This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
File: 34352e3138332e34322e302f32332d3233203d3e2033353439.roa (raw, json)
Hash identifier: 8dvtU2I4ucFVfoPob63b7GVSLG8LbSDsUaxysilrMLc=
Subject key identifier: 92:7B:D2:B7:4F:FE:11:1D:4E:8B:9B:54:03:BD:BE:4E:F5:A4:9D:26
Certificate issuer: /CN=8210175404341E39B37F824D85585065838DF0B5
Certificate serial: 7616A0BEE7E13CFAC8055A3F9CDC46D4007B8B1F
Authority key identifier: 82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
Signing time: Tue 06 Jan 2026 20:51:16 +0000
ROA not before: Tue 06 Jan 2026 20:46:16 +0000
ROA not after: Tue 05 Jan 2027 20:51:16 +0000
asID: 3549
IP address blocks: 45.183.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl
rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Jan 2026 01:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:16:a0:be:e7:e1:3c:fa:c8:05:5a:3f:9c:dc:46:d4:00:7b:8b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8210175404341E39B37F824D85585065838DF0B5
Validity
Not Before: Jan 6 20:46:16 2026 GMT
Not After : Jan 5 20:51:16 2027 GMT
Subject: CN=927BD2B74FFE111D4E8B9B5403BDBE4EF5A49D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:b5:a5:1a:d1:fe:67:c8:73:bd:7a:05:8d:
42:d9:cf:07:23:02:d8:c3:6e:5b:63:6a:31:c2:08:
a3:3e:e2:e5:d5:fa:18:3a:0a:b3:13:d1:4a:b2:e6:
52:61:eb:83:03:c5:f2:16:2c:43:72:26:b8:c1:51:
31:fb:bd:15:aa:1a:6e:fd:fa:cc:b9:c9:c0:73:9f:
af:08:04:5d:7c:9c:9b:b6:c3:fc:55:69:53:16:02:
54:79:6b:e8:e4:27:c8:71:31:35:24:dc:8e:1c:eb:
0c:8b:75:d3:3e:9d:d0:2c:a4:6b:b7:29:0a:b5:95:
e8:c3:5a:50:21:19:e6:41:19:76:05:6c:42:52:e5:
98:58:5b:55:0c:97:5b:ae:d5:12:3e:2f:77:70:a0:
3b:9c:11:7f:f0:c4:76:92:91:82:40:ca:81:99:d6:
1d:77:5d:a2:0a:f7:86:a1:37:86:9c:40:11:43:bc:
3c:a5:37:0d:d9:1b:50:c6:dd:a6:15:63:bf:62:09:
a3:74:bc:ea:17:ef:d8:bc:f7:22:39:b1:1f:d4:48:
46:86:d2:ff:da:ce:9c:a3:b0:0c:a5:34:d3:45:d6:
01:91:9e:85:d0:81:7e:9f:c6:37:5a:63:6c:d5:33:
9f:51:e2:18:c1:23:1b:95:76:f5:a0:86:7c:ae:16:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7B:D2:B7:4F:FE:11:1D:4E:8B:9B:54:03:BD:BE:4E:F5:A4:9D:26
X509v3 Authority Key Identifier:
keyid:82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.183.42.0/23
Signature Algorithm: sha256WithRSAEncryption
71:ea:bb:ce:84:2e:88:df:0b:83:e4:ac:7a:61:5e:3d:1f:fe:
66:59:f3:da:66:7c:0b:97:f5:34:1e:3f:e4:02:ed:d5:04:2e:
50:95:d3:35:21:7b:af:23:b9:a4:b1:88:fa:d0:ca:10:53:c6:
73:ef:b8:76:48:f3:52:66:ce:29:71:59:39:74:a0:fb:81:29:
d5:5e:b8:29:bc:6a:bf:a3:04:1b:41:8b:fd:9e:b5:7c:f3:4c:
fd:ab:93:06:0d:d8:e0:bb:fd:87:c3:c9:ba:77:5d:86:83:7c:
da:14:2e:ae:7e:bb:ff:a7:41:34:1a:5a:23:97:dd:98:49:b1:
fd:eb:3e:ca:8e:0f:00:93:62:35:48:c7:85:b3:95:7c:17:2c:
81:57:92:62:5d:8e:40:99:12:2d:55:2a:5d:d8:cf:40:c5:f8:
91:91:e2:4a:55:44:e7:20:fa:76:c8:20:a0:51:a3:26:3b:60:
44:a6:16:48:a2:9d:c8:42:d4:4f:28:5c:e1:8b:36:99:65:e4:
87:e5:10:9e:50:51:96:70:18:4e:36:96:0e:f1:c9:4d:b0:f4:
67:4d:25:14:56:32:0e:e5:95:a2:8f:36:33:c8:92:14:db:34:
a8:ce:bd:31:91:4b:0d:3f:30:4c:d2:98:c9:94:51:50:79:59:
a8:0f:42:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 08:23:35 2026 by rpki-client