This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/34352e3136382e3233362e302f32322d3234203d3e20323730313538.roa
File: 34352e3136382e3233362e302f32322d3234203d3e20323730313538.roa (raw, json)
Hash identifier: dbbK9tc6q12ZSFdB9+NtWjIjnrZXw61SuDDelMRssEU=
Subject key identifier: 12:D4:BF:1E:21:A6:FA:00:DB:DC:83:5D:61:F5:CE:38:4C:13:EC:56
Certificate issuer: /CN=9A758BF09145BEC830A7EE000666C15B37354654
Certificate serial: 7AF3B3B9627DF29C14521A8AC3A7C7127A63408A
Authority key identifier: 9A:75:8B:F0:91:45:BE:C8:30:A7:EE:00:06:66:C1:5B:37:35:46:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/34352e3136382e3233362e302f32322d3234203d3e20323730313538.roa
Signing time: Tue 06 Jan 2026 19:34:43 +0000
ROA not before: Tue 06 Jan 2026 19:29:43 +0000
ROA not after: Tue 05 Jan 2027 19:34:43 +0000
asID: 270158
IP address blocks: 45.168.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.crl
rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 12:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f3:b3:b9:62:7d:f2:9c:14:52:1a:8a:c3:a7:c7:12:7a:63:40:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A758BF09145BEC830A7EE000666C15B37354654
Validity
Not Before: Jan 6 19:29:43 2026 GMT
Not After : Jan 5 19:34:43 2027 GMT
Subject: CN=12D4BF1E21A6FA00DBDC835D61F5CE384C13EC56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:a5:28:33:b2:6b:d1:96:90:f7:cf:0b:73:
c3:20:59:91:06:ed:b6:2a:44:6a:20:76:85:3f:79:
75:13:1d:b6:fa:c7:92:04:c3:30:ae:1b:f1:e8:5c:
44:34:46:df:06:68:a7:85:42:95:7b:9e:5c:77:df:
ea:2c:67:be:ad:ae:f1:0e:0e:7b:46:37:23:76:69:
82:8b:2c:78:f4:3a:f5:51:71:14:a5:4d:78:3b:e7:
34:1a:07:32:2e:c8:7c:8a:95:7a:67:8d:38:eb:ae:
2f:7e:f6:c2:4b:f3:6e:86:83:91:bc:0b:f7:37:19:
49:38:76:ae:52:32:68:b8:66:51:ef:ad:b2:d0:85:
11:16:56:95:d8:9d:05:d7:b1:7a:7e:f3:da:ac:b4:
fc:06:47:93:a2:51:06:66:e3:6a:1c:41:de:cc:67:
da:16:7e:7a:3c:be:12:2b:77:ae:7c:e5:f6:73:79:
4d:44:3c:2d:69:93:3c:0a:a6:4c:1e:68:35:9a:f2:
c8:35:22:8e:ec:5f:73:8b:76:cd:c4:06:06:79:7e:
7d:7a:3a:c1:d5:64:ba:3a:19:e6:01:99:33:d4:4a:
24:89:96:99:12:97:9e:44:11:85:e8:64:f1:93:af:
f2:3b:bf:7b:d9:dc:fb:a4:b0:fb:20:2b:1e:59:1e:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D4:BF:1E:21:A6:FA:00:DB:DC:83:5D:61:F5:CE:38:4C:13:EC:56
X509v3 Authority Key Identifier:
keyid:9A:75:8B:F0:91:45:BE:C8:30:A7:EE:00:06:66:C1:5B:37:35:46:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/34352e3136382e3233362e302f32322d3234203d3e20323730313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.236.0/22
Signature Algorithm: sha256WithRSAEncryption
38:4f:e1:0e:13:cd:19:2c:07:d6:0a:ab:01:ea:e9:e4:fb:16:
fd:20:00:e6:a0:8b:3d:ed:da:45:d1:9c:3e:5c:a1:54:6e:00:
26:25:e1:b5:ed:b8:14:c6:d3:f3:98:9e:51:dd:0e:27:17:71:
a2:2a:19:f7:1e:28:2e:87:0b:04:e0:73:fd:a6:b2:c4:32:22:
9e:00:0e:b8:3a:4b:0f:dd:f0:07:56:dc:93:af:e4:ff:71:7d:
57:dc:cb:ba:c0:61:af:f1:f6:b9:2d:e6:74:2b:66:58:4b:2e:
30:42:46:cc:09:70:47:b9:b8:8c:e3:69:04:a4:4b:df:36:48:
51:a5:08:9f:75:09:b6:4b:af:97:80:b9:a4:72:ae:61:04:ae:
74:71:a7:aa:01:43:9a:73:3c:a2:7a:87:aa:1a:fc:39:89:3d:
f0:dd:9c:9e:c1:ff:32:de:81:62:2e:e4:64:98:27:8d:a6:9b:
af:72:93:b3:3d:83:0f:bd:88:e7:a2:7c:86:bc:60:31:1f:54:
a2:3c:47:c7:a2:3f:ac:5b:7c:75:7d:17:d1:47:b9:70:be:56:
7b:19:01:dc:31:39:d7:98:b6:c7:66:a1:e3:d2:ac:e0:00:a6:
d4:41:90:9a:be:09:fd:c5:8e:85:db:bb:c0:6e:c5:ee:33:54:
37:83:1e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:13:06 2026 by rpki-client