:93:3c:c5:
c9:13:92:9e:f9:88:fa:45:1f:eb:b6:cc:92:c4:78:82:f5:f2:
35:d5:50:3f:38:df:55:2d:8d:c8:94:a3:98:d1:32:40:12:10:
80:e9:e5:a5:89:42:20:5e:33:2a:95:6a:3a:5c:2d:e1:68:81:
35:f3:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:48:01 2025 by rpki-client