This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa
File: 3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa (raw, json)
Hash identifier: yjzSJUZj4zGt1MHhVmbLi1zvCsq+jdBn4Xm2sgrDts0=
Subject key identifier: 37:78:4A:79:FC:1F:9E:76:96:3E:EA:6E:FF:5A:47:26:42:19:05:EE
Certificate issuer: /CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA
Certificate serial: 676E2FB064D145A7E50CC0D9184600AC028EE7AD
Authority key identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa
Signing time: Tue 06 Jan 2026 19:27:07 +0000
ROA not before: Tue 06 Jan 2026 19:22:07 +0000
ROA not after: Tue 05 Jan 2027 19:27:07 +0000
asID: 265654
IP address blocks: 170.246.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl
rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:6e:2f:b0:64:d1:45:a7:e5:0c:c0:d9:18:46:00:ac:02:8e:e7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA
Validity
Not Before: Jan 6 19:22:07 2026 GMT
Not After : Jan 5 19:27:07 2027 GMT
Subject: CN=37784A79FC1F9E76963EEA6EFF5A4726421905EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e8:4d:61:a6:0c:25:e8:9b:e6:31:9a:2f:98:
88:02:47:8b:97:b6:67:10:86:c5:56:76:90:f7:86:
53:27:04:cb:1f:a8:99:cc:85:62:86:07:6a:19:8d:
dd:83:a0:47:43:95:7e:ad:af:e0:45:b9:fe:c5:3a:
6b:89:48:4c:63:2d:a7:34:93:4b:eb:06:eb:28:e1:
19:27:ed:9e:a2:1c:2d:3f:1d:5d:d4:53:d4:5e:e7:
42:18:fe:c6:a8:94:f9:48:04:c4:79:3d:e3:2f:6d:
53:80:6d:f0:7c:27:b1:cc:b3:aa:ec:c9:34:4d:43:
04:b1:1a:87:e5:c5:cf:ab:1f:a0:a5:22:87:bc:1b:
a4:92:7b:bf:85:bf:33:cd:6f:4b:25:18:18:86:60:
57:3d:b7:d7:44:ab:c8:09:32:a3:83:ab:c2:a0:7b:
14:e3:40:ec:06:c9:94:67:1f:b0:33:d3:f5:ff:5d:
65:24:31:34:1a:ac:ae:45:74:a7:f5:45:a6:c7:2e:
7e:45:d6:0a:6c:3a:7d:6e:ec:43:f6:ca:2f:2b:d7:
40:6a:40:8f:62:c8:e5:a1:81:52:cd:75:93:b7:44:
eb:f0:10:09:ec:06:30:5e:78:d1:e3:ee:4b:1b:82:
41:bd:e5:a8:ac:73:09:48:ae:d2:d7:da:4b:79:d4:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:78:4A:79:FC:1F:9E:76:96:3E:EA:6E:FF:5A:47:26:42:19:05:EE
X509v3 Authority Key Identifier:
keyid:3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.220.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:9c:22:1c:a6:b8:42:84:45:2a:80:de:c7:20:d1:cb:ac:96:
bd:8b:b0:42:94:4c:f2:85:b0:95:46:05:63:b6:9a:d4:b9:fe:
e6:9d:4c:ea:5f:1d:88:a6:dc:af:c0:c7:97:c4:15:d5:fe:5c:
64:72:20:9c:62:c7:fd:71:0b:20:8f:c2:d8:30:92:d8:96:75:
5a:b4:18:56:6f:51:65:b4:0d:96:28:f1:9b:b9:e7:4b:48:bf:
65:0c:6f:2b:5f:f4:9f:f5:d8:79:fc:8f:56:bc:f8:79:f4:a9:
59:b0:89:b6:25:25:90:1e:f0:ff:1c:18:da:5e:f0:62:7d:c5:
b1:c3:25:3b:40:fd:37:07:63:74:db:30:2e:fe:48:0b:fe:2d:
c5:4e:05:a0:a7:03:a7:67:cc:eb:7c:7d:b0:da:04:f2:36:bb:
b4:3b:9b:e0:b0:56:8b:a4:c7:52:b7:94:f3:ca:1a:55:9c:26:
7b:4f:df:a5:57:8b:35:d2:5f:e5:e6:cc:4c:87:42:1e:02:cb:
da:97:19:48:b9:ec:ba:d8:02:53:83:cf:ff:07:46:9e:73:2e:
09:de:bb:ae:ae:ae:ba:1f:af:a3:3b:c5:75:cf:dc:34:9a:56:
51:f7:4a:96:c5:ea:e4:d8:a8:c6:2a:93:88:e3:2c:9f:be:4a:
3d:d6:88:d0
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZ24vsGTRRaflDMDZGEYArAKO560wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NBQUFCQjk5RjVDRjc5Q0E3QzI1RjAyMkY4NUY4NUUw
RENCMkNCQTAeFw0yNjAxMDYxOTIyMDdaFw0yNzAxMDUxOTI3MDdaMDMxMTAvBgNV
BAMTKDM3Nzg0QTc5RkMxRjlFNzY5NjNFRUE2RUZGNUE0NzI2NDIxOTA1RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD46E1hpgwl6JvmMZovmIgCR4uX
tmcQhsVWdpD3hlMnBMsfqJnMhWKGB2oZjd2DoEdDlX6tr+BFuf7FOmuJSExjLac0
k0vrBuso4Rkn7Z6iHC0/HV3UU9Re50IY/saolPlIBMR5PeMvbVOAbfB8J7HMs6rs
yTRNQwSxGoflxc+rH6ClIoe8G6SSe7+FvzPNb0slGBiGYFc9t9dEq8gJMqODq8Kg
exTjQOwGyZRnH7Az0/X/XWUkMTQarK5FdKf1RabHLn5F1gpsOn1u7EP2yi8r10Bq
QI9iyOWhgVLNdZO3ROvwEAnsBjBeeNHj7ksbgkG95aiscwlIrtLX2kt51HhnAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUN3hKefwfnnaWPupu/1pHJkIZBe4wHwYDVR0j
BBgwFoAUPKqruZ9c95ynwl8CL4X4Xg3LLLowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NjU4NzI5NzhCNDJGRTk5OTcwRUUwNEQ4QjIwNjA3NzEw
ODNFMzA3NDFBNTA5QkFFQjAwREI2M0NFQ0IyM0QzLzAvM0NBQUFCQjk5RjVDRjc5
Q0E3QzI1RjAyMkY4NUY4NUUwRENCMkNCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0FBQUJCOTlGNUNGNzlDQTdD
MjVGMDIyRjg1Rjg1RTBEQ0IyQ0JBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTY1ODcyOTc4QjQyRkU5OTk3MEVFMDREOEIyMDYwNzcxMDgzRTMwNzQx
QTUwOUJBRUIwMERCNjNDRUNCMjNEMy8wLzMxMzczMDJlMzIzNDM2MmUzMjMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM1MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
9twwDQYJKoZIhvcNAQELBQADggEBAHqcIhymuEKERSqA3scg0cuslr2LsEKUTPKF
sJVGBWO2mtS5/uadTOpfHYim3K/Ax5fEFdX+XGRyIJxix/1xCyCPwtgwktiWdVq0
GFZvUWW0DZYo8Zu550tIv2UMbytf9J/12Hn8j1a8+Hn0qVmwibYlJZAe8P8cGNpe
8GJ9xbHDJTtA/TcHY3TbMC7+SAv+LcVOBaCnA6dnzOt8fbDaBPI2u7Q7m+CwVouk
x1K3lPPKGlWcJntP36VXizXSX+XmzEyHQh4Cy9qXGUi57LrYAlODz/8HRp5zLgne
u66urrofr6M7xXXP3DSaVlH3SpbF6uTYqMYqk4jjLJ++Sj3WiNA=
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:03:50 2026 by rpki-client