This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134302e302f32322d3234203d3e20323731383136.roa
File: 34352e372e3134302e302f32322d3234203d3e20323731383136.roa (raw, json)
Hash identifier: DiQ7u2CCydmpI7Yhw/jq4ZPLWtchghCHB/Y8Po81T9Q=
Subject key identifier: 8A:D9:E3:CC:CC:72:FE:20:FF:7E:15:49:3E:82:D9:ED:9F:80:B5:CE
Certificate issuer: /CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
Certificate serial: 4EC8FD69A7CCCD9D9DB93DCD476C86473B9A3BCD
Authority key identifier: 08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134302e302f32322d3234203d3e20323731383136.roa
Signing time: Mon 08 Dec 2025 19:15:00 +0000
ROA not before: Mon 08 Dec 2025 19:10:00 +0000
ROA not after: Mon 07 Dec 2026 19:15:00 +0000
asID: 271816
IP address blocks: 45.7.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl
rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 27 Dec 2025 11:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c8:fd:69:a7:cc:cd:9d:9d:b9:3d:cd:47:6c:86:47:3b:9a:3b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
Validity
Not Before: Dec 8 19:10:00 2025 GMT
Not After : Dec 7 19:15:00 2026 GMT
Subject: CN=8AD9E3CCCC72FE20FF7E15493E82D9ED9F80B5CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:91:e0:72:62:98:f8:8d:ad:46:76:ca:1c:
ba:1f:44:53:00:22:0e:d1:aa:60:09:25:0e:a2:5f:
9c:6e:eb:b6:79:7a:36:d9:b9:23:f4:7f:54:b2:67:
01:62:ba:ae:24:86:5e:76:a7:d1:09:08:57:03:b6:
a6:91:bb:ef:55:3b:d7:64:3d:25:00:48:41:54:01:
d4:8f:8c:69:bd:8f:8d:86:f9:57:05:d4:55:6b:b8:
b7:45:57:7c:0c:c3:e2:6c:0d:2e:b0:1d:0b:96:dd:
3e:3c:80:ed:81:7e:38:7f:70:01:5e:ff:14:a5:be:
1b:d9:89:26:5a:6f:b7:25:13:53:a9:f2:28:7e:78:
9f:87:5f:ea:a7:7a:84:f2:ca:9c:9e:c0:14:c6:f5:
b2:75:5f:0f:59:6f:e0:9f:d0:70:a0:dc:97:fd:b0:
7f:3b:4e:c1:5f:bd:75:fd:64:a4:2b:b1:4a:a7:c6:
85:9a:8e:77:d6:12:09:5d:da:54:a8:ba:2f:16:a7:
ac:00:53:32:39:3a:b8:24:cf:56:7d:f1:dd:0b:16:
1a:50:1e:97:f7:9b:b2:e9:d6:ea:d1:57:5a:9b:dd:
94:70:38:8b:d2:4a:b3:16:aa:60:d9:be:14:69:4a:
88:02:02:17:d9:c6:17:78:e4:19:fa:2a:de:44:45:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D9:E3:CC:CC:72:FE:20:FF:7E:15:49:3E:82:D9:ED:9F:80:B5:CE
X509v3 Authority Key Identifier:
keyid:08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134302e302f32322d3234203d3e20323731383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.140.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:d8:24:14:45:3d:f9:a9:24:98:12:b7:02:16:24:aa:90:9d:
9a:2f:cf:40:e6:cc:2d:06:6f:7c:b6:2a:3b:3d:2f:09:0b:ba:
56:e3:e3:c4:a2:4f:e7:40:12:0f:16:bc:e6:e2:24:5d:55:bb:
d7:b4:34:52:e2:fe:9a:9b:ff:0b:97:f7:3e:76:57:07:b4:e7:
0e:54:0f:ad:9d:a3:3e:27:0e:c2:e7:e9:a4:9e:f8:22:e5:5b:
d4:7e:16:93:24:85:28:f6:66:cd:25:81:48:f6:95:63:0d:3b:
64:ae:a1:12:e4:68:67:8a:51:16:db:74:1d:1c:1a:81:cd:d3:
96:05:a2:7c:ae:a9:08:61:70:b5:3c:22:be:f6:ee:81:38:04:
8d:d8:dc:b5:db:ef:16:4e:34:b7:f0:0b:2d:8d:f7:86:c6:29:
1c:d8:24:94:fc:64:29:2e:1d:35:c6:eb:6e:eb:79:5a:a3:7a:
1e:c3:e9:19:4f:95:1e:6e:53:4e:23:52:f6:97:19:58:1e:23:
11:3e:53:f5:35:96:25:7c:ff:d6:e9:b3:53:28:33:66:4d:f0:
94:cc:ac:a3:b0:da:61:d4:80:d4:26:2d:e6:43:68:98:f8:a1:
e6:53:b9:97:83:20:c8:a7:1c:64:33:70:70:ff:bb:ed:15:4c:
b5:2e:3e:4d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTsj9aafMzZ2duT3NR2yGRzuaO80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhCQzkxQTdGQkZEMzRFOEQyMzkxMUEyRDA1NjBDMkJE
MTg0REUxMTAeFw0yNTEyMDgxOTEwMDBaFw0yNjEyMDcxOTE1MDBaMDMxMTAvBgNV
BAMTKDhBRDlFM0NDQ0M3MkZFMjBGRjdFMTU0OTNFODJEOUVEOUY4MEI1Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vpHgcmKY+I2tRnbKHLofRFMA
Ig7RqmAJJQ6iX5xu67Z5ejbZuSP0f1SyZwFiuq4khl52p9EJCFcDtqaRu+9VO9dk
PSUASEFUAdSPjGm9j42G+VcF1FVruLdFV3wMw+JsDS6wHQuW3T48gO2Bfjh/cAFe
/xSlvhvZiSZab7clE1Op8ih+eJ+HX+qneoTyypyewBTG9bJ1Xw9Zb+Cf0HCg3Jf9
sH87TsFfvXX9ZKQrsUqnxoWajnfWEgld2lSoui8Wp6wAUzI5Orgkz1Z98d0LFhpQ
Hpf3m7Lp1urRV1qb3ZRwOIvSSrMWqmDZvhRpSogCAhfZxhd45Bn6Kt5ERefXAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUitnjzMxy/iD/fhVJPoLZ7Z+Atc4wHwYDVR0j
BBgwFoAUCLyRp/v9NOjSORGi0FYMK9GE3hEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNTY0QTY3QkVEOUZBN0U2OThBREZCMzMyQ0JFMDYwOTJB
NzA5QUQyQkZCQzdBNjYzNDhBRTc5NzQ0MjhEQjVDLzAvMDhCQzkxQTdGQkZEMzRF
OEQyMzkxMUEyRDA1NjBDMkJEMTg0REUxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEJDOTFBN0ZCRkQzNEU4RDIz
OTExQTJEMDU2MEMyQkQxODRERTExLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzU2NEE2N0JFRDlGQTdFNjk4QURGQjMzMkNCRTA2MDkyQTcwOUFEMkJG
QkM3QTY2MzQ4QUU3OTc0NDI4REI1Qy8wLzM0MzUyZTM3MmUzMTM0MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM3MzEzODMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItB4wwDQYJ
KoZIhvcNAQELBQADggEBAG3YJBRFPfmpJJgStwIWJKqQnZovz0DmzC0Gb3y2Kjs9
LwkLulbj48SiT+dAEg8WvObiJF1Vu9e0NFLi/pqb/wuX9z52Vwe05w5UD62doz4n
DsLn6aSe+CLlW9R+FpMkhSj2Zs0lgUj2lWMNO2SuoRLkaGeKURbbdB0cGoHN05YF
onyuqQhhcLU8Ir727oE4BI3Y3LXb7xZONLfwCy2N94bGKRzYJJT8ZCkuHTXG627r
eVqjeh7D6RlPlR5uU04jUvaXGVgeIxE+U/U1liV8/9bps1MoM2ZN8JTMrKOw2mHU
gNQmLeZDaJj4oeZTuZeDIMinHGQzcHD/u+0VTLUuPk0=
-----END CERTIFICATE-----
Generated at Tue Dec 23 09:01:57 2025 by rpki-client