This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa File: 34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (raw, json) Hash identifier: N2kX7I48vqw1gi8HLUIVxzC7KoIgulldHf5/K/TTwHQ= Subject key identifier: 33:82:F5:2E:05:72:78:AD:AE:89:5E:4E:2E:C2:F7:5A:52:88:4E:D7 Certificate issuer: /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Certificate serial: 3DD235910A1FD287256A68E6CB527434F391BD33 Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa Signing time: Tue 06 Jan 2026 20:49:58 +0000 ROA not before: Tue 06 Jan 2026 20:44:58 +0000 ROA not after: Tue 05 Jan 2027 20:49:58 +0000 asID: 269886 IP address blocks: 45.191.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 06:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d2:35:91:0a:1f:d2:87:25:6a:68:e6:cb:52:74:34:f3:91:bd:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43 Validity Not Before: Jan 6 20:44:58 2026 GMT Not After : Jan 5 20:49:58 2027 GMT Subject: CN=3382F52E057278ADAE895E4E2EC2F75A52884ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:34:f9:15:e5:2e:73:f5:ad:fd:8b:47:74: 06:20:c5:f7:b1:41:c7:e7:b8:75:e0:5b:22:9f:b0: 37:2f:8f:d4:d5:2a:8a:24:42:a2:ba:49:cd:4c:3a: 96:63:4a:85:c8:6d:ab:64:c7:86:24:b5:0c:ce:be: 64:ef:ce:c5:71:6a:99:aa:ed:32:fa:07:dd:1e:8e: 68:a4:c4:5e:fb:ed:03:91:3f:25:b4:8f:82:7e:56: f1:7f:9d:da:c9:2b:84:9d:3e:c7:13:55:4e:8c:61: 81:94:00:c0:c3:00:0f:a4:40:17:26:eb:57:e1:64: ae:37:49:bf:2f:b3:5f:ac:7b:5b:69:63:eb:a6:f8: 14:8d:2c:df:de:f7:1e:fc:5c:45:9f:17:46:dd:31: aa:49:4e:21:3b:0f:34:cf:8a:7d:26:f3:0b:55:7d: dd:fa:41:05:64:4b:84:4a:82:a3:a5:ad:c4:ac:32: b5:8c:0b:44:b1:29:ef:96:1d:ac:2a:c8:6d:7c:be: c6:5b:66:02:71:8a:2b:08:b9:ed:5f:f6:1b:1b:b5: 8e:9f:9f:9c:ad:ac:39:74:9e:45:47:60:88:a2:a8: 1f:dc:6b:90:b7:59:aa:a5:38:88:48:e7:3c:46:48: 3b:72:79:e3:92:a3:79:19:02:da:5c:be:6c:d4:41: 6d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:82:F5:2E:05:72:78:AD:AE:89:5E:4E:2E:C2:F7:5A:52:88:4E:D7 X509v3 Authority Key Identifier: keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.108.0/22 Signature Algorithm: sha256WithRSAEncryption 68:f6:1c:4a:a0:8e:38:72:81:ff:85:f4:b2:61:a4:2f:29:c2: ac:09:45:e3:41:d6:eb:45:3a:54:6e:b9:03:9e:4f:92:8e:f1: bc:15:cb:d4:a9:61:ba:9d:d0:25:91:9c:88:28:46:8f:39:4d: 9b:05:e3:ef:2e:9c:6a:4c:b4:40:57:49:3b:e7:6d:d9:c9:d8: 49:be:18:49:2f:fd:19:59:ae:a8:1a:65:da:f0:49:38:c0:c8: 0a:ca:69:66:46:46:d5:c5:4b:f5:04:4f:c4:66:45:2e:56:f1: 1c:34:f9:55:71:7d:c3:c7:5c:eb:86:3e:ae:e6:b9:d0:5f:75: 39:dc:66:76:b0:03:35:6b:c3:9e:4c:33:a6:38:d9:86:dc:07: c0:8f:ad:43:6a:10:26:3e:d6:f0:11:a5:68:16:fb:6e:e4:1c: 9c:fe:07:d2:61:f0:ca:d7:4e:ef:55:c8:1d:ed:40:b8:37:00: 4f:c4:55:cf:15:e0:8c:36:44:18:02:ed:08:6a:12:bd:aa:e9: 99:06:1d:1a:77:b2:a2:79:a3:d9:82:d4:78:2b:35:a0:8b:8c: 80:53:24:e1:d4:c0:c5:91:6a:1c:c8:a7:75:a2:89:cd:b5:61: c2:37:7c:45:18:23:1e:5b:c9:18:04:6c:e6:cf:c9:a5:7d:b7: 82:43:f7:ef -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUPdI1kQof0oclamjmy1J0NPORvTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3 NDEzMkE0MzAeFw0yNjAxMDYyMDQ0NThaFw0yNzAxMDUyMDQ5NThaMDMxMTAvBgNV BAMTKDMzODJGNTJFMDU3Mjc4QURBRTg5NUU0RTJFQzJGNzVBNTI4ODRFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4TT5FeUuc/Wt/YtHdAYgxfex QcfnuHXgWyKfsDcvj9TVKookQqK6Sc1MOpZjSoXIbatkx4YktQzOvmTvzsVxapmq 7TL6B90ejmikxF777QORPyW0j4J+VvF/ndrJK4SdPscTVU6MYYGUAMDDAA+kQBcm 61fhZK43Sb8vs1+se1tpY+um+BSNLN/e9x78XEWfF0bdMapJTiE7DzTPin0m8wtV fd36QQVkS4RKgqOlrcSsMrWMC0SxKe+WHawqyG18vsZbZgJxiisIue1f9hsbtY6f n5ytrDl0nkVHYIiiqB/ca5C3WaqlOIhI5zxGSDtyeeOSo3kZAtpcvmzUQW2VAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUM4L1LgVyeK2uiV5OLsL3WlKITtcwHwYDVR0j BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3 OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wLzM0MzUyZTMxMzkzMTJlMzEzMDM4MmUz MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5MzgzODM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLb9s MA0GCSqGSIb3DQEBCwUAA4IBAQBo9hxKoI44coH/hfSyYaQvKcKsCUXjQdbrRTpU brkDnk+SjvG8FcvUqWG6ndAlkZyIKEaPOU2bBePvLpxqTLRAV0k7523ZydhJvhhJ L/0ZWa6oGmXa8Ek4wMgKymlmRkbVxUv1BE/EZkUuVvEcNPlVcX3Dx1zrhj6u5rnQ X3U53GZ2sAM1a8OeTDOmONmG3AfAj61DahAmPtbwEaVoFvtu5Byc/gfSYfDK107v Vcgd7UC4NwBPxFXPFeCMNkQYAu0IahK9qumZBh0ad7KieaPZgtR4KzWgi4yAUyTh 1MDFkWocyKd1oonNtWHCN3xFGCMeW8kYBGzmz8mlfbeCQ/fv -----END CERTIFICATE-----Generated at Tue Jan 13 05:34:32 2026 by rpki-client