This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32342d3234203d3e20323636383434.roa
File: 34352e3233382e3135322e302f32342d3234203d3e20323636383434.roa (raw, json)
Hash identifier: sNDM7nmijNt9PQRMaMwdX8kSLdRZaOAMoNQp4tdfOyw=
Subject key identifier: C8:11:C6:13:A4:99:2B:E4:95:0A:F9:6C:3F:9A:ED:4C:1C:E4:CB:72
Certificate issuer: /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial: 3564A901FFBA3FCA70301498481A7B3CDC3A5F6F
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32342d3234203d3e20323636383434.roa
Signing time: Tue 06 Jan 2026 19:44:13 +0000
ROA not before: Tue 06 Jan 2026 19:39:13 +0000
ROA not after: Tue 05 Jan 2027 19:44:13 +0000
asID: 266844
IP address blocks: 45.238.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 14:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:64:a9:01:ff:ba:3f:ca:70:30:14:98:48:1a:7b:3c:dc:3a:5f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Validity
Not Before: Jan 6 19:39:13 2026 GMT
Not After : Jan 5 19:44:13 2027 GMT
Subject: CN=C811C613A4992BE4950AF96C3F9AED4C1CE4CB72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:aa:1a:7b:b5:1c:fe:c0:91:0d:9d:f2:d7:ac:
d2:da:a1:ac:17:8e:ad:9a:46:67:d0:b7:55:b9:0f:
6d:8f:bc:78:f0:8f:57:08:7c:56:72:6a:2f:a5:c6:
0a:26:83:76:6c:39:70:6b:e6:77:49:8b:de:63:cd:
7e:8a:5f:b9:12:26:b5:fa:8d:97:ee:d2:0d:88:40:
8b:5b:8e:f8:52:66:2b:45:e0:67:8c:46:fa:12:5d:
7e:78:6a:db:66:b0:8b:4e:df:3b:62:76:32:cb:02:
fe:cb:cb:a8:db:01:a5:41:b3:7e:d1:1e:5a:b1:77:
36:06:df:d7:1d:1c:36:b1:c4:40:98:d3:2a:54:5c:
56:b7:87:bf:49:90:58:c3:3e:e0:31:54:48:38:90:
8d:60:e6:fb:7b:19:98:7f:ab:89:89:07:e0:81:de:
e0:ff:4c:9a:0f:49:c3:39:f2:50:e9:28:d9:61:76:
6c:4a:e4:bf:ad:c3:33:be:52:98:52:19:c0:ed:0f:
61:44:cc:cb:0a:6d:44:48:a8:6f:cb:50:cf:0f:e7:
ed:03:e8:5d:a2:66:c5:4a:86:a7:9b:b9:8c:9d:e1:
9d:08:bf:0e:d5:9d:cd:46:69:6f:0b:7d:00:36:96:
eb:de:49:d6:c3:bd:4b:fb:85:37:8d:8a:43:9a:64:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:11:C6:13:A4:99:2B:E4:95:0A:F9:6C:3F:9A:ED:4C:1C:E4:CB:72
X509v3 Authority Key Identifier:
keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32342d3234203d3e20323636383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.152.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4f:cc:c5:30:ae:a1:3c:d2:71:d3:89:f6:45:d8:0f:00:a3:
b3:71:aa:e7:c2:0e:2e:43:60:52:b9:d9:25:1c:96:39:59:f8:
60:69:ee:07:2c:49:c4:fe:0d:e7:c6:da:50:4e:57:49:33:71:
21:ae:05:af:32:31:1e:cf:b7:9f:21:e7:88:6c:40:8b:3b:da:
32:ba:c5:9c:20:78:63:7a:ec:69:e7:31:c7:dd:23:09:ff:2d:
7a:23:b4:ee:69:34:6e:79:d2:9d:70:11:c0:7f:b2:cd:36:87:
a6:79:fa:02:21:5f:b6:e8:8a:ac:c9:88:38:a4:2a:ab:0a:58:
f2:e2:3c:b9:6c:00:52:df:96:76:26:aa:bc:93:ea:59:68:a3:
31:21:68:8b:3b:3c:49:5f:a5:7f:5a:5d:8d:cd:3a:d2:ff:a5:
48:3c:0f:7f:4c:9b:f2:fb:dc:e9:1b:50:ae:ac:d7:e3:a1:89:
11:d6:84:ed:32:cc:d3:4f:b3:8a:f4:be:3b:e8:1d:d4:f7:ff:
ed:be:69:fd:96:95:62:ba:ff:a5:89:ac:e2:22:7b:4d:bb:1b:
0f:bb:1c:61:3f:94:b9:63:16:c6:40:fe:2e:f8:b9:13:48:b3:
44:07:99:8c:f1:23:c3:63:78:0d:c5:88:78:30:55:f1:8b:41:
50:2e:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:12:23 2026 by rpki-client