This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa
File: 34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa (raw, json)
Hash identifier: 6D9x6VKpdf4jygUG5A4q4B0BcForCgqn9v5QAXgdfig=
Subject key identifier: 67:E7:ED:87:23:4A:4A:6B:A0:45:99:A4:23:E5:14:96:45:7F:4B:D5
Certificate issuer: /CN=67695A57A246E7FEEC5E99692566E43D7F039663
Certificate serial: 627903E15A0B26AD925A76086C9E2077BF124A1D
Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa
Signing time: Tue 06 Jan 2026 19:25:49 +0000
ROA not before: Tue 06 Jan 2026 19:20:49 +0000
ROA not after: Tue 05 Jan 2027 19:25:49 +0000
asID: 266683
IP address blocks: 45.227.196.0/22 maxlen: 25
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl
rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 01:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:79:03:e1:5a:0b:26:ad:92:5a:76:08:6c:9e:20:77:bf:12:4a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663
Validity
Not Before: Jan 6 19:20:49 2026 GMT
Not After : Jan 5 19:25:49 2027 GMT
Subject: CN=67E7ED87234A4A6BA04599A423E51496457F4BD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:ea:c1:bf:24:9d:fa:53:76:94:52:ee:e2:
37:ab:59:df:f1:21:f9:c4:a1:d5:d3:2f:f0:b5:0d:
07:6d:e5:19:83:2d:30:5e:6e:2e:74:91:91:f9:43:
7f:9e:0c:6b:b8:a0:b7:23:6d:99:31:c2:7d:c6:d7:
01:97:f4:06:9f:02:ed:7e:bd:ca:62:d8:c1:55:41:
a1:53:58:07:cb:88:9e:bd:c9:79:fe:d5:4c:0c:98:
b5:64:c6:88:05:d4:44:91:c3:ee:e0:4f:4f:b1:7d:
f0:26:be:89:5c:f5:69:83:bd:84:04:cb:39:5d:33:
53:7f:b3:0b:0a:df:68:6b:a0:b4:26:2d:64:72:de:
d0:1d:92:38:cf:42:04:1b:03:ee:37:5b:a4:c6:a2:
93:5b:82:2c:91:f6:d6:a1:ce:2c:f7:d7:c8:45:f9:
f2:58:14:02:39:12:bc:ce:c8:4a:80:70:b3:1e:fd:
c8:9f:87:1f:b7:ca:b8:74:fd:e5:6e:e9:1f:e0:c6:
66:c8:a4:1d:df:63:1f:4e:55:ff:f7:d5:fa:7a:52:
63:c8:95:94:c8:4c:c1:ea:fc:42:18:cb:ed:a7:bf:
20:69:c2:55:7e:26:73:01:3a:06:15:af:3a:f2:db:
af:60:60:1b:c8:ca:5a:7a:55:9a:49:8d:01:16:01:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:ED:87:23:4A:4A:6B:A0:45:99:A4:23:E5:14:96:45:7F:4B:D5
X509v3 Authority Key Identifier:
keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.196.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:ed:e3:b8:9f:02:09:12:f3:80:62:b9:fd:9b:4b:1e:79:02:
2f:df:0a:29:9f:c7:f4:e9:f3:03:82:d2:d9:9d:c0:2e:01:c5:
3c:df:17:7c:63:17:7f:c8:02:18:31:a0:47:ba:76:0b:b7:dc:
90:ef:36:df:dd:c7:e5:9f:64:5c:cc:d2:0f:12:ba:20:ba:49:
0d:46:a5:86:25:87:6e:5c:1c:26:60:39:43:b0:65:82:3a:f4:
e0:49:2a:98:44:08:1b:a8:be:98:22:b8:69:50:8a:2d:e1:1f:
3f:9f:0f:a4:75:ba:69:dc:66:da:3e:02:82:ef:b1:8e:73:14:
d9:fc:5a:68:c6:98:e0:24:14:d1:46:f5:3a:08:5b:98:51:51:
86:49:ec:f2:6b:bd:6d:d2:6a:28:dd:84:f3:1c:34:c3:58:c3:
78:f5:45:97:05:43:6f:3e:64:87:b1:08:1c:f4:07:42:1b:33:
e6:f1:9f:d7:b9:91:f1:af:f5:1e:e4:1e:5a:74:7f:50:35:e4:
fd:f3:3d:13:d5:7e:90:36:fc:75:a1:e1:c0:f6:ad:48:bc:ea:
62:88:e2:22:76:79:b2:06:d3:85:2e:2e:54:94:ca:8e:e0:c5:
79:e3:7c:18:d6:cd:f2:66:32:44:dd:4a:c6:20:fb:be:1c:6a:
01:22:20:a3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYnkD4VoLJq2SWnYIbJ4gd78SSh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc2OTVBNTdBMjQ2RTdGRUVDNUU5OTY5MjU2NkU0M0Q3
RjAzOTY2MzAeFw0yNjAxMDYxOTIwNDlaFw0yNzAxMDUxOTI1NDlaMDMxMTAvBgNV
BAMTKDY3RTdFRDg3MjM0QTRBNkJBMDQ1OTlBNDIzRTUxNDk2NDU3RjRCRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkOrBvySd+lN2lFLu4jerWd/x
IfnEodXTL/C1DQdt5RmDLTBebi50kZH5Q3+eDGu4oLcjbZkxwn3G1wGX9AafAu1+
vcpi2MFVQaFTWAfLiJ69yXn+1UwMmLVkxogF1ESRw+7gT0+xffAmvolc9WmDvYQE
yzldM1N/swsK32hroLQmLWRy3tAdkjjPQgQbA+43W6TGopNbgiyR9tahziz318hF
+fJYFAI5ErzOyEqAcLMe/cifhx+3yrh0/eVu6R/gxmbIpB3fYx9OVf/31fp6UmPI
lZTITMHq/EIYy+2nvyBpwlV+JnMBOgYVrzry269gYBvIylp6VZpJjQEWAVpvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZ+fthyNKSmugRZmkI+UUlkV/S9UwHwYDVR0j
BBgwFoAUZ2laV6JG5/7sXplpJWbkPX8DlmMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTdEMjI3NzBFQTQ3ODU0NDY1NTk1OUU2NUIwREFENkEz
OTgzNTdGQTY3MzA5QTc2NEFBRDcxQTREMzk0MUEyLzAvNjc2OTVBNTdBMjQ2RTdG
RUVDNUU5OTY5MjU2NkU0M0Q3RjAzOTY2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NzY5NUE1N0EyNDZFN0ZFRUM1
RTk5NjkyNTY2RTQzRDdGMDM5NjYzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDE3RDIyNzcwRUE0Nzg1NDQ2NTU5NTlFNjVCMERBRDZBMzk4MzU3RkE2
NzMwOUE3NjRBQUQ3MUE0RDM5NDFBMi8wLzM0MzUyZTMyMzIzNzJlMzEzOTM2MmUz
MDJmMzIzMjJkMzIzNTIwM2QzZTIwMzIzNjM2MzYzODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLePE
MA0GCSqGSIb3DQEBCwUAA4IBAQCf7eO4nwIJEvOAYrn9m0seeQIv3wopn8f06fMD
gtLZncAuAcU83xd8Yxd/yAIYMaBHunYLt9yQ7zbf3cfln2RczNIPErogukkNRqWG
JYduXBwmYDlDsGWCOvTgSSqYRAgbqL6YIrhpUIot4R8/nw+kdbpp3GbaPgKC77GO
cxTZ/FpoxpjgJBTRRvU6CFuYUVGGSezya71t0moo3YTzHDTDWMN49UWXBUNvPmSH
sQgc9AdCGzPm8Z/XuZHxr/Ue5B5adH9QNeT98z0T1X6QNvx1oeHA9q1IvOpiiOIi
dnmyBtOFLi5UlMqO4MV543wY1s3yZjJE3UrGIPu+HGoBIiCj
-----END CERTIFICATE-----
Generated at Thu Jan 8 17:40:02 2026 by rpki-client