This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233382e302f32332d3233203d3e203232313232.roa
File: 3134382e3230392e3233382e302f32332d3233203d3e203232313232.roa (raw, json)
Hash identifier: mSX2hMhZDqZ3k4yYOJnopc5IIXrtDlgQAta5ttOL/MI=
Subject key identifier: B7:78:37:C1:72:2B:16:52:34:B7:B3:22:F9:8C:19:F5:78:7B:E8:34
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 7F632610059DF5A1B855E7518560BE72E8BD0247
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233382e302f32332d3233203d3e203232313232.roa
Signing time: Tue 06 Jan 2026 19:32:51 +0000
ROA not before: Tue 06 Jan 2026 19:27:51 +0000
ROA not after: Tue 05 Jan 2027 19:32:51 +0000
asID: 22122
IP address blocks: 148.209.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:63:26:10:05:9d:f5:a1:b8:55:e7:51:85:60:be:72:e8:bd:02:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Jan 6 19:27:51 2026 GMT
Not After : Jan 5 19:32:51 2027 GMT
Subject: CN=B77837C1722B165234B7B322F98C19F5787BE834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:a6:1d:65:15:8c:96:1b:41:a1:55:70:fd:
e1:82:37:f5:ec:de:10:17:4d:80:b7:6a:f0:87:d9:
80:0e:02:ae:f3:8e:0e:f4:5c:b2:9b:a7:57:f1:3f:
7c:9f:f7:f6:9b:67:27:2d:81:0a:b6:23:9d:7c:64:
a0:d8:08:2c:d7:e3:46:18:86:74:88:d6:de:f9:b9:
be:9b:3e:a5:60:38:18:8a:1a:cf:5a:76:3c:ff:6a:
59:f5:02:9e:61:b0:e0:27:93:6b:c3:84:3e:ac:6e:
72:14:41:b2:f0:39:24:69:df:6c:6c:89:61:97:1b:
d7:ae:f6:ea:92:85:27:6a:b8:c1:e9:b2:af:e7:71:
94:68:20:5d:9c:8d:6e:ad:8b:48:6d:d7:a9:22:78:
e3:71:8a:e2:a6:42:04:f0:92:60:38:b7:ac:0d:ba:
2b:92:10:14:1a:e0:08:07:84:a3:a9:93:8e:b7:9f:
64:26:d2:52:a1:0f:96:ca:23:a4:1c:0d:47:f9:bc:
74:0b:93:75:04:71:87:6c:f7:bb:a4:9f:ee:72:88:
4f:51:e3:80:22:f9:07:bb:6e:dc:5b:23:20:39:4a:
d1:a6:e5:6e:93:fa:e7:ab:d3:97:1e:a6:9a:cd:71:
c4:f8:3c:70:88:aa:5c:b6:30:60:e8:61:dd:c4:ed:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:78:37:C1:72:2B:16:52:34:B7:B3:22:F9:8C:19:F5:78:7B:E8:34
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233382e302f32332d3233203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.238.0/23
Signature Algorithm: sha256WithRSAEncryption
90:7c:ff:ef:51:0a:1c:83:61:cf:c0:69:eb:15:a4:ee:f0:12:
39:d7:78:16:41:0d:49:e7:a0:0f:f3:77:1c:ed:d7:79:52:8b:
b6:17:66:aa:ca:7f:10:57:67:f8:cd:8d:af:b2:81:a0:f7:58:
fe:a8:6f:be:c1:56:d8:b4:5c:a3:ec:91:88:f9:30:59:f2:2d:
ad:52:9a:c9:1c:1e:2f:ec:d2:71:8d:9c:52:e8:1c:12:32:63:
33:f6:b1:45:57:64:42:b9:e8:9c:0f:ff:d6:49:4a:5d:7b:0f:
84:ff:8a:fc:9e:5c:cc:f0:60:c5:f8:ca:64:62:cf:03:98:54:
31:b0:bb:d2:39:f8:64:0f:6d:22:b0:ea:ff:76:7a:77:ca:01:
fe:7b:3c:80:2f:aa:c9:5c:4c:54:ee:6a:e5:a5:4e:5b:80:21:
9c:c6:fe:35:a6:5e:32:9d:61:5e:30:92:be:b5:93:8d:a6:fb:
db:97:8d:58:cd:f3:9b:28:93:6e:8c:3a:31:0b:5f:af:b6:50:
f8:33:38:cd:5b:dd:07:70:11:1a:5b:7c:8c:a1:63:7d:ed:70:
80:34:63:c4:10:8a:9e:1d:2c:cd:6f:46:fb:7b:05:85:38:d8:
e7:46:0d:d1:7e:6c:eb:c1:fd:bc:be:70:8f:49:24:bc:df:22:
70:7b:23:44
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUf2MmEAWd9aG4VedRhWC+cui9AkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNjAxMDYxOTI3NTFaFw0yNzAxMDUxOTMyNTFaMDMxMTAvBgNV
BAMTKEI3NzgzN0MxNzIyQjE2NTIzNEI3QjMyMkY5OEMxOUY1Nzg3QkU4MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBqYdZRWMlhtBoVVw/eGCN/Xs
3hAXTYC3avCH2YAOAq7zjg70XLKbp1fxP3yf9/abZyctgQq2I518ZKDYCCzX40YY
hnSI1t75ub6bPqVgOBiKGs9adjz/aln1Ap5hsOAnk2vDhD6sbnIUQbLwOSRp32xs
iWGXG9eu9uqShSdquMHpsq/ncZRoIF2cjW6ti0ht16kieONxiuKmQgTwkmA4t6wN
uiuSEBQa4AgHhKOpk463n2Qm0lKhD5bKI6QcDUf5vHQLk3UEcYds97ukn+5yiE9R
44Ai+Qe7btxbIyA5StGm5W6T+uer05cepprNccT4PHCIqly2MGDoYd3E7XJVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUt3g3wXIrFlI0t7Mi+YwZ9Xh76DQwHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMjMzMzgy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlNHu
MA0GCSqGSIb3DQEBCwUAA4IBAQCQfP/vUQocg2HPwGnrFaTu8BI513gWQQ1J56AP
83cc7dd5Uou2F2aqyn8QV2f4zY2vsoGg91j+qG++wVbYtFyj7JGI+TBZ8i2tUprJ
HB4v7NJxjZxS6BwSMmMz9rFFV2RCueicD//WSUpdew+E/4r8nlzM8GDF+MpkYs8D
mFQxsLvSOfhkD20isOr/dnp3ygH+ezyAL6rJXExU7mrlpU5bgCGcxv41pl4ynWFe
MJK+tZONpvvbl41YzfObKJNujDoxC1+vtlD4MzjNW90HcBEaW3yMoWN97XCANGPE
EIqeHSzNb0b7ewWFONjnRg3Rfmzrwf28vnCPSSS83yJweyNE
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:25:00 2026 by rpki-client