This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
File: 34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa (raw, json)
Hash identifier: KFFv25IhN9NBBE1EzJKGbgxFwcJP3A312Qd6rW2YAz0=
Subject key identifier: AB:95:76:91:3A:F1:F0:1F:28:A7:89:63:C3:02:C7:57:4F:63:2D:0D
Certificate issuer: /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Certificate serial: 334DDD334D17AAF6317872C1D6844711C8FE519A
Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
Signing time: Tue 06 Jan 2026 19:46:45 +0000
ROA not before: Tue 06 Jan 2026 19:41:45 +0000
ROA not after: Tue 05 Jan 2027 19:46:45 +0000
asID: 267776
IP address blocks: 45.171.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl
rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4d:dd:33:4d:17:aa:f6:31:78:72:c1:d6:84:47:11:c8:fe:51:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Validity
Not Before: Jan 6 19:41:45 2026 GMT
Not After : Jan 5 19:46:45 2027 GMT
Subject: CN=AB9576913AF1F01F28A78963C302C7574F632D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:25:a5:29:64:11:70:f6:57:ed:30:4a:44:
3e:24:6c:f5:75:78:63:54:ba:c6:49:cf:bf:b9:3f:
0e:fb:49:72:4a:60:78:6b:bc:89:3c:f1:de:62:64:
a8:fb:14:27:5a:85:ee:f5:42:9e:50:ab:29:97:dd:
a3:59:ec:e1:08:19:90:fb:61:7c:75:7f:71:c1:cb:
b8:e2:85:1d:94:1f:37:2d:f4:c5:dd:7e:ab:7d:35:
43:cb:50:03:0e:eb:8b:e9:32:c2:35:90:4d:57:93:
94:8c:d9:0d:00:dc:0c:83:38:d9:17:8d:46:3a:8f:
73:6c:0c:85:e3:c6:24:7f:3f:3b:37:62:00:df:f3:
20:bb:7f:50:c9:45:e9:12:9f:e9:ef:a8:0d:9b:06:
cd:db:ca:92:32:e3:a1:4f:45:a7:24:bd:95:85:18:
bd:59:78:7d:2a:bb:45:09:25:de:f5:ed:c1:95:0e:
11:4e:5b:fc:0b:b7:04:8f:83:aa:0f:58:2a:d7:9c:
a5:6d:a2:c0:7e:8c:c8:4f:5e:c6:ec:c6:8c:91:fd:
f3:2d:0c:d7:d3:20:88:61:ec:b2:f6:2b:56:ca:2c:
f5:df:cb:6c:85:05:89:25:55:bb:07:ef:2e:59:68:
af:e9:af:1d:52:34:43:ad:4c:7f:26:94:44:91:df:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:76:91:3A:F1:F0:1F:28:A7:89:63:C3:02:C7:57:4F:63:2D:0D
X509v3 Authority Key Identifier:
keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.220.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:d7:83:08:9d:c5:40:a9:c0:53:94:4b:ee:12:d2:39:52:bd:
f3:36:05:1c:2c:89:3e:1c:f5:d6:f0:64:61:98:96:41:ac:a6:
0d:4c:e2:1f:5f:63:bf:4b:ba:0c:f2:f8:d4:31:b9:23:7f:29:
0a:d1:00:30:2b:34:6c:bc:16:5d:fa:21:aa:42:21:0d:a3:fc:
04:17:e6:73:83:b9:7e:c5:e9:31:de:bc:af:26:1a:10:29:41:
e3:14:d6:23:cc:0a:e0:49:34:fd:67:91:ff:d1:d2:7a:c0:fa:
75:02:5b:be:35:0a:44:0c:de:d5:6b:e9:e5:37:24:cb:03:bf:
ed:89:a4:3c:14:d9:04:54:ca:50:b5:a7:4a:cb:65:b0:59:cf:
a1:5e:3e:9b:83:b0:06:24:37:62:a7:8b:ae:72:dd:6c:26:d7:
b8:bd:7b:03:50:fc:8e:8e:8e:93:72:52:f3:c1:2f:e6:e2:e2:
81:c8:a2:86:0e:f3:22:9d:60:f2:60:c9:d5:16:64:01:a1:8f:
a7:4a:da:59:da:b3:f5:c5:cf:ed:b2:92:0e:7e:5b:c3:54:b8:
a0:11:d5:32:ad:19:64:20:f0:b9:5b:bb:91:dc:1c:c1:bc:d6:
e8:ed:15:88:c0:02:29:b9:63:ce:7c:23:5e:da:65:8b:50:02:
e1:8a:22:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:06 2026 by rpki-client