This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134362e302f32332d3233203d3e20323636383332.roa
File: 34352e3233382e3134362e302f32332d3233203d3e20323636383332.roa (raw, json)
Hash identifier: e6jOHbNRZVY8ddEm0wiIQ9xloamLajuPSy0G/13+DPc=
Subject key identifier: 99:AE:80:C5:BD:49:00:A3:C7:B3:BC:7B:76:F9:2F:4E:EC:98:95:1B
Certificate issuer: /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial: 29AB9CE821F28146AF27B6F969DCD3A3A676A2E2
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134362e302f32332d3233203d3e20323636383332.roa
Signing time: Fri 26 Dec 2025 17:56:10 +0000
ROA not before: Fri 26 Dec 2025 17:51:10 +0000
ROA not after: Fri 25 Dec 2026 17:56:10 +0000
asID: 266832
IP address blocks: 45.238.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 19:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ab:9c:e8:21:f2:81:46:af:27:b6:f9:69:dc:d3:a3:a6:76:a2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Validity
Not Before: Dec 26 17:51:10 2025 GMT
Not After : Dec 25 17:56:10 2026 GMT
Subject: CN=99AE80C5BD4900A3C7B3BC7B76F92F4EEC98951B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:c0:ce:82:03:8c:2e:8a:e2:89:ac:b3:fd:
4a:f4:ac:73:d8:e6:c5:d6:e0:55:09:34:ca:f9:c0:
14:86:a9:2a:47:55:ad:06:c2:bf:71:ba:e3:e2:a7:
1e:03:86:f3:c2:ce:0f:25:62:06:9f:62:15:98:c4:
f6:b8:3e:47:b0:52:7b:b4:cd:45:76:c0:27:ec:f6:
c3:5c:fd:43:c0:0b:01:dc:cd:0c:90:91:fa:e3:93:
b5:95:b1:2c:78:ef:1e:b2:09:34:1a:c1:7b:c1:f5:
58:8a:7d:8c:be:98:d7:08:b2:ad:30:21:79:c4:91:
70:ef:fd:53:95:e7:42:c4:a8:ab:34:e7:85:49:03:
ad:9b:81:b5:24:6c:88:04:7d:45:0e:e9:bd:4c:95:
de:3e:c5:01:88:4e:54:88:ea:80:ef:d9:fe:77:69:
eb:3f:f0:73:a4:dd:0c:b0:1d:3f:33:9c:ea:0d:02:
eb:2a:89:09:d9:c4:10:dc:6e:ab:d5:69:a4:c9:11:
76:cd:f7:e8:3c:ae:3d:34:08:ec:5e:af:4a:19:0a:
f8:b6:8c:4d:4a:2b:0f:dc:a8:ff:79:82:28:88:97:
14:81:58:27:ec:76:60:b4:10:40:64:e3:22:85:dc:
23:6d:16:ca:88:ca:bf:3c:ae:6e:45:fa:16:21:9f:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:80:C5:BD:49:00:A3:C7:B3:BC:7B:76:F9:2F:4E:EC:98:95:1B
X509v3 Authority Key Identifier:
keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134362e302f32332d3233203d3e20323636383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:47:37:b4:4d:45:26:63:8b:dd:6a:59:9d:61:76:f2:50:44:
23:97:0d:41:f7:87:d3:94:35:e8:51:64:18:ce:06:26:0e:6a:
8b:12:e9:59:9c:22:56:83:ad:58:e0:44:72:74:6a:14:73:f3:
a7:79:8b:a1:58:9a:8e:64:52:77:52:bf:e1:18:7d:21:59:fb:
ee:af:2c:6c:6d:a1:34:e1:09:68:fa:47:cd:7f:60:df:20:26:
b8:ac:52:08:15:cc:21:a1:86:b7:63:a4:27:bd:11:e9:b0:11:
bb:ae:82:3a:82:06:b0:dc:1f:8d:bb:bf:2f:30:b6:12:35:72:
17:f2:00:d4:dd:bb:0c:97:6a:09:81:a1:91:14:78:04:92:77:
d5:a2:f0:6b:c5:19:33:e3:bc:a5:b0:48:f5:90:bf:c6:40:ed:
71:5a:93:1b:1f:61:7d:54:88:16:60:f0:cb:28:6b:9b:f3:57:
f3:b1:64:1f:c7:0c:53:69:f4:5d:47:73:0a:34:99:6c:70:d1:
6d:3a:7b:cd:d6:94:3f:ff:5d:04:ec:69:ee:9d:be:b3:35:38:
fe:d4:be:cf:16:bd:49:9f:d4:41:41:eb:35:46:94:49:88:c3:
5a:c1:86:36:15:11:f2:dc:30:7b:40:5a:3d:12:d2:49:af:85:
c7:1e:5b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:25:27 2026 by rpki-client