This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e203631353033.roa
File: 34352e3233392e3132302e302f32322d3234203d3e203631353033.roa (raw, json)
Hash identifier: krhTfPxO4tlWR5afi24GbDYNnpLr3Zkt/7ve9225AYs=
Subject key identifier: 67:E9:C7:C6:5A:EB:4B:15:24:DB:DA:63:8D:D9:CC:AB:95:8D:26:BA
Certificate issuer: /CN=5F0CDDD5EE7E7A145A967535797D838518D4F4D7
Certificate serial: 02BA0F7710B35987240184A000E0E74EFBA4279C
Authority key identifier: 5F:0C:DD:D5:EE:7E:7A:14:5A:96:75:35:79:7D:83:85:18:D4:F4:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e203631353033.roa
Signing time: Tue 06 Jan 2026 19:27:14 +0000
ROA not before: Tue 06 Jan 2026 19:22:14 +0000
ROA not after: Tue 05 Jan 2027 19:27:14 +0000
asID: 61503
IP address blocks: 45.239.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.crl
rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 02:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ba:0f:77:10:b3:59:87:24:01:84:a0:00:e0:e7:4e:fb:a4:27:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F0CDDD5EE7E7A145A967535797D838518D4F4D7
Validity
Not Before: Jan 6 19:22:14 2026 GMT
Not After : Jan 5 19:27:14 2027 GMT
Subject: CN=67E9C7C65AEB4B1524DBDA638DD9CCAB958D26BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:28:83:4c:d4:aa:32:04:ab:8f:63:8a:85:
ce:b3:49:2a:82:0e:ca:f5:a8:a7:da:d0:1d:5e:cc:
c6:be:62:16:9a:b7:6a:d2:5f:11:e7:10:05:90:27:
e2:ff:5d:0a:e8:d7:f6:f8:b8:38:14:6b:40:97:9e:
76:47:2f:29:94:2c:56:7a:af:fa:c5:71:15:de:02:
d7:54:c4:cd:29:69:15:55:86:cc:62:95:9d:a0:04:
77:0c:28:3f:88:40:71:60:dd:b5:6d:7f:60:d1:23:
9d:a4:b3:f4:99:1e:0a:6e:65:66:c6:73:20:1d:e7:
ce:af:bb:98:53:1e:0c:a7:05:fa:47:14:5b:d4:99:
00:ea:05:30:33:80:e3:d2:01:3a:bd:8f:28:0c:29:
94:c4:f7:94:86:50:9d:33:2a:1f:a4:1f:b8:dc:e3:
6c:aa:d8:7f:4e:d0:32:15:b1:57:3e:da:b3:57:38:
5a:04:b2:58:0d:11:dc:7d:63:7f:df:88:b3:54:b6:
03:c6:4e:b0:3f:99:e1:ca:32:34:fb:cf:94:ae:28:
d6:e6:ae:1e:c9:8d:d8:c0:09:7e:ef:3f:3c:8f:ab:
dd:17:b0:bd:5b:73:03:e5:d5:53:7c:76:ba:b1:d4:
7f:95:2a:7e:a5:79:61:8f:2f:21:bd:fc:b8:af:e3:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E9:C7:C6:5A:EB:4B:15:24:DB:DA:63:8D:D9:CC:AB:95:8D:26:BA
X509v3 Authority Key Identifier:
keyid:5F:0C:DD:D5:EE:7E:7A:14:5A:96:75:35:79:7D:83:85:18:D4:F4:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e203631353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
78:81:45:a5:81:bd:ee:b6:d1:f2:70:72:7b:d5:99:38:6f:28:
90:bd:67:b6:54:bc:45:19:fc:22:97:52:bc:e5:30:55:0e:85:
19:4d:d8:a0:e2:27:03:67:0b:a0:e2:25:55:b5:3e:e1:14:a6:
77:7d:a2:0c:4c:b0:37:9b:15:d0:46:71:88:fd:64:11:7a:03:
e8:74:4a:cf:ff:50:aa:1a:f1:4a:26:e6:cf:05:b0:99:5a:7c:
20:f3:f2:81:e9:d8:b0:0d:4c:26:a1:67:0a:90:a8:af:c4:62:
bc:57:36:84:07:a5:38:45:35:99:26:fc:db:c4:7b:eb:07:de:
9b:d9:e7:61:7e:97:75:94:a2:7f:39:e1:62:e7:bf:fa:13:d8:
78:98:82:a2:57:ba:53:31:34:24:65:2d:28:05:0d:fa:d0:c3:
bf:d4:f4:5e:7c:00:00:3d:75:b1:99:2e:a0:af:89:3a:e1:91:
1b:50:21:2e:28:6f:2b:75:3e:f0:38:e3:e0:3c:d0:b8:0c:39:
26:f3:23:ab:60:12:31:4f:ba:a2:29:69:5f:32:b1:b7:a3:e6:
d4:89:69:a5:ed:cf:08:d7:31:2f:95:77:68:2a:84:56:97:97:
15:a0:f9:70:3c:21:72:4d:d5:e2:a4:85:57:e6:54:b9:b2:71:
38:98:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:38:59 2026 by rpki-client