This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa
File: 34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier: j8zXYOsJCnV4NQOT7f0oXhwvZhAKcRrMHAp6SmLtmQc=
Subject key identifier: 04:73:07:23:71:98:4F:F8:97:70:A1:07:43:DD:57:54:AB:37:43:5F
Certificate issuer: /CN=AABC402EE2FAF415F9D03091D83BA93DC6107FEC
Certificate serial: 25109731B3464E1DCA062DCF18FC06BC1B889762
Authority key identifier: AA:BC:40:2E:E2:FA:F4:15:F9:D0:30:91:D8:3B:A9:3D:C6:10:7F:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa
Signing time: Tue 06 Jan 2026 19:03:45 +0000
ROA not before: Tue 06 Jan 2026 18:58:45 +0000
ROA not after: Tue 05 Jan 2027 19:03:45 +0000
asID: 265703
IP address blocks: 45.165.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.crl
rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:10:97:31:b3:46:4e:1d:ca:06:2d:cf:18:fc:06:bc:1b:88:97:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AABC402EE2FAF415F9D03091D83BA93DC6107FEC
Validity
Not Before: Jan 6 18:58:45 2026 GMT
Not After : Jan 5 19:03:45 2027 GMT
Subject: CN=0473072371984FF89770A10743DD5754AB37435F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:67:77:70:72:98:5a:22:7b:01:f3:83:c2:
b4:d9:b2:94:84:7d:12:57:12:71:c5:d6:79:c6:c7:
26:05:57:0c:cf:2e:5f:8a:f9:9e:35:7b:1c:10:06:
13:e2:27:eb:eb:b1:66:61:11:b6:e7:e8:e9:3c:3e:
65:1c:48:86:f6:66:8c:9b:92:cc:25:4a:f7:7f:82:
90:55:b7:1d:bd:da:a1:41:b0:83:07:e7:2c:0d:ea:
b1:25:ee:74:b5:4b:f8:09:6c:87:d3:ce:72:98:38:
b1:06:0b:dc:25:4b:bb:6b:07:4a:9a:31:7f:1b:a7:
0e:09:2c:4d:eb:d4:4f:af:84:a2:1f:14:07:10:41:
fd:f3:bb:e6:22:f2:b2:3e:99:72:12:fc:15:8b:c3:
97:84:92:71:98:40:e7:fe:b8:37:d4:3e:8d:c1:20:
fd:65:cd:96:c1:ae:5a:72:de:6e:6f:bb:da:df:19:
78:2b:bb:9e:ea:c2:3d:a3:95:55:bd:ce:dd:5d:bf:
52:1c:6b:41:b7:37:a1:e2:99:aa:58:09:a9:21:1a:
21:3d:61:87:69:90:1f:df:29:e4:a1:b3:79:2e:da:
1a:db:91:51:af:34:d1:52:86:e8:6c:9d:41:14:df:
9b:a2:59:11:56:17:e9:65:f5:b3:3a:0c:9d:bc:5b:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:73:07:23:71:98:4F:F8:97:70:A1:07:43:DD:57:54:AB:37:43:5F
X509v3 Authority Key Identifier:
keyid:AA:BC:40:2E:E2:FA:F4:15:F9:D0:30:91:D8:3B:A9:3D:C6:10:7F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.168.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:f5:15:0b:e6:53:15:0c:d9:24:41:53:be:af:1b:5d:2f:4c:
40:f9:cd:65:61:5a:ac:44:a7:5e:40:de:6d:51:df:8c:25:98:
8f:dd:5a:04:cd:1b:c3:07:19:88:a1:04:28:bd:59:25:0d:56:
00:1a:d6:28:ef:cc:2e:cb:68:27:0d:d1:c1:4f:df:3f:c7:bc:
22:83:65:cc:86:32:d5:a3:0e:1e:c7:5d:5c:62:ec:a4:67:33:
07:80:0b:ab:f6:46:1f:54:b2:8c:f2:16:e4:8f:37:02:1d:56:
28:dd:bf:bb:53:20:f3:6f:25:21:95:50:ef:39:4e:84:f6:94:
4a:42:c2:0c:b3:26:40:c1:de:c0:92:17:28:e3:7a:1d:94:b0:
8d:21:a1:53:fb:fb:16:b5:00:14:e5:16:f9:f7:4c:9c:0b:92:
6a:9e:32:e5:a9:29:7d:e3:66:0b:ee:c6:52:bc:65:80:22:cd:
4b:67:f2:c5:a4:04:13:93:2d:9e:2e:0e:bf:7d:cb:a1:3f:43:
84:f4:12:2b:38:40:fd:00:61:4c:7b:f1:e2:fa:34:c0:48:a2:
3b:c9:0b:58:86:a1:7b:3d:1c:84:7d:81:ca:39:f7:91:c1:a3:
16:19:19:11:1f:fc:fd:75:6b:ad:bf:64:fe:e3:c9:67:d8:5d:
dc:64:c7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:41:41 2026 by rpki-client