This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130342e302f32332d3234203d3e203237383433.roa
File: 34352e3233322e3130342e302f32332d3234203d3e203237383433.roa (raw, json)
Hash identifier: x/327gx3IsCKg01Ups5wvW0eQpVIqMzGHjPigAgaZG0=
Subject key identifier: AA:2C:AB:B2:5C:A2:B1:61:5A:D9:70:C3:B5:9F:F1:40:5A:F1:89:F8
Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial: 0D0F2A0EC3623977534F27F7A1ACF6470E3FBAE1
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130342e302f32332d3234203d3e203237383433.roa
Signing time: Tue 06 Jan 2026 19:03:51 +0000
ROA not before: Tue 06 Jan 2026 18:58:51 +0000
ROA not after: Tue 05 Jan 2027 19:03:51 +0000
asID: 27843
IP address blocks: 45.232.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 12:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0f:2a:0e:c3:62:39:77:53:4f:27:f7:a1:ac:f6:47:0e:3f:ba:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Validity
Not Before: Jan 6 18:58:51 2026 GMT
Not After : Jan 5 19:03:51 2027 GMT
Subject: CN=AA2CABB25CA2B1615AD970C3B59FF1405AF189F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:7b:96:ee:16:45:44:e0:c3:d5:d8:ae:05:
5c:5f:87:71:bf:05:4d:2b:65:df:88:bc:97:37:d0:
89:28:72:94:11:a2:d7:b4:9b:54:7a:f1:98:02:29:
f8:02:7d:3c:9a:73:0f:c0:05:28:61:6f:19:16:57:
b1:f3:3b:9b:04:3d:91:2a:e1:67:0a:c7:5d:4e:77:
e6:41:09:11:2a:8f:93:21:a1:87:70:44:43:60:5f:
b3:5a:4b:6b:40:89:15:2a:b3:1d:b2:35:cf:d1:ac:
88:70:67:9a:ce:e9:b3:a6:32:dc:5a:e0:59:4b:eb:
88:58:69:97:46:13:9e:47:4c:75:65:ac:ee:c1:df:
ae:05:e0:b2:bb:5d:33:fb:3c:be:c0:79:41:3a:7b:
41:b2:41:55:55:f1:04:57:6a:fb:28:e5:c6:65:b2:
17:d1:04:86:84:eb:ed:0e:b3:17:f3:c4:e5:08:81:
66:14:96:2e:eb:f2:f8:1b:45:86:b9:14:9b:3b:56:
01:72:b9:ce:22:b1:e5:3d:28:83:02:74:b6:58:00:
94:87:4a:fc:56:23:55:0b:74:62:58:2c:bb:2e:d3:
cb:d0:d6:3e:37:2a:77:7d:79:12:9e:a7:3f:19:17:
1b:25:b6:ed:bc:e1:71:91:15:94:25:3a:f2:21:b1:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2C:AB:B2:5C:A2:B1:61:5A:D9:70:C3:B5:9F:F1:40:5A:F1:89:F8
X509v3 Authority Key Identifier:
keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130342e302f32332d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.104.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:bd:85:b3:2d:35:99:9f:5e:1c:30:77:60:41:a3:1c:df:3d:
b1:b1:f2:91:bb:9f:c8:dc:be:20:91:5d:e3:19:63:b2:62:dd:
16:76:44:8f:b9:4c:6e:dd:4e:65:6a:71:37:70:5c:ba:13:73:
52:e4:37:23:0c:f8:4b:70:51:38:49:dc:0d:d7:2d:a5:b0:ed:
dd:58:f0:63:f4:3d:2c:a5:39:a4:db:19:1e:de:f1:1d:c0:14:
02:5e:72:93:3d:b7:e6:13:db:04:e9:95:29:1e:ee:4d:2f:a7:
8b:86:53:51:02:07:29:c2:a5:58:4a:1f:1c:97:41:e4:20:d7:
00:d7:fc:8b:52:b4:b2:39:a7:ea:c9:13:9e:1b:eb:1f:e3:24:
e4:01:41:bc:ad:3a:bb:70:13:35:ec:84:73:bd:f6:c6:3a:09:
f4:52:3b:aa:9c:f7:5c:bd:64:75:24:47:84:ba:51:89:b1:22:
ae:5f:0b:a9:b0:e8:fb:3c:fc:d0:b5:e0:07:37:82:a1:0e:9d:
b7:6a:0b:5a:d0:f2:cb:d1:0c:2c:f1:9f:b8:64:4e:19:de:ef:
e5:b0:33:df:48:f2:a0:46:d5:4c:d0:58:c9:84:ca:31:07:47:
87:f6:70:8d:8e:95:c7:f8:64:89:49:01:a6:c2:51:01:3b:fe:
8f:4a:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:56:39 2026 by rpki-client