This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234372e302f32342d3234203d3e203238343233.roa
File: 34352e3137302e3234372e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier: RXDb9gbTqWuRZ3HT5UyXaQxF1wR7RL7HTWTKHrm04CY=
Subject key identifier: 73:AA:B1:B9:1D:DA:07:EC:98:E8:A4:A2:AE:F9:E6:1E:DF:23:7C:AC
Certificate issuer: /CN=404AF48919442F94B61222A52CBC7E3F459B1B77
Certificate serial: 2EF1C5428A06C66550D75B6643F7E25E87442FEF
Authority key identifier: 40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234372e302f32342d3234203d3e203238343233.roa
Signing time: Sat 20 Dec 2025 20:55:48 +0000
ROA not before: Sat 20 Dec 2025 20:50:48 +0000
ROA not after: Sat 19 Dec 2026 20:55:48 +0000
asID: 28423
IP address blocks: 45.170.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl
rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 26 Dec 2025 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f1:c5:42:8a:06:c6:65:50:d7:5b:66:43:f7:e2:5e:87:44:2f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404AF48919442F94B61222A52CBC7E3F459B1B77
Validity
Not Before: Dec 20 20:50:48 2025 GMT
Not After : Dec 19 20:55:48 2026 GMT
Subject: CN=73AAB1B91DDA07EC98E8A4A2AEF9E61EDF237CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:c4:07:3d:02:f5:d3:71:8d:6e:75:e7:5d:
3c:66:24:32:32:75:11:ba:dc:9f:ac:13:af:58:aa:
9b:c2:b5:42:ed:85:b8:e7:38:63:41:a4:e2:40:86:
f0:b3:6b:8f:60:eb:c5:d8:51:37:75:0d:63:dd:28:
d2:a4:40:bb:6a:bf:0f:8b:34:15:fa:57:ca:de:90:
a6:88:d9:76:9e:59:39:cd:4a:ac:50:ac:25:fd:40:
92:8d:db:0e:cd:90:da:9e:35:c0:0b:0a:ad:cb:1d:
ef:32:a8:55:70:5c:b7:93:df:bb:8c:84:9b:7b:76:
50:20:c7:8b:7d:06:83:bd:88:d9:89:c8:b2:fb:70:
33:c7:58:cd:cb:ab:48:92:d0:84:14:cc:0c:e7:ef:
c5:f6:d7:99:8f:c5:f0:fe:9a:b9:03:f3:31:47:ec:
4e:b8:57:d7:bb:f0:c5:75:5f:68:91:50:30:a0:96:
d8:6d:f9:5d:6e:20:64:f6:63:ac:a2:b9:25:c7:10:
4b:ce:3a:a4:c9:30:f5:70:de:51:3b:ba:94:63:6b:
83:48:b3:78:48:ab:ca:34:00:06:a9:2d:f1:66:7c:
22:98:97:6e:e9:6c:46:a1:20:be:ed:e9:3f:eb:ae:
63:6a:48:59:de:06:f8:6a:2f:67:d0:86:26:04:e7:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AA:B1:B9:1D:DA:07:EC:98:E8:A4:A2:AE:F9:E6:1E:DF:23:7C:AC
X509v3 Authority Key Identifier:
keyid:40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234372e302f32342d3234203d3e203238343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.247.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:fd:1d:69:d5:51:16:8a:f3:eb:f0:bd:15:f9:df:25:7e:05:
51:90:8a:3c:db:33:e7:69:0e:5c:93:5b:44:80:54:59:a5:43:
da:00:55:b6:1d:85:f9:cd:e8:54:fa:15:c5:7b:0b:cb:1e:af:
9d:bd:a2:7e:6f:25:3a:c8:2d:f2:69:9d:06:3b:44:31:1d:3c:
6b:8a:ff:bf:15:50:44:92:a4:dd:ae:16:8e:c5:69:41:48:71:
fd:7a:59:4b:17:f6:b7:a8:ee:c5:24:4b:f3:4f:52:f6:30:05:
37:47:1f:3d:09:f1:01:bb:6d:a7:65:65:7f:0c:5a:9e:a7:89:
8f:ab:b7:00:2e:6a:51:25:bb:e0:52:6e:d1:a5:c5:09:12:41:
96:03:81:56:69:cd:e5:b5:46:23:f5:63:cc:b4:c2:c6:16:68:
60:93:c4:48:6f:38:82:06:96:3b:18:98:44:6c:87:d3:82:10:
b6:2e:a0:9b:d4:eb:97:d1:bc:75:d0:7c:0d:a0:51:70:a0:cf:
ce:38:9a:29:a7:2d:b6:1a:bc:99:ee:89:e4:78:d0:77:23:aa:
e8:03:26:5b:24:ad:d5:35:d1:55:83:71:2b:26:66:a2:87:84:
78:f3:52:25:00:0d:9f:d2:fc:14:88:ac:24:c6:7c:04:0c:a7:
81:52:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:01:04 2025 by rpki-client