This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/34352e3138382e3133362e302f32322d3234203d3e203532343936.roa
File: 34352e3138382e3133362e302f32322d3234203d3e203532343936.roa (raw, json)
Hash identifier: jRKzetT1rf5tshaOxq03+RzNagxlQz+zLJ793F2mCfA=
Subject key identifier: 23:48:80:62:16:28:5E:7A:DB:33:0F:6D:44:F8:9F:EC:56:AE:C6:1C
Certificate issuer: /CN=0AC68AE029154F6D77C1C00DCE8081D363F9D2BC
Certificate serial: 29D744D1600DDBCE0BBA7397C4B26040220BCC14
Authority key identifier: 0A:C6:8A:E0:29:15:4F:6D:77:C1:C0:0D:CE:80:81:D3:63:F9:D2:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/34352e3138382e3133362e302f32322d3234203d3e203532343936.roa
Signing time: Tue 06 Jan 2026 18:57:58 +0000
ROA not before: Tue 06 Jan 2026 18:52:58 +0000
ROA not after: Tue 05 Jan 2027 18:57:58 +0000
asID: 52496
IP address blocks: 45.188.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.crl
rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d7:44:d1:60:0d:db:ce:0b:ba:73:97:c4:b2:60:40:22:0b:cc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AC68AE029154F6D77C1C00DCE8081D363F9D2BC
Validity
Not Before: Jan 6 18:52:58 2026 GMT
Not After : Jan 5 18:57:58 2027 GMT
Subject: CN=2348806216285E7ADB330F6D44F89FEC56AEC61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:df:73:b2:9d:0a:e0:fb:54:41:93:92:7d:d8:
ed:64:c3:e8:62:20:da:03:26:e6:ee:7b:3b:57:5f:
3d:67:7d:87:ad:ce:fb:c1:53:12:b2:71:06:4e:0e:
57:ca:19:74:e0:1d:d0:61:d8:f1:48:cc:77:15:12:
73:d3:55:07:30:f8:15:8e:1e:97:02:b0:56:0b:33:
27:ee:2e:08:42:27:53:3e:ed:ef:e5:8d:e6:62:53:
56:bf:8c:0c:d6:40:c8:dd:b2:2a:25:f3:61:20:17:
78:79:93:3c:8f:7f:3d:7d:09:4e:31:62:d6:3a:5e:
a8:4d:44:7f:ab:55:da:2c:c0:a8:68:1b:30:4c:d5:
ae:b0:bf:a5:8a:2e:26:8d:b1:ac:87:b5:57:b7:c4:
89:7a:73:c3:48:d8:d9:3f:76:a9:2f:ca:bd:44:b3:
6c:e6:51:c6:e1:10:f7:8e:05:64:98:7f:49:2c:c2:
d8:5e:b2:86:a2:1d:74:70:66:22:f5:28:08:5f:da:
6d:47:8b:fd:fc:49:2d:ea:c0:a4:49:58:86:2d:60:
25:d8:72:13:0a:d0:72:22:38:55:a6:87:25:7f:97:
96:6a:89:f7:dc:27:56:fd:5c:4e:c6:9a:16:3c:1c:
fa:98:e9:93:ab:46:fa:94:02:8f:67:3b:6f:2b:32:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:48:80:62:16:28:5E:7A:DB:33:0F:6D:44:F8:9F:EC:56:AE:C6:1C
X509v3 Authority Key Identifier:
keyid:0A:C6:8A:E0:29:15:4F:6D:77:C1:C0:0D:CE:80:81:D3:63:F9:D2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/34352e3138382e3133362e302f32322d3234203d3e203532343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.136.0/22
Signature Algorithm: sha256WithRSAEncryption
72:6b:33:93:3e:c2:53:41:c6:01:23:ac:7b:72:d1:ab:b9:06:
47:4b:e7:15:3a:ae:e3:2d:ed:dc:8b:2a:a8:20:d0:61:c3:58:
04:4e:ad:38:e2:0a:f4:04:cc:51:30:51:09:c7:b2:9d:3b:7f:
b3:c4:81:8e:04:da:26:d7:59:4a:72:4d:c5:e1:de:06:d3:ba:
81:1a:dc:7c:b3:df:bd:6f:c4:60:62:d3:c6:fd:49:ad:f9:2a:
5b:43:54:3a:02:c0:9d:28:20:de:de:61:5e:31:aa:cf:70:01:
aa:a0:af:1c:45:50:7c:36:6d:06:0b:c8:df:db:2d:b9:76:a6:
62:26:9c:b1:4d:90:c3:cd:f0:8d:81:37:48:03:6a:7b:1a:bf:
79:ba:fe:1c:f9:22:89:4a:03:29:8b:25:d0:5d:b4:25:44:5e:
72:78:fb:bf:66:38:8c:7a:c0:c9:e0:23:8f:71:18:e9:7d:79:
33:63:56:d7:ca:c0:6e:1b:37:19:12:9a:29:a9:0a:41:8e:cb:
1e:26:32:a3:8d:43:7e:e7:5e:c6:47:ed:ed:54:0c:a7:76:d8:
df:9f:9f:24:c8:a6:8a:a5:85:df:dc:07:cc:87:bc:cd:cf:22:
1e:89:d6:f7:14:d4:98:a6:f1:5d:43:12:11:3c:0e:4d:69:98:
7b:f5:42:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:12:18 2026 by rpki-client