This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa
File: 34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa (raw, json)
Hash identifier: Dz0qF4khR9KA75nmfSzk8ooGCypTiUwIQUxruxayxoI=
Subject key identifier: 49:CE:AE:79:2A:5F:CC:AC:44:38:BB:85:10:13:58:B4:57:89:B6:9F
Certificate issuer: /CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
Certificate serial: 143B20BB751367F2D195D5FD143D70991D64D541
Authority key identifier: DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa
Signing time: Tue 06 Jan 2026 19:18:51 +0000
ROA not before: Tue 06 Jan 2026 19:13:51 +0000
ROA not after: Tue 05 Jan 2027 19:18:51 +0000
asID: 266901
IP address blocks: 45.161.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl
rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Jan 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3b:20:bb:75:13:67:f2:d1:95:d5:fd:14:3d:70:99:1d:64:d5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
Validity
Not Before: Jan 6 19:13:51 2026 GMT
Not After : Jan 5 19:18:51 2027 GMT
Subject: CN=49CEAE792A5FCCAC4438BB85101358B45789B69F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:d3:3d:70:4a:99:ba:20:c0:5c:1c:7d:6d:
d4:33:55:df:f3:6a:41:48:d2:9d:c2:2a:a1:3e:9e:
9a:a2:7b:00:17:e5:08:3a:93:1a:7e:28:12:da:6a:
5e:29:91:bb:55:ff:0e:a4:34:74:bd:df:fe:97:b4:
0a:9a:41:11:06:42:a2:be:eb:fb:b0:76:81:b6:86:
33:7a:27:4d:b3:c9:ab:66:12:5e:e5:df:6b:56:dc:
7c:5a:94:06:e2:cb:b8:a2:ba:57:57:81:45:97:98:
c3:26:9f:f2:fd:d6:03:a4:d4:fd:bc:46:84:c9:57:
ac:e4:d6:2c:42:b6:09:67:e6:98:ab:48:f5:7e:2f:
6d:3c:49:48:08:3d:21:67:2e:e2:5b:fc:30:78:7c:
04:dc:10:00:c6:0c:75:52:bf:e5:de:30:e2:5e:3f:
79:e5:f1:03:72:9e:29:f1:82:9e:03:6f:93:0e:e8:
a9:98:61:54:f0:8b:0f:30:9b:5f:a4:48:1a:dd:1e:
b3:c8:c0:ad:67:e7:d0:2a:e9:86:4c:9a:53:96:68:
36:bf:a9:46:08:4d:b8:65:0c:df:05:de:53:39:ac:
62:ba:e6:22:a7:ea:f1:05:81:1c:8f:86:e8:52:ab:
97:38:2d:97:3a:65:f0:62:68:68:0c:0c:0d:2b:f7:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:AE:79:2A:5F:CC:AC:44:38:BB:85:10:13:58:B4:57:89:B6:9F
X509v3 Authority Key Identifier:
keyid:DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:25:68:bf:60:73:65:f1:6b:62:20:de:42:aa:8a:a7:7e:e1:
3e:fb:5b:aa:ee:88:10:dc:d5:2e:70:07:21:16:86:11:41:da:
2b:2a:45:fe:13:e3:c4:9a:2d:b1:e2:0f:1b:85:dc:ae:5e:6d:
f0:ce:7d:48:47:35:3c:1d:40:fa:70:ef:d1:10:03:cc:0b:9d:
e1:28:ff:51:68:e1:95:f4:11:9f:97:aa:8d:e1:5f:94:47:5c:
01:af:e1:cf:27:49:30:92:6b:1b:93:a8:2b:bf:2a:c2:8a:42:
a9:05:79:4c:c9:2c:ac:b5:f0:b4:69:1b:56:40:69:e2:54:7e:
88:e3:e9:79:1f:93:3c:bb:e7:46:41:9a:e8:45:18:73:2a:70:
a5:55:f5:57:2e:84:df:c6:6a:34:94:ef:6d:32:f0:e9:2c:d3:
0c:ee:ed:2a:26:d4:1d:3c:a3:4c:61:12:41:2f:68:1a:fd:48:
e0:0d:3d:e3:9b:e1:f6:ae:48:80:90:81:86:04:c8:43:60:80:
17:40:3b:12:01:c2:84:3f:e1:12:47:c0:b1:40:27:c5:98:f4:
ef:70:f9:fd:8e:22:0c:6d:05:2b:88:c4:70:3a:ee:14:8a:dc:
17:70:ba:48:31:c9:e7:5f:7e:ca:cf:48:52:a8:90:0c:6b:f3:
13:c0:b0:06
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFDsgu3UTZ/LRldX9FD1wmR1k1UEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI1QTM4RTA3NUQ1MzBFQ0I1MTZDMDQwNzFENTRBNkIx
REQ3OENGQzAeFw0yNjAxMDYxOTEzNTFaFw0yNzAxMDUxOTE4NTFaMDMxMTAvBgNV
BAMTKDQ5Q0VBRTc5MkE1RkNDQUM0NDM4QkI4NTEwMTM1OEI0NTc4OUI2OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQyNM9cEqZuiDAXBx9bdQzVd/z
akFI0p3CKqE+npqiewAX5Qg6kxp+KBLaal4pkbtV/w6kNHS93/6XtAqaQREGQqK+
6/uwdoG2hjN6J02zyatmEl7l32tW3HxalAbiy7iiuldXgUWXmMMmn/L91gOk1P28
RoTJV6zk1ixCtgln5pirSPV+L208SUgIPSFnLuJb/DB4fATcEADGDHVSv+XeMOJe
P3nl8QNyninxgp4Db5MO6KmYYVTwiw8wm1+kSBrdHrPIwK1n59Aq6YZMmlOWaDa/
qUYITbhlDN8F3lM5rGK65iKn6vEFgRyPhuhSq5c4LZc6ZfBiaGgMDA0r9xivAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSc6ueSpfzKxEOLuFEBNYtFeJtp8wHwYDVR0j
BBgwFoAU21o44HXVMOy1FsBAcdVKax3XjPwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTgzNDM4NzMyMjVERTVFNDczNjA0NzEzRjAzMDdFNDEy
MEFDRTFFOUNCNTFDODVEMTgzRTJBQjRFOEY4MEI5LzAvREI1QTM4RTA3NUQ1MzBF
Q0I1MTZDMDQwNzFENTRBNkIxREQ3OENGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjVBMzhFMDc1RDUzMEVDQjUx
NkMwNDA3MUQ1NEE2QjFERDc4Q0ZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk4MzQzODczMjI1REU1RTQ3MzYwNDcxM0YwMzA3RTQxMjBBQ0UxRTlD
QjUxQzg1RDE4M0UyQUI0RThGODBCOS8wLzM0MzUyZTMxMzYzMTJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2MzkzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLaFs
MA0GCSqGSIb3DQEBCwUAA4IBAQAcJWi/YHNl8WtiIN5CqoqnfuE++1uq7ogQ3NUu
cAchFoYRQdorKkX+E+PEmi2x4g8bhdyuXm3wzn1IRzU8HUD6cO/REAPMC53hKP9R
aOGV9BGfl6qN4V+UR1wBr+HPJ0kwkmsbk6grvyrCikKpBXlMySystfC0aRtWQGni
VH6I4+l5H5M8u+dGQZroRRhzKnClVfVXLoTfxmo0lO9tMvDpLNMM7u0qJtQdPKNM
YRJBL2ga/UjgDT3jm+H2rkiAkIGGBMhDYIAXQDsSAcKEP+ESR8CxQCfFmPTvcPn9
jiIMbQUriMRwOu4UitwXcLpIMcnnX37Kz0hSqJAMa/MTwLAG
-----END CERTIFICATE-----
Generated at Sat Jan 10 21:09:30 2026 by rpki-client