This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/34352e3137342e3134382e302f32322d3234203d3e20323637383239.roa
File: 34352e3137342e3134382e302f32322d3234203d3e20323637383239.roa (raw, json)
Hash identifier: VLi0icgopU9ECySyz2pal1231qVnN3lKZjtK2VoU3Fg=
Subject key identifier: 89:E2:CA:0C:2E:EA:F5:AB:FC:FF:C3:D7:B0:85:2E:EF:D8:94:DB:2D
Certificate issuer: /CN=38BB77D54066782A688F0637FD2B6B6CEF74FC3E
Certificate serial: 7BC8C2171638CD1A05DA1AC23626E674CBADB7E1
Authority key identifier: 38:BB:77:D5:40:66:78:2A:68:8F:06:37:FD:2B:6B:6C:EF:74:FC:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/34352e3137342e3134382e302f32322d3234203d3e20323637383239.roa
Signing time: Tue 06 Jan 2026 19:30:53 +0000
ROA not before: Tue 06 Jan 2026 19:25:53 +0000
ROA not after: Tue 05 Jan 2027 19:30:53 +0000
asID: 267829
IP address blocks: 45.174.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.crl
rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c8:c2:17:16:38:cd:1a:05:da:1a:c2:36:26:e6:74:cb:ad:b7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38BB77D54066782A688F0637FD2B6B6CEF74FC3E
Validity
Not Before: Jan 6 19:25:53 2026 GMT
Not After : Jan 5 19:30:53 2027 GMT
Subject: CN=89E2CA0C2EEAF5ABFCFFC3D7B0852EEFD894DB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:55:a8:de:66:49:f2:18:8d:d9:d8:0b:b6:
6f:d8:89:d7:bb:3b:ca:ba:4e:1f:b6:02:d7:37:97:
01:ae:55:62:12:e2:8d:18:de:87:3a:43:40:dd:64:
18:bc:6a:f0:66:ff:fb:b1:79:11:0e:fc:20:4f:b7:
bd:d5:d0:18:4a:dc:a4:8b:2b:6d:90:0a:dc:a3:20:
82:b3:9e:cb:9f:9b:dd:f8:55:51:a1:60:54:34:84:
1b:df:c8:1d:e1:8e:17:79:1a:a9:4e:dc:63:f0:f6:
98:eb:e8:1c:d4:e0:0d:d7:a2:e0:f9:cd:f9:cc:e6:
8c:f3:bd:78:2d:fd:bd:56:0e:ef:71:50:99:f6:68:
77:e5:83:fc:e5:44:65:db:ad:d8:f1:9c:16:f3:41:
02:06:c8:c6:c7:7c:dd:ea:ec:49:e3:b3:ab:80:70:
8d:12:e6:bc:ef:02:36:5d:dc:f3:3a:d6:5d:e3:95:
51:3a:25:57:21:8d:b2:9b:6c:ac:63:d2:ff:40:e9:
57:51:1d:75:b8:ae:72:8c:1c:56:8d:ba:c1:ad:48:
12:6d:49:31:3c:e8:fe:b2:d3:65:10:fd:71:7e:57:
8d:7e:3d:44:a0:e0:6d:ac:c5:5f:85:59:2a:d9:3b:
fd:33:4c:98:ba:60:5f:fb:7a:f9:bd:30:72:32:9b:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E2:CA:0C:2E:EA:F5:AB:FC:FF:C3:D7:B0:85:2E:EF:D8:94:DB:2D
X509v3 Authority Key Identifier:
keyid:38:BB:77:D5:40:66:78:2A:68:8F:06:37:FD:2B:6B:6C:EF:74:FC:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/34352e3137342e3134382e302f32322d3234203d3e20323637383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.148.0/22
Signature Algorithm: sha256WithRSAEncryption
69:25:a0:e7:80:78:90:b9:64:da:96:af:8e:dd:30:d7:dd:da:
e6:5f:a5:72:cd:a5:98:17:2e:7d:17:7d:eb:92:28:ba:62:19:
a6:5c:2e:bd:52:1d:8b:73:96:ad:1d:bc:cd:de:b9:d2:6b:de:
35:19:34:7d:1c:d5:21:2b:ce:ac:d5:1e:9f:96:17:e0:ef:a8:
19:a9:4c:29:cb:27:f8:af:9c:1a:40:2a:16:28:81:ef:08:31:
98:e7:95:15:84:10:aa:f4:87:35:e4:eb:cc:78:17:02:1b:61:
bf:23:a7:4d:46:35:bd:59:9a:89:ce:80:8c:18:48:ef:94:95:
e4:d0:4a:a6:d1:d6:5b:a2:3b:83:ce:01:0b:c5:b5:9b:d5:8a:
1c:e5:34:a5:1d:97:eb:6f:53:27:65:45:e4:3d:a6:e5:ab:f5:
ed:58:3c:59:e9:c2:fe:fd:11:85:42:ef:ea:5e:38:dc:bb:9b:
a3:02:3a:d1:be:57:34:d5:a7:3a:4e:08:81:82:f9:45:ba:88:
49:01:0f:8f:d6:60:53:c2:8c:60:62:58:66:f2:b1:c8:c6:62:
6b:7a:9f:0f:59:90:86:b6:1c:90:a7:d8:ea:60:94:88:7b:10:
8b:21:7d:99:10:d6:42:28:f0:cb:4c:1b:57:02:9d:82:a3:d5:
8a:b6:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:03:15 2026 by rpki-client