This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa
File: 34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa (raw, json)
Hash identifier: C3SeuOiJQiODCy4RvtWZf3srHrFSMSQy4kGCYri+Tss=
Subject key identifier: D2:F0:3E:69:8A:19:24:83:7D:D6:24:FA:4C:46:EC:A8:08:A4:7E:81
Certificate issuer: /CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39
Certificate serial: 5FF88A805695DF01245D736398B20DE6F9F3B491
Authority key identifier: 29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa
Signing time: Tue 06 Jan 2026 19:18:30 +0000
ROA not before: Tue 06 Jan 2026 19:13:30 +0000
ROA not after: Tue 05 Jan 2027 19:18:30 +0000
asID: 267828
IP address blocks: 45.173.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl
rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Jan 2026 03:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f8:8a:80:56:95:df:01:24:5d:73:63:98:b2:0d:e6:f9:f3:b4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39
Validity
Not Before: Jan 6 19:13:30 2026 GMT
Not After : Jan 5 19:18:30 2027 GMT
Subject: CN=D2F03E698A1924837DD624FA4C46ECA808A47E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:40:56:fc:e8:92:c5:e3:74:ce:c8:10:47:
78:ab:5c:1d:3b:f4:95:17:e3:0a:90:7d:21:44:d2:
b5:8e:1b:04:c7:1d:e5:3c:f0:f0:07:03:b6:17:77:
b0:8c:be:00:dc:4f:88:b5:87:fd:24:4e:60:a1:52:
d3:af:a0:df:c4:df:d7:4b:70:a3:02:ea:1a:0d:0e:
19:3b:65:c1:31:a7:6f:03:f0:57:46:58:c3:1b:46:
69:5f:40:e0:38:b9:4e:0e:93:36:3e:d4:13:f1:68:
d0:d1:ab:b7:3c:ee:3a:c3:39:dd:24:b6:f9:6b:22:
19:d9:ff:d5:1d:bc:48:9d:3f:68:40:4e:50:9b:9a:
de:4a:39:b9:da:42:c8:31:28:64:62:b7:e8:9b:e0:
64:d0:83:de:16:0f:a6:ee:d3:3e:8f:5c:94:81:ea:
c7:66:4f:19:fa:5e:d3:c1:1e:22:b1:cb:de:5c:6f:
c6:25:61:55:56:a9:61:39:a4:58:5a:58:01:b9:54:
cc:4d:5c:5f:e4:2a:cb:f9:99:db:8c:65:55:f0:5f:
1a:6e:1a:35:fe:3f:94:fb:89:4c:33:85:43:29:a5:
4f:ab:40:22:6c:e5:d0:fd:12:c8:9a:6d:f5:57:d6:
79:a6:96:36:4d:2b:fa:71:cf:55:3f:62:26:12:63:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F0:3E:69:8A:19:24:83:7D:D6:24:FA:4C:46:EC:A8:08:A4:7E:81
X509v3 Authority Key Identifier:
keyid:29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:57:91:d2:26:55:00:7f:26:7d:b8:a8:e8:7d:fa:8e:c5:5d:
91:1c:35:92:f1:c1:72:db:6c:ce:b1:f4:4d:99:7a:ea:2b:c4:
6a:2c:ac:e6:e3:ee:6f:f5:cc:32:f1:30:33:46:97:84:7e:8f:
c8:27:36:c6:af:45:56:3c:e1:04:af:40:7b:b0:6b:8a:54:14:
09:ee:d5:29:f7:bd:0f:44:22:95:e6:08:90:a7:06:63:b6:e6:
22:95:2f:b4:bc:a3:3d:66:5b:66:5c:01:d7:c2:9f:dd:83:71:
34:72:42:ca:b4:e4:b5:49:62:c0:ad:7d:c0:37:8c:da:4f:e4:
a9:35:6c:2a:66:45:60:27:c5:79:20:a8:4d:92:f8:c9:a6:78:
d1:33:d4:98:5e:6b:0a:61:25:4b:64:f1:b6:a2:aa:71:e6:6a:
e8:21:81:95:ef:5e:3c:c6:e3:97:4a:15:90:d5:78:ab:a9:4e:
8d:87:27:64:f4:5f:a7:0c:20:27:01:f7:cc:10:48:29:c9:b6:
dd:11:cc:18:8d:d6:2e:34:0a:3e:cd:90:b2:40:15:de:08:d2:
07:31:a3:3a:51:8e:8c:b2:b7:62:98:42:62:30:91:2d:53:e1:
e7:ec:12:e7:21:d5:26:31:08:c2:88:58:41:64:7e:5f:b0:18:
63:61:61:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 01:03:25 2026 by rpki-client