This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e2033353439.roa
File: 3137302e38332e3231362e302f32322d3234203d3e2033353439.roa (raw, json)
Hash identifier: Albad1A//rcVnukjKpspsY/GpzlG942PP8mLqEQzPCM=
Subject key identifier: 36:CA:1D:58:EB:61:35:DD:3A:A6:A3:FD:2F:10:F2:C1:68:36:27:B0
Certificate issuer: /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial: 047F1AD80ED69A27BA32C22C075B86932DACF51C
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e2033353439.roa
Signing time: Tue 06 Jan 2026 19:13:11 +0000
ROA not before: Tue 06 Jan 2026 19:08:11 +0000
ROA not after: Tue 05 Jan 2027 19:13:11 +0000
asID: 3549
IP address blocks: 170.83.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 13:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7f:1a:d8:0e:d6:9a:27:ba:32:c2:2c:07:5b:86:93:2d:ac:f5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Validity
Not Before: Jan 6 19:08:11 2026 GMT
Not After : Jan 5 19:13:11 2027 GMT
Subject: CN=36CA1D58EB6135DD3AA6A3FD2F10F2C1683627B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:9c:24:30:5f:ca:47:b9:ff:ae:f7:af:23:
28:c4:4b:ee:25:68:08:5c:3d:f4:04:ad:e0:2f:7b:
f5:42:96:7b:76:39:57:6f:6a:c1:c4:36:72:cf:8b:
49:f6:cd:49:61:3c:25:19:7e:16:cc:27:6d:e1:7f:
35:d1:59:76:3a:69:9e:29:89:eb:04:a3:4d:db:b3:
54:cd:11:f6:cf:9d:d5:39:0f:17:e2:c6:31:a5:dc:
d6:c4:5a:bf:f6:53:be:95:f5:73:3f:81:1a:a8:1f:
cc:2f:b6:79:a9:88:25:4e:4a:31:9f:42:aa:e5:1e:
2a:8a:b6:7f:d2:db:0e:c1:78:8f:9d:93:ec:18:8c:
94:84:3e:ad:a3:f1:24:66:eb:6e:5a:ef:ac:5c:a7:
8f:35:a3:0b:cc:10:ae:54:97:5b:89:c2:f9:26:38:
a9:5f:35:d3:27:a7:4c:eb:d9:db:41:17:7e:15:07:
a1:1b:6d:25:e3:c5:41:bf:4a:a0:3d:1f:83:6d:0e:
2d:1f:8b:17:7b:0e:cd:2b:e5:00:86:61:bd:29:56:
ed:eb:f9:4f:73:41:e0:1b:fd:a5:c0:42:8a:fe:25:
cb:31:46:c6:8d:e5:b6:eb:d2:b5:6f:a4:c8:17:0b:
46:0c:5c:61:51:45:89:06:fa:fe:bb:ff:1e:fb:09:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CA:1D:58:EB:61:35:DD:3A:A6:A3:FD:2F:10:F2:C1:68:36:27:B0
X509v3 Authority Key Identifier:
keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e2033353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.216.0/22
Signature Algorithm: sha256WithRSAEncryption
88:3a:27:cb:00:7f:f4:c3:2b:04:14:36:92:05:1e:31:fd:5a:
52:24:9d:02:63:e3:55:b3:5d:dd:98:c0:fe:cc:2d:ba:ef:cc:
92:ac:70:86:ba:4e:33:c3:d0:75:a7:0f:ab:55:75:5d:1c:10:
74:0b:ed:e2:5e:60:81:9b:df:6a:b8:8c:97:f4:a2:5d:0e:03:
a7:c4:cd:ba:2a:18:28:02:82:dc:3a:f5:7b:9f:65:8a:48:a5:
67:ef:4f:ee:10:5a:40:21:c5:fc:a2:bb:39:ce:f3:12:10:d2:
b1:d3:d8:08:1a:1a:84:9a:01:ad:c3:62:b8:54:52:20:82:96:
2b:e2:70:ff:fa:00:41:7d:19:d7:6e:61:91:d8:06:f2:c8:2f:
c9:2d:4d:c9:fb:d5:00:ca:86:bd:b2:0f:e9:e0:55:b3:cb:0d:
3b:36:7c:de:7b:44:d5:47:ea:30:d7:ff:11:ff:b9:b9:3c:d6:
07:30:f6:17:65:18:27:59:21:88:21:41:ad:30:35:ea:1f:e2:
55:d6:ab:85:6a:26:a5:c7:2e:5a:9f:fe:90:59:f7:ce:23:a9:
de:15:7d:da:22:36:f6:94:e4:dd:5d:bb:98:07:f9:17:7e:9d:
ee:42:7e:8c:a5:ea:8b:47:0a:8e:1d:1e:f5:6c:95:5c:87:5d:
5c:2a:d3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 16:26:48 2026 by rpki-client