This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31322e302f32322d3234203d3e20323636373833.roa
File: 34352e3233352e31322e302f32322d3234203d3e20323636373833.roa (raw, json)
Hash identifier: KgQ4ftlq8CPec9Ts4vXu97aeIzVhPniQzE8oNz1dEsM=
Subject key identifier: B4:21:25:71:DF:A0:2F:8F:8D:4A:B8:B4:4B:7F:AD:BF:1F:83:5F:32
Certificate issuer: /CN=CBF31447B564264D0A347F323D8011AEBA5D1613
Certificate serial: 64E91F77B62C7513DCD40B5F50E16CEB20CD18AF
Authority key identifier: CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31322e302f32322d3234203d3e20323636373833.roa
Signing time: Tue 06 Jan 2026 19:30:00 +0000
ROA not before: Tue 06 Jan 2026 19:25:00 +0000
ROA not after: Tue 05 Jan 2027 19:30:00 +0000
asID: 266783
IP address blocks: 45.235.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl
rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e9:1f:77:b6:2c:75:13:dc:d4:0b:5f:50:e1:6c:eb:20:cd:18:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBF31447B564264D0A347F323D8011AEBA5D1613
Validity
Not Before: Jan 6 19:25:00 2026 GMT
Not After : Jan 5 19:30:00 2027 GMT
Subject: CN=B4212571DFA02F8F8D4AB8B44B7FADBF1F835F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:80:b9:39:53:f2:11:89:3c:d3:58:7e:19:
1f:12:34:4a:b3:2d:23:aa:9e:d4:d5:33:0d:44:e8:
66:fb:dc:7a:2c:5a:3e:42:9b:58:8b:2e:10:33:2c:
47:15:6e:7e:d2:2c:1c:31:7f:b0:e7:eb:11:3f:ae:
d4:67:01:b0:99:4a:d3:4f:b7:e1:12:09:97:36:22:
18:ea:c1:60:92:ea:1b:b5:0d:8e:b5:99:c0:58:e8:
a1:0f:23:0c:8b:f1:a5:70:18:ef:07:02:4a:70:d7:
99:34:9a:30:1b:9b:8b:4f:06:2c:96:6e:29:d1:b6:
26:e7:36:e3:cc:64:c2:03:40:ee:fc:9c:93:d2:c3:
d1:0a:77:3b:cf:6c:dd:4b:91:16:f4:48:60:55:3d:
30:fd:aa:39:ba:a7:b3:20:b8:ab:10:cf:9d:d0:f4:
6e:a8:69:fc:4e:93:e8:68:1a:a5:40:6a:70:a3:34:
df:04:be:ab:5b:20:cd:34:aa:66:d8:5a:1c:43:28:
ee:03:1a:58:03:e2:82:4b:d2:dd:1d:90:72:de:31:
3a:7b:b5:24:d3:bf:b9:5c:f3:a3:9f:61:ad:d0:63:
3e:18:fd:6e:73:0b:68:a5:fe:61:ca:2f:fd:8a:7b:
e4:a4:11:8e:52:d5:50:2b:57:02:62:de:1e:40:8d:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:21:25:71:DF:A0:2F:8F:8D:4A:B8:B4:4B:7F:AD:BF:1F:83:5F:32
X509v3 Authority Key Identifier:
keyid:CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31322e302f32322d3234203d3e20323636373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.12.0/22
Signature Algorithm: sha256WithRSAEncryption
32:d0:06:15:99:3e:b9:47:06:6a:a0:e0:fc:c7:ee:eb:7b:8b:
10:5e:7e:1d:8f:83:85:a7:26:49:8e:86:77:d0:be:c5:82:f2:
55:e3:e0:40:ed:e1:9a:91:cb:61:0b:28:90:9b:83:0d:9c:a5:
0c:48:7e:46:9f:76:3c:d3:16:cc:51:30:8c:3d:32:b7:7b:44:
c1:4c:8d:7d:d0:56:3f:a1:47:22:c6:17:9c:19:f9:20:81:68:
24:84:97:8a:d1:28:b0:66:70:1e:0d:7a:6a:35:3b:71:84:50:
e0:b5:2d:c5:59:4f:e8:9a:52:47:e1:69:2c:fd:fd:bb:5f:63:
99:8d:c1:30:a4:5b:7a:2f:5b:ef:95:ea:4e:bc:e8:b8:0a:17:
63:d5:6f:4b:ee:6c:c2:09:71:c8:2e:90:15:79:47:07:4a:54:
7a:31:b8:95:f3:5c:5d:25:f8:43:bd:12:37:90:bf:e2:e9:28:
85:b5:08:b3:96:95:52:2e:92:32:1e:11:81:f2:a6:a6:49:c3:
69:2e:6c:e1:37:37:09:d9:e1:45:c5:bb:88:5a:93:8e:46:8a:
4d:fb:44:82:fa:08:02:c5:39:ee:96:84:91:2f:21:f6:33:34:
47:67:94:be:d6:4a:4d:49:73:2f:25:56:7e:4e:8c:1f:7b:66:
db:d5:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:05 2026 by rpki-client