This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137332e302f32342d3234203d3e20323733383335.roa
File: 34352e3233362e3137332e302f32342d3234203d3e20323733383335.roa (raw, json)
Hash identifier: 77mGcvS8p91xpbjF+mbtc4l091yQA3A7t7FR8532GEs=
Subject key identifier: 70:FB:B1:D0:07:92:6C:8E:68:43:C7:D7:72:08:41:CB:3A:2F:8A:E4
Certificate issuer: /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial: 64DD3A6EFD70DB2027D1F48771C6D86CCA2A5E4E
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137332e302f32342d3234203d3e20323733383335.roa
Signing time: Wed 10 Dec 2025 16:50:00 +0000
ROA not before: Wed 10 Dec 2025 16:45:00 +0000
ROA not after: Wed 09 Dec 2026 16:50:00 +0000
asID: 273835
IP address blocks: 45.236.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 09:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:dd:3a:6e:fd:70:db:20:27:d1:f4:87:71:c6:d8:6c:ca:2a:5e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Validity
Not Before: Dec 10 16:45:00 2025 GMT
Not After : Dec 9 16:50:00 2026 GMT
Subject: CN=70FBB1D007926C8E6843C7D7720841CB3A2F8AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:cf:ff:da:13:8f:ec:a5:33:07:59:1f:8f:
dd:57:5c:57:47:66:7b:76:34:a2:3d:4b:c5:cd:f8:
bb:69:7b:fd:6d:f8:ab:50:1c:ec:d7:97:46:de:63:
45:04:99:a0:93:b2:a9:6d:82:e2:03:bf:d5:6a:44:
0a:7f:a5:c1:fa:8b:85:f3:26:3b:f3:80:23:c2:96:
f1:c4:e4:91:77:61:4f:f0:c0:1b:57:50:85:b1:51:
dc:9e:c7:53:10:82:27:f9:38:58:68:2f:65:44:ec:
4b:6d:55:5e:27:7d:22:31:22:c4:83:ab:f2:35:8b:
6b:81:a8:cc:47:76:7a:b8:8f:24:6a:de:c1:c9:10:
f7:ee:cb:c2:c6:ec:9b:82:5d:d7:8c:81:0f:19:f3:
57:73:52:de:47:b8:44:fe:38:a4:40:80:95:17:c4:
0f:93:4b:e1:ad:30:b1:f9:fd:ae:92:a0:64:0b:fd:
4c:b4:59:d6:ba:e3:f4:6a:79:94:2a:94:b4:45:a9:
22:4b:eb:f3:e9:54:91:6a:8d:74:79:8b:36:22:e3:
f1:fd:32:db:6b:ad:d4:0a:da:6b:97:8f:19:81:04:
dd:77:18:4a:8a:f8:56:5a:dc:20:15:49:ef:e6:c3:
cc:77:1a:92:ad:00:7e:ec:a6:35:79:d4:6c:30:fd:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:B1:D0:07:92:6C:8E:68:43:C7:D7:72:08:41:CB:3A:2F:8A:E4
X509v3 Authority Key Identifier:
keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137332e302f32342d3234203d3e20323733383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.173.0/24
Signature Algorithm: sha256WithRSAEncryption
48:af:37:62:0c:d7:c2:c0:a1:de:d3:9b:5e:6b:4b:d9:cb:53:
a2:0c:e5:23:c9:61:09:cb:bc:3b:87:13:f2:40:03:65:94:cc:
7f:2b:b7:a5:f7:d8:e4:e9:c9:05:c3:5c:d2:71:bd:11:96:3a:
83:18:a2:bd:25:d7:8c:50:d6:32:8b:61:c1:b5:08:29:85:8a:
24:dc:2b:9b:da:7d:96:cd:d8:bc:f6:f8:7f:4a:68:b3:e9:1f:
9c:f4:80:af:6d:ea:90:6e:ff:65:e1:32:9a:0a:52:a6:cc:52:
fe:ad:65:e3:22:35:b7:b4:12:d7:25:c6:09:86:f8:07:6e:bc:
7a:70:e1:00:a0:96:81:e7:13:b8:de:43:a8:39:9a:61:72:be:
c7:c8:0d:e0:52:7f:3d:8e:40:38:cb:f0:1c:d9:cd:ad:0b:34:
84:bf:d2:19:ac:7f:88:ad:89:47:49:0e:45:0e:2c:70:50:90:
56:1e:cf:28:bd:3a:84:99:b2:aa:62:e2:c0:9c:18:6b:5b:6d:
8e:23:0d:8f:49:eb:76:a9:06:bf:16:ae:52:80:cb:2f:28:74:
84:5e:45:1c:9f:e3:42:76:f7:f7:96:74:e3:12:c8:a6:e3:23:
98:25:97:65:67:8d:44:e9:57:3c:6c:83:57:e6:8f:06:e0:77:
28:9f:97:9f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZN06bv1w2yAn0fSHccbYbMoqXk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENEM0YwRTRFRTA0M0M1QkE5ODU4QTg5QjVBNjBFN0ZG
MkQzNTVDNjAeFw0yNTEyMTAxNjQ1MDBaFw0yNjEyMDkxNjUwMDBaMDMxMTAvBgNV
BAMTKDcwRkJCMUQwMDc5MjZDOEU2ODQzQzdENzcyMDg0MUNCM0EyRjhBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukc//2hOP7KUzB1kfj91XXFdH
Znt2NKI9S8XN+Ltpe/1t+KtQHOzXl0beY0UEmaCTsqltguIDv9VqRAp/pcH6i4Xz
JjvzgCPClvHE5JF3YU/wwBtXUIWxUdyex1MQgif5OFhoL2VE7EttVV4nfSIxIsSD
q/I1i2uBqMxHdnq4jyRq3sHJEPfuy8LG7JuCXdeMgQ8Z81dzUt5HuET+OKRAgJUX
xA+TS+GtMLH5/a6SoGQL/Uy0Wda64/RqeZQqlLRFqSJL6/PpVJFqjXR5izYi4/H9
MttrrdQK2muXjxmBBN13GEqK+FZa3CAVSe/mw8x3GpKtAH7spjV51Gww/RNNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcPux0AeSbI5oQ8fXcghByzoviuQwHwYDVR0j
BBgwFoAU3NPw5O4EPFuphYqJtaYOf/LTVcYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNTJGRDZBNkE0NkI3ODI4QjQ0RDYyRjdFMEFCNTIyMTZD
NUU2RUVBRDhERThGNzg5RjlBMEM4RDExOTVBOTRDLzAvRENEM0YwRTRFRTA0M0M1
QkE5ODU4QTg5QjVBNjBFN0ZGMkQzNTVDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0QzRjBFNEVFMDQzQzVCQTk4
NThBODlCNUE2MEU3RkYyRDM1NUM2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTUyRkQ2QTZBNDZCNzgyOEI0NEQ2MkY3RTBBQjUyMjE2QzVFNkVFQUQ4
REU4Rjc4OUY5QTBDOEQxMTk1QTk0Qy8wLzM0MzUyZTMyMzMzNjJlMzEzNzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzgzMzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeyt
MA0GCSqGSIb3DQEBCwUAA4IBAQBIrzdiDNfCwKHe05tea0vZy1OiDOUjyWEJy7w7
hxPyQANllMx/K7el99jk6ckFw1zScb0RljqDGKK9JdeMUNYyi2HBtQgphYok3Cub
2n2Wzdi89vh/Smiz6R+c9ICvbeqQbv9l4TKaClKmzFL+rWXjIjW3tBLXJcYJhvgH
brx6cOEAoJaB5xO43kOoOZphcr7HyA3gUn89jkA4y/Ac2c2tCzSEv9IZrH+IrYlH
SQ5FDixwUJBWHs8ovTqEmbKqYuLAnBhrW22OIw2PSet2qQa/Fq5SgMsvKHSEXkUc
n+NCdvf3lnTjEsim4yOYJZdlZ41E6Vc8bINX5o8G4Hcon5ef
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:55:00 2025 by rpki-client