This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa
File: 3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: bHH18rI/fd2cGnYyJVfyZyNlVTghehpwiAtVgRqnJ6Q=
Subject key identifier: 83:35:20:91:C6:06:65:AA:5C:1D:47:C3:F8:67:09:E7:77:03:E8:F4
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 388EA231FE75BF6E737B0BBB115E21950E7A905A
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa
Signing time: Tue 06 Jan 2026 20:55:35 +0000
ROA not before: Tue 06 Jan 2026 20:50:35 +0000
ROA not after: Tue 05 Jan 2027 20:55:35 +0000
asID: 262191
IP address blocks: 168.228.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 10:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8e:a2:31:fe:75:bf:6e:73:7b:0b:bb:11:5e:21:95:0e:7a:90:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Jan 6 20:50:35 2026 GMT
Not After : Jan 5 20:55:35 2027 GMT
Subject: CN=83352091C60665AA5C1D47C3F86709E77703E8F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:33:04:1f:5d:ec:14:81:f8:93:ab:b3:5e:
90:ea:2e:de:64:a9:51:dd:bf:8d:f2:05:9a:9d:b1:
44:1e:22:51:7e:b1:18:b0:a9:0a:0d:68:1b:c2:74:
14:5e:3f:6d:52:fd:e6:9b:d9:b1:e5:59:2c:7d:3b:
a9:fd:2f:c0:d2:32:e1:6d:cb:24:62:aa:cc:82:82:
e2:f0:13:95:9d:d1:47:12:1f:e9:6c:dd:23:0a:4d:
d8:14:fe:0e:96:fe:93:33:42:65:4a:c5:1f:23:eb:
4d:61:63:22:b1:9b:ef:60:06:20:38:0d:f7:50:78:
c4:a0:55:4a:fc:dc:07:cd:1e:d0:bd:fd:d2:d2:ba:
f5:f6:be:bd:c7:c5:23:25:c0:4c:a8:64:83:1c:a3:
84:7c:f0:c9:1a:8a:06:ae:58:fb:c7:95:69:66:5b:
cf:5f:16:f8:4a:6c:0b:a3:48:21:43:06:3b:6e:10:
b7:3a:ae:6b:de:0d:6a:96:3b:03:ba:39:bb:3a:e5:
de:53:66:ac:16:ba:6c:c4:97:c4:06:4c:2a:57:83:
77:e9:57:d6:8d:c9:ec:ee:65:99:58:b8:12:a7:c8:
da:99:81:55:d4:e7:f0:e2:e6:52:a1:29:e5:a3:3c:
42:ac:c8:51:d6:32:69:10:55:d5:30:aa:12:6d:19:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:35:20:91:C6:06:65:AA:5C:1D:47:C3:F8:67:09:E7:77:03:E8:F4
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132362e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.126.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e3:5c:03:68:a4:ec:be:b2:dd:d8:06:34:22:6e:8e:37:a9:
88:fd:76:b4:90:43:dd:76:b7:ea:8f:0b:cd:f1:ba:86:84:54:
6e:6d:68:02:14:e6:62:61:e4:71:16:59:dc:52:3f:1a:f1:43:
14:cc:d0:29:50:c5:d1:4a:5b:64:b3:3a:15:2c:55:48:64:50:
c3:98:da:b1:ce:d9:e1:94:7d:85:7b:56:23:63:60:3b:92:0d:
8a:9d:ad:f0:68:c4:7f:4e:7e:7b:52:6f:94:0e:5d:12:76:e5:
5b:40:4d:a4:76:7b:60:d7:fc:2b:74:a1:68:2a:c7:cb:8e:62:
2f:04:1b:b9:f6:de:64:1b:b9:cb:b5:a2:dc:64:fc:a8:25:3f:
bc:77:1b:47:8b:7c:03:14:10:85:75:69:d6:fb:39:f0:d5:37:
0f:5a:5b:dc:d1:f7:e4:c0:02:26:ec:33:27:17:38:ed:8f:e6:
09:05:fb:3f:0d:96:12:a1:f0:a2:0b:cf:2a:12:d6:4b:14:ff:
66:d6:78:58:cc:af:85:5b:50:23:0e:71:a4:d1:16:cb:3c:24:
64:db:c5:b8:97:87:2d:e0:12:73:00:ae:87:45:e6:08:d9:41:
f5:1b:e7:35:31:4b:60:f5:39:b8:61:80:d8:b3:de:97:b7:cd:
6c:1f:b1:a5
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUOI6iMf51v25zewu7EV4hlQ56kFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNjAxMDYyMDUwMzVaFw0yNzAxMDUyMDU1MzVaMDMxMTAvBgNV
BAMTKDgzMzUyMDkxQzYwNjY1QUE1QzFENDdDM0Y4NjcwOUU3NzcwM0U4RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCluDMEH13sFIH4k6uzXpDqLt5k
qVHdv43yBZqdsUQeIlF+sRiwqQoNaBvCdBReP21S/eab2bHlWSx9O6n9L8DSMuFt
yyRiqsyCguLwE5Wd0UcSH+ls3SMKTdgU/g6W/pMzQmVKxR8j601hYyKxm+9gBiA4
DfdQeMSgVUr83AfNHtC9/dLSuvX2vr3HxSMlwEyoZIMco4R88MkaigauWPvHlWlm
W89fFvhKbAujSCFDBjtuELc6rmveDWqWOwO6Obs65d5TZqwWumzEl8QGTCpXg3fp
V9aNyezuZZlYuBKnyNqZgVXU5/Di5lKhKeWjPEKsyFHWMmkQVdUwqhJtGR7xAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUgzUgkcYGZapcHUfD+GcJ53cD6PQwHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMxMzYzODJlMzIzMjM4MmUzMTMyMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
5H4wDQYJKoZIhvcNAQELBQADggEBALbjXANopOy+st3YBjQibo43qYj9drSQQ912
t+qPC83xuoaEVG5taAIU5mJh5HEWWdxSPxrxQxTM0ClQxdFKW2SzOhUsVUhkUMOY
2rHO2eGUfYV7ViNjYDuSDYqdrfBoxH9OfntSb5QOXRJ25VtATaR2e2DX/Ct0oWgq
x8uOYi8EG7n23mQbucu1otxk/KglP7x3G0eLfAMUEIV1adb7OfDVNw9aW9zR9+TA
AibsMycXOO2P5gkF+z8NlhKh8KILzyoS1ksU/2bWeFjMr4VbUCMOcaTRFss8JGTb
xbiXhy3gEnMArodF5gjZQfUb5zUxS2D1ObhhgNiz3pe3zWwfsaU=
-----END CERTIFICATE-----
Generated at Fri Jan 23 02:23:53 2026 by rpki-client