This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa
File: 34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa (raw, json)
Hash identifier: nKWKeqjf327+P/Uzx+eYYEsgGMSAUSbQkFW9YlvKWiA=
Subject key identifier: E6:2E:47:DA:A7:32:D5:47:4A:E7:4C:9E:CF:47:52:C8:F0:4A:83:E0
Certificate issuer: /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial: 251D9B4B9B476BB25647D98FCCB36AAEAFD9DA2F
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa
Signing time: Tue 06 Jan 2026 19:44:04 +0000
ROA not before: Tue 06 Jan 2026 19:39:04 +0000
ROA not after: Tue 05 Jan 2027 19:44:04 +0000
asID: 266780
IP address blocks: 45.234.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 22:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1d:9b:4b:9b:47:6b:b2:56:47:d9:8f:cc:b3:6a:ae:af:d9:da:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Validity
Not Before: Jan 6 19:39:04 2026 GMT
Not After : Jan 5 19:44:04 2027 GMT
Subject: CN=E62E47DAA732D5474AE74C9ECF4752C8F04A83E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:82:80:59:3e:cd:17:8a:47:9c:1a:e8:e9:
d3:ef:96:87:13:51:8d:5a:64:2f:34:c1:b7:10:cd:
05:42:ca:14:5b:26:50:ed:a9:53:c7:fd:07:49:0a:
23:a0:87:90:b8:ef:d3:7d:56:90:86:20:6f:66:47:
03:b0:cb:d0:e6:a6:67:a7:33:95:5d:a0:86:25:a0:
a9:29:a7:66:60:0b:2c:ff:36:14:1e:20:b4:08:83:
b8:8c:ea:09:34:81:33:8a:78:e9:a2:9c:7c:e6:bc:
39:4b:ce:87:70:49:2e:bd:33:c9:44:3a:d4:08:64:
4f:a4:35:e8:0a:07:46:00:af:91:7e:a8:80:39:dc:
0d:fa:32:15:d8:24:74:6c:24:e2:bd:3e:a2:a1:a2:
0b:8f:79:02:12:fc:6d:49:74:a0:86:dd:c2:f7:a4:
74:3d:e8:50:e1:93:8b:2d:74:d0:48:9a:bc:3e:a5:
f4:c7:10:f0:b7:5c:26:ac:09:4e:cc:56:0d:cc:de:
df:0a:c7:2a:5d:d4:85:97:8f:17:b8:ce:c8:ec:29:
9b:50:eb:3a:0d:b6:df:16:69:e1:f4:fd:36:bf:2b:
3f:b7:bc:89:26:8e:92:e2:39:d1:de:49:f6:d6:f4:
b7:2e:d9:85:4c:cd:0c:4b:8c:4c:20:e5:33:43:7f:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:47:DA:A7:32:D5:47:4A:E7:4C:9E:CF:47:52:C8:F0:4A:83:E0
X509v3 Authority Key Identifier:
keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.112.0/22
Signature Algorithm: sha256WithRSAEncryption
49:b7:7f:23:b8:b8:52:ce:5d:c2:89:dc:bc:38:5c:b0:0f:04:
e4:70:d7:18:e2:e9:6e:df:b8:34:48:9a:fb:8c:a1:7f:11:e6:
7c:76:8c:16:80:15:ea:54:30:b5:0d:dc:42:a6:41:3e:34:57:
2e:e7:92:f4:33:df:f9:25:61:a7:c3:81:03:3c:32:89:40:c7:
af:9c:07:15:fb:7f:35:b1:e1:63:5f:60:ab:c7:23:e6:a5:59:
ee:6e:02:83:4c:1c:23:f9:35:dc:03:8a:32:ce:b2:84:9c:d8:
15:a7:c8:64:32:a5:13:92:7c:5a:55:70:3e:c7:00:1b:92:2a:
f4:02:29:21:47:cc:97:7b:d4:4d:49:34:bc:ed:95:2a:eb:bf:
f3:e2:4a:88:dc:99:7d:00:5c:0d:a9:09:eb:da:04:bf:d1:0f:
2e:23:51:84:7c:cd:d2:58:c4:1c:5b:cc:2b:7b:e8:c9:ef:b0:
b4:d4:74:ef:8a:fa:aa:7c:04:fe:42:25:63:44:e3:93:4c:94:
3e:1d:53:2b:28:8f:81:1b:39:f7:a8:1a:11:2a:62:30:12:ca:
7d:75:bb:71:7e:fb:4b:28:b6:ae:16:27:43:a7:c6:9c:fa:c2:
d8:b6:e6:5c:21:15:89:f4:a7:64:5e:d3:54:5a:63:83:2c:46:
a4:c8:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:55 2026 by rpki-client