This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e203238303037.roa
File: 34352e3232392e33322e302f32322d3234203d3e203238303037.roa (raw, json)
Hash identifier: NbI5gnnbz2eBuk3Z6GssNwnAB8NWf2HT9TKhWG8mJWw=
Subject key identifier: 9D:B7:2B:C2:4F:3C:4A:0B:E1:B4:20:16:AE:BF:AE:64:68:8C:D6:39
Certificate issuer: /CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
Certificate serial: 687222C7CDB68925630CF509A6A34870BEA3B5F7
Authority key identifier: F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e203238303037.roa
Signing time: Tue 06 Jan 2026 19:22:51 +0000
ROA not before: Tue 06 Jan 2026 19:17:51 +0000
ROA not after: Tue 05 Jan 2027 19:22:51 +0000
asID: 28007
IP address blocks: 45.229.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl
rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 14:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:72:22:c7:cd:b6:89:25:63:0c:f5:09:a6:a3:48:70:be:a3:b5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
Validity
Not Before: Jan 6 19:17:51 2026 GMT
Not After : Jan 5 19:22:51 2027 GMT
Subject: CN=9DB72BC24F3C4A0BE1B42016AEBFAE64688CD639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:28:33:62:9f:14:c5:fc:3c:85:9d:dd:3f:
e1:39:e0:d0:9d:ef:60:2f:a9:07:2a:3e:37:0d:e7:
31:74:10:f6:0b:22:74:63:69:1e:70:54:bb:fa:4d:
53:41:2e:76:9b:74:4b:5b:0e:6d:41:32:33:b7:f7:
2e:0e:7d:5a:1d:c5:f5:e2:7b:62:f0:e5:95:de:75:
dc:e9:c4:07:e9:33:70:57:ee:33:67:21:ca:af:6a:
73:63:16:1e:26:c1:5b:c2:d2:00:56:a9:f3:86:f9:
e0:3b:85:18:0e:ce:91:9c:b7:a0:fc:3b:9e:a0:33:
4a:0c:a7:6c:64:3e:80:fe:3a:58:15:64:85:f2:d1:
cf:c0:10:14:b0:d9:2f:ac:a3:35:15:8e:6a:00:de:
33:55:22:14:22:d4:13:a6:f1:f5:9b:c7:3f:62:48:
6a:e7:07:07:bc:28:5e:bd:4a:a5:11:9b:d5:3d:8e:
49:c2:5c:2f:0a:69:df:d0:0a:5c:0e:b7:81:c1:3e:
ac:8f:93:7e:27:69:79:a9:57:a4:6f:8b:cd:5e:42:
52:2d:68:fd:1c:f4:32:d0:a0:0c:9f:04:8a:2f:5c:
c3:8f:a7:6e:e0:ac:c7:ed:1a:1c:b2:4a:cf:8f:49:
60:b0:80:7b:3b:23:a1:8b:7e:15:e4:b6:60:ed:2a:
b3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B7:2B:C2:4F:3C:4A:0B:E1:B4:20:16:AE:BF:AE:64:68:8C:D6:39
X509v3 Authority Key Identifier:
keyid:F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e203238303037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:ed:2b:f3:a8:c6:29:58:c9:3b:48:69:15:79:62:13:00:ed:
1b:f9:51:08:1f:76:9c:f7:c9:56:31:62:9a:58:92:a7:fe:47:
ee:56:70:ce:ea:90:0e:ec:ff:85:63:71:a0:14:65:dd:d1:01:
be:2d:f4:b5:bd:69:10:0b:97:a3:82:55:3a:23:c3:b4:4a:b1:
0e:b9:41:84:bb:9b:5f:f4:b2:e0:26:49:f6:83:2a:ab:ab:44:
52:4c:95:78:66:a2:d5:ad:d0:e2:cc:5f:5d:a1:7f:ac:45:f6:
09:0b:b2:5e:1a:c2:b6:6e:3f:16:c2:57:37:80:91:b5:01:d8:
d9:8c:7d:72:c7:7c:7f:68:b0:6a:01:0b:4d:0c:bf:a0:16:45:
18:61:9c:4a:34:87:c7:43:d3:2b:39:3c:0a:3d:42:b7:71:8b:
ab:d9:df:dc:49:b5:38:67:72:a5:80:ee:3a:60:3b:92:21:62:
7d:75:cc:9d:4a:e7:67:f9:2b:96:2f:60:b9:f8:4f:ac:b2:56:
0c:e7:88:bf:03:4a:a9:29:e8:45:95:7b:30:79:c3:ee:a5:55:
f9:29:75:55:6a:be:9f:f7:28:da:f6:7b:41:64:80:36:0f:48:
f2:e8:9f:fa:ed:af:ab:4f:be:af:34:42:78:eb:77:f4:c2:8a:
83:78:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:54:18 2026 by rpki-client