This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e203133393539.roa
File: 34352e3136372e31322e302f32322d3234203d3e203133393539.roa (raw, json)
Hash identifier: /QG6RP3oNLJDo3kv/Q62q1TEO6VxnNLr/6bjqSqqx6w=
Subject key identifier: 31:15:63:62:5A:9B:D0:C2:FD:33:3C:DC:3B:9F:E4:87:E2:45:FB:62
Certificate issuer: /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial: 042B0BD894268850231ED540E5DB9820AA951365
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e203133393539.roa
Signing time: Tue 06 Jan 2026 19:01:45 +0000
ROA not before: Tue 06 Jan 2026 18:56:45 +0000
ROA not after: Tue 05 Jan 2027 19:01:45 +0000
asID: 13959
IP address blocks: 45.167.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 09:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:2b:0b:d8:94:26:88:50:23:1e:d5:40:e5:db:98:20:aa:95:13:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Validity
Not Before: Jan 6 18:56:45 2026 GMT
Not After : Jan 5 19:01:45 2027 GMT
Subject: CN=311563625A9BD0C2FD333CDC3B9FE487E245FB62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:45:53:e5:7d:3e:a3:ac:80:ab:8b:99:e1:
cf:22:9c:20:00:e2:f0:47:48:8b:63:68:86:53:0d:
4a:2d:ce:62:48:a0:46:ce:21:16:25:06:45:71:a7:
11:54:db:c8:e0:4f:84:dd:ec:43:59:60:97:8b:89:
2a:ec:e2:b0:e3:08:02:e7:6f:68:70:8b:37:27:17:
69:06:d0:fd:5e:36:e3:e3:09:2d:12:79:08:f8:aa:
59:59:d4:48:72:28:84:f1:b7:03:5c:17:08:95:52:
59:4e:f6:04:41:37:4a:f4:af:1d:f5:cf:c8:c4:4f:
0a:ed:80:15:95:9a:b4:34:3a:63:f8:07:52:19:4c:
61:5a:fd:6b:28:42:c8:d0:2f:18:e4:16:d6:74:38:
b1:5b:b2:6b:d2:4b:4d:b8:08:67:ca:ba:37:c7:6e:
6e:91:95:8a:23:31:f3:5d:93:ec:df:0d:06:c3:eb:
13:1b:9f:81:ed:b7:0d:5e:c9:5b:32:eb:e7:ba:58:
44:fd:d6:55:2c:91:07:7a:a4:12:1d:d0:e5:d3:bd:
63:3d:d7:61:85:c1:c6:21:15:87:42:d7:a4:b4:ee:
e5:80:68:a1:ab:fa:de:01:d8:42:08:ec:d5:9d:f6:
ce:cf:d5:ba:91:f4:ef:2c:58:34:de:90:53:28:27:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:15:63:62:5A:9B:D0:C2:FD:33:3C:DC:3B:9F:E4:87:E2:45:FB:62
X509v3 Authority Key Identifier:
keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e203133393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:b3:e8:3d:6d:bd:f4:59:6b:36:09:fa:4f:bb:51:4d:8d:e4:
75:11:61:39:34:e4:58:b9:a1:08:38:93:25:65:2d:99:a3:50:
83:3c:aa:9f:40:d5:08:f1:6c:af:f5:c7:ce:c9:56:16:d4:60:
76:b9:5f:b6:2b:ff:39:e5:ec:47:2c:ea:99:cf:90:ee:00:c5:
37:6b:cc:c8:a0:f0:25:98:fa:8e:b4:48:e9:3d:4d:fa:94:90:
31:79:6a:0b:76:48:22:1a:17:a3:6a:80:0a:a0:9c:99:4b:bc:
32:72:87:c2:ff:b6:5d:68:27:a2:f5:81:fc:a2:c1:4a:74:9f:
5d:0c:f7:74:8b:3b:30:86:32:a4:6a:3c:81:3a:67:3f:a7:d9:
81:c0:9b:e1:a1:52:db:d1:02:d7:7b:62:9d:d3:ca:ea:d5:aa:
3a:4b:b7:33:43:59:b6:a1:5c:2d:ba:83:44:ad:18:e1:e1:4d:
00:49:65:1e:04:4d:d0:4d:45:bc:f1:4e:98:24:7e:cc:18:e1:
1a:ea:46:65:6d:ec:b9:80:1a:3c:7e:d5:7c:37:6d:48:70:6f:
87:0a:9c:ef:5b:3c:cb:6f:4a:f6:f9:3a:0e:3d:5f:ae:c7:7b:
9f:00:e3:e5:4f:5f:9d:c7:c0:3c:af:f7:9a:14:10:d0:5d:20:
f4:57:68:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:38:12 2026 by rpki-client