This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e203532343638.roa
File: 34352e37302e35362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: 0S0BzsriV8jJslSpQZzjitvMHS4+3pZ60UcHZCRwSJA=
Subject key identifier: 35:C9:83:14:BD:BA:51:EE:03:DB:E6:77:55:72:F3:CD:08:A2:0B:7D
Certificate issuer: /CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
Certificate serial: 736E5A94A23A119428A2B3670D839F96BA38D71A
Authority key identifier: 81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e203532343638.roa
Signing time: Tue 06 Jan 2026 19:04:57 +0000
ROA not before: Tue 06 Jan 2026 18:59:57 +0000
ROA not after: Tue 05 Jan 2027 19:04:57 +0000
asID: 52468
IP address blocks: 45.70.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.crl
rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 05:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:6e:5a:94:a2:3a:11:94:28:a2:b3:67:0d:83:9f:96:ba:38:d7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
Validity
Not Before: Jan 6 18:59:57 2026 GMT
Not After : Jan 5 19:04:57 2027 GMT
Subject: CN=35C98314BDBA51EE03DBE6775572F3CD08A20B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:0b:9e:ea:fc:a4:63:ec:a6:d9:01:51:66:
14:e5:e3:80:f4:86:9d:13:d6:dc:ad:0d:c2:b1:ce:
bf:ee:18:37:ab:08:f7:68:2f:56:8b:87:26:56:69:
47:17:d4:1e:c6:7c:ad:5f:f8:c1:5a:ca:6a:39:c5:
43:6b:f6:22:7a:64:13:d9:b9:fc:bf:34:10:f5:55:
98:fd:41:b1:d4:58:2c:74:1e:69:59:90:ba:11:94:
49:11:51:ec:9c:80:cf:26:77:48:76:91:11:da:bd:
8a:c4:fa:ec:e4:37:78:4d:8c:fb:af:a2:8d:a7:58:
20:91:b9:f6:2b:75:38:27:f8:74:42:88:22:eb:bb:
85:d5:5f:dc:3b:9c:f3:df:cb:c3:9c:15:5d:aa:51:
6e:81:3f:c0:47:47:ae:9b:5d:73:a1:a4:ce:9c:8e:
41:a9:4c:fc:48:f7:02:01:1c:78:54:64:77:c0:71:
06:15:23:a3:85:ba:4d:23:3e:12:f0:8f:ec:92:91:
f0:3d:a9:08:3e:81:64:dc:34:d4:ce:44:dd:e2:0d:
cb:b0:df:65:87:09:cf:db:58:a7:e0:6f:55:9a:b0:
ac:f2:db:3d:35:e1:6b:33:bc:e3:61:61:6f:06:00:
bd:87:10:14:7a:cc:28:d2:ca:9e:7d:d0:52:47:8e:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C9:83:14:BD:BA:51:EE:03:DB:E6:77:55:72:F3:CD:08:A2:0B:7D
X509v3 Authority Key Identifier:
keyid:81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:d8:30:2d:d8:99:f3:ad:d1:97:cc:4d:be:91:b0:ce:41:b3:
e4:7c:f8:44:6b:ee:d8:1f:39:5e:50:eb:06:b1:38:74:38:c7:
22:00:4b:07:63:6e:d7:c9:4a:e8:02:63:f5:f8:b4:5a:91:34:
aa:78:95:30:a6:0c:44:e3:2a:91:28:03:9c:c7:65:88:4a:11:
38:5d:4e:48:fa:29:ec:ad:2e:25:be:a7:9b:a3:d6:88:74:fe:
08:7d:9a:84:aa:d2:de:f9:b5:81:03:71:a4:e2:3d:76:c4:9e:
f2:88:dc:23:5a:49:f0:32:43:ae:74:47:11:bf:21:cf:44:73:
dc:69:81:fb:54:40:13:93:ec:4e:b0:5c:b3:f1:44:0a:d8:62:
f0:3a:f3:7d:e7:0f:82:e2:b7:db:7d:7a:2c:fc:cf:f8:91:af:
f3:3b:4b:b0:2d:0a:c3:77:11:7a:51:c2:8d:5f:5d:2f:31:86:
e8:21:16:31:77:f2:12:67:65:63:43:35:da:5b:c9:fe:c9:e6:
8f:37:6e:7e:aa:ae:a6:80:f0:9b:48:7c:46:dd:d2:82:fe:5f:
f9:83:38:81:11:4f:e8:97:30:b0:45:68:2d:76:a7:05:25:16:
b2:22:a3:d1:1e:42:0e:c7:43:b2:f8:9e:4c:ef:4b:66:56:08:
58:f2:30:16
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUc25alKI6EZQoorNnDYOflro41xowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFCQzNEMEYyNERCODkwRUEzN0M5NzlDQ0M2QkU4OEM3
RkVEMzM0MDAeFw0yNjAxMDYxODU5NTdaFw0yNzAxMDUxOTA0NTdaMDMxMTAvBgNV
BAMTKDM1Qzk4MzE0QkRCQTUxRUUwM0RCRTY3NzU1NzJGM0NEMDhBMjBCN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgswue6vykY+ym2QFRZhTl44D0
hp0T1tytDcKxzr/uGDerCPdoL1aLhyZWaUcX1B7GfK1f+MFaymo5xUNr9iJ6ZBPZ
ufy/NBD1VZj9QbHUWCx0HmlZkLoRlEkRUeycgM8md0h2kRHavYrE+uzkN3hNjPuv
oo2nWCCRufYrdTgn+HRCiCLru4XVX9w7nPPfy8OcFV2qUW6BP8BHR66bXXOhpM6c
jkGpTPxI9wIBHHhUZHfAcQYVI6OFuk0jPhLwj+ySkfA9qQg+gWTcNNTORN3iDcuw
32WHCc/bWKfgb1WasKzy2z014WszvONhYW8GAL2HEBR6zCjSyp590FJHjlhTAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUNcmDFL26Ue4D2+Z3VXLzzQiiC30wHwYDVR0j
BBgwFoAUgbw9DyTbiQ6jfJeczGvojH/tM0AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OEFDNkJGNzMxRkQzMkEyNUJCMTFEMDA3RkEzMDc1RjNB
MzhCMjVCNzNCNkQzNjI5MUI1MEYzMjMzODRDQjhDLzAvODFCQzNEMEYyNERCODkw
RUEzN0M5NzlDQ0M2QkU4OEM3RkVEMzM0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MUJDM0QwRjI0REI4OTBFQTM3
Qzk3OUNDQzZCRTg4QzdGRUQzMzQwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjhBQzZCRjczMUZEMzJBMjVCQjExRDAwN0ZBMzA3NUYzQTM4QjI1Qjcz
QjZEMzYyOTFCNTBGMzIzMzg0Q0I4Qy8wLzM0MzUyZTM3MzAyZTM1MzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUY4MA0GCSqG
SIb3DQEBCwUAA4IBAQCi2DAt2JnzrdGXzE2+kbDOQbPkfPhEa+7YHzleUOsGsTh0
OMciAEsHY27XyUroAmP1+LRakTSqeJUwpgxE4yqRKAOcx2WIShE4XU5I+insrS4l
vqebo9aIdP4IfZqEqtLe+bWBA3Gk4j12xJ7yiNwjWknwMkOudEcRvyHPRHPcaYH7
VEATk+xOsFyz8UQK2GLwOvN95w+C4rfbfXos/M/4ka/zO0uwLQrDdxF6UcKNX10v
MYboIRYxd/ISZ2VjQzXaW8n+yeaPN25+qq6mgPCbSHxG3dKC/l/5gziBEU/olzCw
RWgtdqcFJRayIqPRHkIOx0Oy+J5M70tmVghY8jAW
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:22:14 2026 by rpki-client