This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/34352e342e3136302e302f32322d3234203d3e20323635363833.roa
File: 34352e342e3136302e302f32322d3234203d3e20323635363833.roa (raw, json)
Hash identifier: wEn/APFzafHB3GZi5VfmjaxMtMba2sIznwByPXXL/uU=
Subject key identifier: 69:13:59:F1:BF:A5:F7:E5:68:BC:75:89:CF:CC:F9:C0:C1:61:92:3F
Certificate issuer: /CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Certificate serial: 345ED5208A378ED754784F5548AE232BCFDA8991
Authority key identifier: CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/34352e342e3136302e302f32322d3234203d3e20323635363833.roa
Signing time: Tue 06 Jan 2026 19:44:41 +0000
ROA not before: Tue 06 Jan 2026 19:39:41 +0000
ROA not after: Tue 05 Jan 2027 19:44:41 +0000
asID: 265683
IP address blocks: 45.4.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl
rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5e:d5:20:8a:37:8e:d7:54:78:4f:55:48:ae:23:2b:cf:da:89:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Validity
Not Before: Jan 6 19:39:41 2026 GMT
Not After : Jan 5 19:44:41 2027 GMT
Subject: CN=691359F1BFA5F7E568BC7589CFCCF9C0C161923F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:47:e4:fd:14:42:35:89:f6:1b:94:60:cf:
b9:18:56:29:49:d6:2d:be:44:6b:ce:bf:33:21:e3:
fa:bd:c1:67:cb:a9:02:99:b4:82:c5:ab:ea:83:98:
9d:4f:46:a7:47:ab:04:d8:d3:78:e6:71:db:e1:24:
20:98:85:58:d6:5a:83:1c:86:d1:80:b6:7b:58:a6:
37:f4:9b:c7:b1:aa:88:d5:a9:86:e7:7b:f1:96:e4:
b8:4e:3a:f5:cb:07:e3:08:ae:0c:32:33:c6:6c:13:
71:13:e7:95:03:f0:fe:47:47:7e:cc:98:5d:ec:5b:
04:e8:15:d6:36:06:a0:76:f8:2a:8d:ca:de:8b:60:
bd:c1:11:aa:05:02:e3:22:29:fd:06:96:ed:2a:e3:
37:e8:09:22:a3:1a:c3:f8:a4:93:9d:45:02:29:eb:
87:7c:ac:d2:21:b0:3f:ea:0d:ef:88:01:1c:68:7b:
0c:c0:af:6d:34:ee:78:8f:90:5b:ea:91:32:16:75:
c1:29:ce:73:32:b5:34:79:4b:7f:93:70:4c:0e:cd:
f7:82:db:50:3c:d2:44:46:0e:52:d3:70:2a:ea:11:
ca:48:dc:c1:6e:63:07:16:00:e7:6e:52:a7:68:14:
fb:63:c1:02:1e:ab:6a:a6:d9:da:65:09:47:4b:05:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:59:F1:BF:A5:F7:E5:68:BC:75:89:CF:CC:F9:C0:C1:61:92:3F
X509v3 Authority Key Identifier:
keyid:CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/34352e342e3136302e302f32322d3234203d3e20323635363833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.160.0/22
Signature Algorithm: sha256WithRSAEncryption
74:67:d0:a7:a2:cb:18:17:b6:77:d9:32:59:86:d0:ba:c6:a5:
16:00:4a:e9:c8:13:a6:96:69:3b:5e:b2:26:6d:b8:36:fa:c8:
29:83:8b:bb:ea:0d:56:7b:e3:1f:0a:bc:eb:40:cc:39:83:90:
06:91:3f:11:b8:5b:82:ba:13:92:43:09:08:6f:95:3d:8b:fa:
67:d3:f8:67:36:80:3b:63:ce:63:b4:cc:92:05:08:24:17:19:
08:3f:79:14:c0:ab:25:9a:2a:10:32:a4:cd:71:7a:93:28:2c:
db:da:e0:7a:6f:d2:b8:3f:46:de:45:24:f1:13:8e:da:a3:eb:
7a:0c:77:cd:b2:11:7a:51:b7:e5:e6:47:b1:dc:7f:e2:d8:5a:
63:4e:8d:16:04:a3:ed:e7:ea:2e:b2:f1:6c:0b:e8:00:ed:35:
8d:ee:70:52:15:65:8f:5a:7a:68:b3:4f:81:e8:44:a4:2b:2e:
9a:d3:fb:6f:b9:fc:3c:8d:e3:7b:7c:be:f0:f0:34:27:f9:46:
fc:b8:23:7c:dc:31:6e:68:f4:c9:1f:02:f7:f4:de:7b:4d:c6:
33:1e:ed:87:17:40:92:82:82:c7:0b:f6:06:c5:87:1e:d2:43:
61:88:19:2e:40:1b:85:6c:7b:2c:88:02:49:15:10:ad:9e:47:
38:ab:78:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:07 2026 by rpki-client