This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32322d3232203d3e20323636383434.roa
File: 34352e3233382e3135322e302f32322d3232203d3e20323636383434.roa (raw, json)
Hash identifier: s6sm0LdTHFZtQ2/Q2ATaTGR0N5caQbt6/do++x0sBtI=
Subject key identifier: 21:81:4A:3C:19:43:F2:08:F7:10:C0:08:2B:25:39:ED:DD:29:BA:5B
Certificate issuer: /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial: 43CEECE7F6E77A5F4923901BA65A3A3DEA894278
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32322d3232203d3e20323636383434.roa
Signing time: Tue 06 Jan 2026 19:44:13 +0000
ROA not before: Tue 06 Jan 2026 19:39:13 +0000
ROA not after: Tue 05 Jan 2027 19:44:13 +0000
asID: 266844
IP address blocks: 45.238.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 14:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ce:ec:e7:f6:e7:7a:5f:49:23:90:1b:a6:5a:3a:3d:ea:89:42:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Validity
Not Before: Jan 6 19:39:13 2026 GMT
Not After : Jan 5 19:44:13 2027 GMT
Subject: CN=21814A3C1943F208F710C0082B2539EDDD29BA5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:97:71:c8:eb:72:fe:2f:5e:81:88:af:fc:
87:50:44:b3:0e:49:0e:94:43:dd:2d:c1:51:2d:d6:
68:79:b9:f5:2b:22:65:30:a0:e4:ba:41:0a:9e:eb:
d7:2c:70:f0:22:ae:78:bf:34:95:0e:07:db:5e:0a:
c4:2f:2e:0f:aa:fd:2f:97:ba:df:7c:74:9a:0b:8f:
dc:83:c8:09:c0:b2:6f:e1:4a:78:8d:05:56:76:81:
08:57:2a:01:2c:8c:6d:f6:ab:a3:57:86:e0:23:b3:
e9:a6:1c:6d:65:16:dd:d7:15:8d:39:60:3a:d5:36:
7f:b0:18:1e:51:55:d4:55:9b:d7:84:46:da:6d:82:
5c:e2:df:c9:b5:d3:22:84:43:f6:eb:23:4f:bd:f2:
2c:3b:ac:cd:78:80:b3:24:cc:e1:1e:c2:eb:9f:a2:
db:8e:43:1e:09:ad:7c:80:f5:a1:ea:25:9d:26:b1:
c7:17:ba:ec:e7:63:93:d5:f3:71:4d:0d:07:38:89:
45:7d:02:5f:72:93:49:90:2b:de:4a:37:56:fb:1f:
00:e0:30:86:c4:1f:79:e3:bf:74:9b:ca:69:a5:d1:
f8:c7:1b:9f:ec:70:ac:94:61:61:05:e2:1a:a5:95:
12:a2:81:00:ab:9d:00:f7:99:8e:f0:02:65:12:11:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:81:4A:3C:19:43:F2:08:F7:10:C0:08:2B:25:39:ED:DD:29:BA:5B
X509v3 Authority Key Identifier:
keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32322d3232203d3e20323636383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:b9:b9:1b:9e:94:bd:64:7d:de:c4:c1:df:b9:60:81:9a:53:
6a:b4:90:63:ea:70:30:66:1a:62:a5:2c:bd:e0:2f:e1:7a:85:
d1:ef:ea:97:95:86:db:b1:33:2c:16:13:3a:d1:19:15:7c:43:
91:29:ba:3a:7c:c7:ab:a1:4c:fd:24:94:c9:7d:39:52:07:45:
a7:c3:a1:4a:d3:80:06:13:da:f8:0b:f4:f4:24:de:ec:23:9d:
1c:00:11:6f:f8:83:02:c3:39:53:62:f0:53:ba:81:15:6b:0c:
f0:89:13:16:ae:9a:0c:e0:87:c9:08:99:69:da:96:f6:bc:ea:
28:0e:a9:99:f0:b7:49:e2:c5:11:55:ab:d4:52:05:69:e2:e3:
43:ae:1a:25:aa:c1:b4:7f:1d:5b:ff:0b:16:ac:2b:a4:7a:c8:
62:a2:93:9e:42:fd:39:83:32:04:40:2d:bf:4f:3f:f6:1d:8f:
7c:9d:1c:9d:25:35:ac:bf:97:d8:2c:48:bf:fa:0a:fc:3d:99:
29:2d:40:7f:06:7d:61:2e:cf:56:34:a8:d9:7c:75:b0:68:15:
ee:c7:50:54:d7:50:b7:61:be:ef:d6:9b:9d:e6:07:ec:48:46:
21:3c:88:0c:c0:46:35:9f:b3:fb:5b:71:3d:9a:27:bd:b4:df:
9a:6c:05:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:34:30 2026 by rpki-client