This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/34352e3232362e33322e302f32322d3234203d3e20323635383830.roa
File: 34352e3232362e33322e302f32322d3234203d3e20323635383830.roa (raw, json)
Hash identifier: AEZ19WGQqh5Y1sYADxE8FFsZpcvq2xaOUYmbUvsH4Fw=
Subject key identifier: 19:24:3C:78:2D:80:2F:7D:65:94:0D:83:55:D8:CA:51:C5:B5:C8:27
Certificate issuer: /CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
Certificate serial: 5D92AA137CA8E8C09232B7C4EDA1A7C1CEDD3685
Authority key identifier: C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/34352e3232362e33322e302f32322d3234203d3e20323635383830.roa
Signing time: Wed 31 Dec 2025 15:56:55 +0000
ROA not before: Wed 31 Dec 2025 15:51:55 +0000
ROA not after: Wed 30 Dec 2026 15:56:55 +0000
asID: 265880
IP address blocks: 45.226.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl
rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:92:aa:13:7c:a8:e8:c0:92:32:b7:c4:ed:a1:a7:c1:ce:dd:36:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
Validity
Not Before: Dec 31 15:51:55 2025 GMT
Not After : Dec 30 15:56:55 2026 GMT
Subject: CN=19243C782D802F7D65940D8355D8CA51C5B5C827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:36:ac:36:af:3d:19:d7:93:49:99:1b:ce:
0b:c0:3a:ca:fb:c3:6a:e8:e6:7f:83:fd:1d:9f:9b:
2f:1a:30:1f:a2:67:51:22:ce:6c:4e:0d:84:0c:a2:
b0:ec:c5:68:cc:7e:4c:5b:7d:2b:4b:1b:2c:62:02:
a1:42:dc:50:29:2b:a8:16:31:5d:d9:a2:a4:c8:f8:
51:7a:25:61:11:6c:a7:b5:57:0e:61:31:3d:bb:a5:
c8:5d:5a:61:1b:7e:5c:45:72:56:51:4f:5c:b9:c8:
0f:bc:0c:9e:08:1d:6c:0f:25:56:4d:e8:5f:25:8d:
22:57:43:d4:9e:b4:91:7e:0c:28:c1:10:a9:c8:50:
30:c0:0a:d2:37:85:ab:0d:ef:25:61:ac:9d:f9:ee:
c7:fa:45:a4:c2:7e:cc:1c:84:5d:f9:19:d1:2c:45:
9b:d9:65:8b:28:48:28:be:65:1b:4d:ae:85:fd:79:
5c:1c:80:b2:44:24:7a:15:e2:b4:81:fb:8d:3a:2b:
61:3e:d0:77:d4:38:a4:72:e0:29:4b:b3:17:06:16:
13:62:05:54:22:73:17:5f:89:6b:e2:cd:be:f8:38:
c5:14:19:73:3a:14:d3:e9:31:4c:77:f6:fb:8c:69:
3c:f6:1d:bd:42:26:4e:ea:d5:13:a0:fd:c6:ea:44:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:24:3C:78:2D:80:2F:7D:65:94:0D:83:55:D8:CA:51:C5:B5:C8:27
X509v3 Authority Key Identifier:
keyid:C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/34352e3232362e33322e302f32322d3234203d3e20323635383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:28:03:2d:eb:0b:6f:e9:e6:97:f9:83:cc:6c:ee:0f:72:73:
30:32:4a:1f:5e:cd:ae:24:38:5c:e6:f7:ce:43:c4:49:79:46:
f2:35:02:51:23:f4:81:cc:a4:eb:ec:72:8e:b7:9e:83:0a:d4:
d1:21:49:b0:81:18:5c:3d:96:30:d4:02:f9:6d:d1:d8:c4:f5:
76:d7:e1:24:7f:68:52:10:c8:21:b4:08:ab:51:81:e4:ef:90:
aa:61:7b:81:86:06:c4:47:42:60:b0:7a:6f:b6:b7:e2:4c:f2:
1b:b6:a5:6c:1d:de:77:5f:26:5d:11:08:43:92:fa:17:35:88:
fd:17:14:37:66:2a:09:ac:97:f3:f9:9b:7e:7d:1b:4e:e5:c3:
3f:65:74:fc:5e:12:26:ec:33:43:13:84:8e:34:5c:a3:a6:ab:
3a:fe:51:6e:d4:8c:35:19:3c:95:9a:4b:f6:df:41:30:93:25:
f2:27:13:22:a4:6f:8d:2b:a0:df:04:85:e8:7b:ec:ae:5a:db:
cb:54:13:1f:a1:cc:b9:24:12:5b:60:37:2c:61:78:53:0d:67:
ec:70:a6:28:86:56:18:0b:65:1c:6d:83:c7:8b:d0:b6:83:a8:
e7:3e:8a:ac:b2:71:9d:e2:fb:42:32:1c:e9:e6:24:85:24:5c:
cf:c7:a7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:04:38 2026 by rpki-client