This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/34352e3232342e3134382e302f32322d3234203d3e20323634363638.roa
File: 34352e3232342e3134382e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier: 5cdqHLC9bxNtPpsVdHfww4bb/Jgnmp1+IAbV7jQnuXY=
Subject key identifier: 9B:DC:B5:74:9A:6B:22:62:7A:04:42:65:76:84:D2:FE:02:42:B9:BA
Certificate issuer: /CN=DAADFF1BE65A83E411EFC02ED029233890DD0646
Certificate serial: 24ED5ADD0F4CDF5DDD152F5156335A5F8B66F6CB
Authority key identifier: DA:AD:FF:1B:E6:5A:83:E4:11:EF:C0:2E:D0:29:23:38:90:DD:06:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/34352e3232342e3134382e302f32322d3234203d3e20323634363638.roa
Signing time: Tue 06 Jan 2026 19:39:13 +0000
ROA not before: Tue 06 Jan 2026 19:34:13 +0000
ROA not after: Tue 05 Jan 2027 19:39:13 +0000
asID: 264668
IP address blocks: 45.224.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.crl
rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 20:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ed:5a:dd:0f:4c:df:5d:dd:15:2f:51:56:33:5a:5f:8b:66:f6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAADFF1BE65A83E411EFC02ED029233890DD0646
Validity
Not Before: Jan 6 19:34:13 2026 GMT
Not After : Jan 5 19:39:13 2027 GMT
Subject: CN=9BDCB5749A6B22627A0442657684D2FE0242B9BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:59:43:65:78:ef:a3:ba:52:29:0f:31:d0:
cb:76:c3:5d:82:88:8f:45:71:e4:72:97:e1:ff:1b:
6c:82:d2:27:ff:14:f5:b2:6d:a9:65:41:75:08:b3:
1c:de:20:72:b7:80:03:4a:2f:85:c5:46:e9:6c:cb:
8a:89:16:3f:03:82:e5:7d:b7:a1:5c:cc:1d:ca:87:
59:a8:e9:5b:c2:9e:c3:8f:2e:60:d0:d6:66:ed:b3:
5b:71:18:8c:d1:0b:f3:04:36:4f:ce:b9:1a:4e:23:
b5:78:67:d4:3b:1e:8f:9e:10:40:0a:7e:f2:27:70:
3c:d8:e6:ef:bd:13:60:1c:ae:b2:e9:67:ba:9d:00:
6d:60:3a:98:67:a5:09:f0:77:e6:9b:31:6f:78:cc:
fa:52:73:99:4c:5a:33:c8:ba:56:24:e8:12:4b:cf:
6c:00:9d:ff:32:34:c3:f2:75:b1:cf:e3:6c:8f:83:
c8:32:15:46:06:57:c3:b6:ef:45:f3:1a:b5:8c:5e:
93:79:23:62:38:10:d0:30:b8:31:7c:4b:b0:50:fb:
c1:1a:95:51:65:78:56:ac:cd:83:04:d3:36:5b:c9:
3b:3f:8d:2b:c4:69:ef:80:80:58:48:27:1b:df:73:
62:d2:f3:86:89:ec:06:3d:73:f2:7e:f4:30:d0:4e:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:B5:74:9A:6B:22:62:7A:04:42:65:76:84:D2:FE:02:42:B9:BA
X509v3 Authority Key Identifier:
keyid:DA:AD:FF:1B:E6:5A:83:E4:11:EF:C0:2E:D0:29:23:38:90:DD:06:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/34352e3232342e3134382e302f32322d3234203d3e20323634363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:9a:e1:88:fd:b7:85:c3:3b:81:c6:22:d0:ef:21:78:07:16:
83:74:9c:b5:3c:69:11:bd:c8:76:b3:e5:fb:c3:e8:3b:34:b6:
27:3b:56:d2:67:57:56:f3:3a:77:05:95:c8:28:1d:a5:ba:55:
30:68:39:96:a5:98:e3:97:08:0e:dd:a4:15:73:4c:1b:8d:3f:
b3:37:9a:23:e1:b2:16:e1:20:f2:33:44:d3:37:f5:62:8a:63:
a7:86:8a:c1:fd:65:5b:7f:3e:9d:d5:d4:aa:e8:30:1a:ce:82:
86:85:cd:81:79:06:aa:cd:31:96:7b:9e:9c:b1:60:d1:a0:1a:
41:f0:40:c8:d5:35:b9:0f:77:2f:20:aa:18:8f:b4:77:d6:ac:
d0:ac:f8:b3:25:45:59:51:f3:08:01:41:2e:b9:b0:bd:be:ee:
0b:91:6c:9f:a4:b1:58:9b:5a:0e:b4:2a:e0:a8:14:ad:d0:0f:
99:52:72:74:45:7d:58:09:1a:aa:ff:4f:2d:41:40:c0:60:72:
2b:90:6a:be:9a:c1:a3:a8:e6:7c:05:5d:d3:d8:5a:27:35:f5:
e1:40:b6:4a:58:ff:07:78:3e:d6:6c:75:cb:12:70:2d:18:f0:
fa:d6:80:8c:d0:7a:d7:01:dc:ee:27:0e:8e:cc:36:d3:8d:e0:
a0:f7:72:d1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJO1a3Q9M313dFS9RVjNaX4tm9sswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFBREZGMUJFNjVBODNFNDExRUZDMDJFRDAyOTIzMzg5
MEREMDY0NjAeFw0yNjAxMDYxOTM0MTNaFw0yNzAxMDUxOTM5MTNaMDMxMTAvBgNV
BAMTKDlCRENCNTc0OUE2QjIyNjI3QTA0NDI2NTc2ODREMkZFMDI0MkI5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSVlDZXjvo7pSKQ8x0Mt2w12C
iI9FceRyl+H/G2yC0if/FPWyballQXUIsxzeIHK3gANKL4XFRulsy4qJFj8DguV9
t6FczB3Kh1mo6VvCnsOPLmDQ1mbts1txGIzRC/MENk/OuRpOI7V4Z9Q7Ho+eEEAK
fvIncDzY5u+9E2AcrrLpZ7qdAG1gOphnpQnwd+abMW94zPpSc5lMWjPIulYk6BJL
z2wAnf8yNMPydbHP42yPg8gyFUYGV8O270XzGrWMXpN5I2I4ENAwuDF8S7BQ+8Ea
lVFleFaszYME0zZbyTs/jSvEae+AgFhIJxvfc2LS84aJ7AY9c/J+9DDQTh0HAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUm9y1dJprImJ6BEJldoTS/gJCubowHwYDVR0j
BBgwFoAU2q3/G+Zag+QR78Au0CkjOJDdBkYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNzkxQjBGN0I5QjBBMEY0NDQzNEU4RkRFRDExMjc3MTQ3
RUQxNkNEOTc4MUJFNTVBQzgwMUZFM0VGRkZBODk2LzAvREFBREZGMUJFNjVBODNF
NDExRUZDMDJFRDAyOTIzMzg5MEREMDY0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQUFERkYxQkU2NUE4M0U0MTFF
RkMwMkVEMDI5MjMzODkwREQwNjQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzc5MUIwRjdCOUIwQTBGNDQ0MzRFOEZERUQxMTI3NzE0N0VEMTZDRDk3
ODFCRTU1QUM4MDFGRTNFRkZGQTg5Ni8wLzM0MzUyZTMyMzIzNDJlMzEzNDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeCU
MA0GCSqGSIb3DQEBCwUAA4IBAQAdmuGI/beFwzuBxiLQ7yF4BxaDdJy1PGkRvch2
s+X7w+g7NLYnO1bSZ1dW8zp3BZXIKB2lulUwaDmWpZjjlwgO3aQVc0wbjT+zN5oj
4bIW4SDyM0TTN/ViimOnhorB/WVbfz6d1dSq6DAazoKGhc2BeQaqzTGWe56csWDR
oBpB8EDI1TW5D3cvIKoYj7R31qzQrPizJUVZUfMIAUEuubC9vu4LkWyfpLFYm1oO
tCrgqBSt0A+ZUnJ0RX1YCRqq/08tQUDAYHIrkGq+msGjqOZ8BV3T2FonNfXhQLZK
WP8HeD7WbHXLEnAtGPD61oCM0HrXAdzuJw6OzDbTjeCg93LR
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:31:38 2026 by rpki-client