This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/34352e36382e32312e302f32342d3234203d3e20323732313336.roa
File: 34352e36382e32312e302f32342d3234203d3e20323732313336.roa (raw, json)
Hash identifier: 4NAgqlhpc+cE7cstJJ5FHy6og7Zz0Ct8RUHT2tTHsuA=
Subject key identifier: 89:65:49:0F:18:CD:A9:81:A6:51:91:C0:0B:DB:11:C7:AC:EC:92:65
Certificate issuer: /CN=03CA54765F0951D369734386CF982D71F5CB5403
Certificate serial: 66F625FDF79F0A60DBE497D2F721337D6057D14F
Authority key identifier: 03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/34352e36382e32312e302f32342d3234203d3e20323732313336.roa
Signing time: Tue 06 Jan 2026 19:39:31 +0000
ROA not before: Tue 06 Jan 2026 19:34:31 +0000
ROA not after: Tue 05 Jan 2027 19:39:31 +0000
asID: 272136
IP address blocks: 45.68.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f6:25:fd:f7:9f:0a:60:db:e4:97:d2:f7:21:33:7d:60:57:d1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03CA54765F0951D369734386CF982D71F5CB5403
Validity
Not Before: Jan 6 19:34:31 2026 GMT
Not After : Jan 5 19:39:31 2027 GMT
Subject: CN=8965490F18CDA981A65191C00BDB11C7ACEC9265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:38:30:17:93:8d:93:f0:fe:d2:20:7f:a3:
61:3c:58:c2:51:53:f4:48:fd:63:e8:0a:dd:48:51:
83:e5:1b:31:ee:fb:a2:98:08:27:1c:13:4a:3e:be:
2d:39:e1:55:71:73:b0:c6:17:1f:0e:0d:d1:2c:2d:
9f:4b:d8:87:19:66:21:ce:00:58:75:af:54:c9:73:
8a:5e:a6:62:05:aa:6c:2f:02:83:1b:2a:a0:cb:3d:
e2:75:40:95:cc:10:4a:44:05:58:96:a1:33:bf:b6:
91:27:16:09:47:07:8a:a5:3a:9e:e9:f8:24:d4:5a:
09:72:8a:74:64:f1:6b:ec:05:f0:68:0f:02:7d:01:
eb:7e:c9:74:bc:45:aa:2b:28:65:1c:46:76:2a:9d:
cc:37:4c:10:b9:a3:76:00:3a:c6:f6:20:f7:51:6f:
09:dd:49:ae:4a:11:90:19:28:26:fc:67:9d:dd:b7:
d1:ad:d0:a8:f9:16:c3:e6:84:89:ec:3c:94:a1:14:
63:33:ff:ce:fe:9a:f3:91:88:f1:b6:00:6d:91:1d:
af:15:c2:3c:79:54:50:84:72:3c:3f:a7:8b:2d:c6:
6d:5c:53:47:2f:14:15:61:eb:7b:f2:76:c8:18:55:
c9:9c:63:a1:28:a8:23:70:87:4f:c5:14:f7:b8:f9:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:65:49:0F:18:CD:A9:81:A6:51:91:C0:0B:DB:11:C7:AC:EC:92:65
X509v3 Authority Key Identifier:
keyid:03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/34352e36382e32312e302f32342d3234203d3e20323732313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.21.0/24
Signature Algorithm: sha256WithRSAEncryption
20:44:c3:91:d8:bb:fc:16:2c:1f:db:0b:ff:a0:8e:19:44:7e:
0b:bc:e3:e2:4d:6d:ab:4e:5f:8f:27:b5:8b:0a:fd:b1:0e:97:
71:9f:59:f5:a1:9d:ec:d0:8d:05:cd:55:bb:6e:21:f8:bd:9b:
f1:38:16:c9:0b:12:89:cb:bf:58:3d:6a:05:29:6f:6e:87:b7:
48:2e:4b:8d:6c:1a:10:d9:c1:39:bf:04:c0:08:71:4c:3f:26:
03:ae:b8:1e:45:6d:8c:f1:89:c4:7f:d1:05:35:a6:a4:a4:4e:
f2:24:b2:84:6f:e2:80:4f:9a:6f:70:43:64:de:42:ad:3a:84:
f3:1a:23:ae:6c:80:7e:80:1b:6b:a9:bc:b7:6c:5f:35:5c:ca:
16:2f:61:96:93:6a:af:c3:fd:a1:a2:ed:42:6d:95:56:e1:10:
f1:0c:57:ea:bc:42:69:c2:18:59:50:c6:31:9b:67:e5:8d:fb:
dd:01:2c:42:5a:82:60:02:cc:53:52:29:0b:8a:e7:5b:91:84:
32:4e:32:50:f0:79:73:aa:27:78:e1:77:38:3a:d8:c3:bb:99:
c7:1a:fe:b3:4d:62:43:f4:68:1d:43:f0:81:2a:fe:fe:94:00:
20:d4:4f:dd:b4:69:2a:1e:ac:2f:82:2a:5d:aa:93:4d:51:e7:
91:e3:6b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:05:57 2026 by rpki-client