This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32302e302f32332d3234203d3e20323635363835.roa File: 34352e352e32302e302f32332d3234203d3e20323635363835.roa (raw, json) Hash identifier: MjfgGbctRKOZ5aqPrhc4nNV1glEFd6Ozdknii6I/XB4= Subject key identifier: B6:D3:60:5A:B4:3D:AF:87:F8:E9:0F:52:17:AC:52:63:BF:4E:30:4C Certificate issuer: /CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945 Certificate serial: 10AA03360A617E789D206F808BA1E74185B5F219 Authority key identifier: 89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32302e302f32332d3234203d3e20323635363835.roa Signing time: Wed 03 Dec 2025 10:00:00 +0000 ROA not before: Wed 03 Dec 2025 09:55:00 +0000 ROA not after: Wed 02 Dec 2026 10:00:00 +0000 asID: 265685 IP address blocks: 45.5.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Dec 2025 17:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:aa:03:36:0a:61:7e:78:9d:20:6f:80:8b:a1:e7:41:85:b5:f2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945 Validity Not Before: Dec 3 09:55:00 2025 GMT Not After : Dec 2 10:00:00 2026 GMT Subject: CN=B6D3605AB43DAF87F8E90F5217AC5263BF4E304C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:9c:37:98:c6:a9:fb:1b:cb:e3:b0:43:cf: df:fc:73:50:3e:82:f1:b9:b6:a4:91:dd:31:2e:2f: 13:f1:ed:c7:7e:31:47:46:07:9b:5b:cd:a3:b9:72: ee:5d:d5:cb:1a:a1:18:91:67:64:f6:f3:91:c7:dd: db:c1:00:a1:24:95:82:0d:1b:d0:e7:0b:04:c3:a0: 71:d6:c4:f2:c6:cd:ca:21:93:5c:28:ab:d1:38:47: 53:9d:43:ef:3f:13:3f:9e:e7:6e:1a:29:90:2a:f1: 69:9c:ca:ad:35:e4:4e:cd:4d:e8:94:a6:38:65:33: ca:99:96:27:73:55:f7:0d:24:ea:ed:f6:ac:99:ed: 92:fc:8a:a2:a5:41:63:69:13:46:cd:ed:97:ae:fb: ac:23:c3:5d:ac:58:0b:1f:8b:1a:05:85:e8:3a:79: 9f:6a:89:cc:a5:ec:83:bb:ba:fa:88:31:c3:b8:0f: 74:fa:2f:2e:b2:53:6a:44:45:ef:20:58:aa:0b:01: 44:fb:1d:f0:7e:cc:23:4c:13:f7:f9:24:53:e1:c3: d0:13:c7:0a:c9:6b:ac:18:45:d7:21:93:09:fc:6f: d6:6f:63:d0:4b:a5:10:29:4b:77:4e:93:04:28:c9: 8d:46:fa:d9:f6:00:f8:9e:a2:3c:e0:5b:9d:3e:aa: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:60:5A:B4:3D:AF:87:F8:E9:0F:52:17:AC:52:63:BF:4E:30:4C X509v3 Authority Key Identifier: keyid:89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32302e302f32332d3234203d3e20323635363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.20.0/23 Signature Algorithm: sha256WithRSAEncryption 32:a8:77:31:97:c0:3e:74:f1:f1:05:dc:e3:6f:6f:d4:b8:c3: 3f:70:c0:97:93:ac:f6:c7:0a:77:cd:5c:0b:e3:a3:64:45:2c: 7f:dd:82:43:76:70:73:df:3f:5d:77:da:01:36:01:44:e3:75: b6:de:f2:fc:27:68:1f:a4:e8:6a:d7:29:fb:4d:58:77:51:80: 68:5b:87:d7:1a:58:5f:fa:b0:93:e8:1e:5f:1e:9e:6e:38:31: 0b:32:1f:cd:e4:65:0b:e9:2f:13:e7:29:db:bb:5b:4a:4b:b1: 96:b4:61:28:9b:cc:dd:3e:72:82:43:08:dc:bf:ce:8d:08:5f: 1e:f8:ed:39:26:b3:65:a8:e9:74:62:25:ed:6f:3c:8c:77:c1: fb:f9:e0:bf:a7:05:78:2f:64:f1:67:a8:ad:42:2d:67:3f:82: 24:9c:99:89:a6:2b:71:08:72:b5:01:38:b9:9e:91:72:20:30: de:f4:d8:f7:ab:97:e5:7d:5b:f8:fb:d9:6f:e8:ed:77:ab:b1: 2c:1c:71:e3:c4:c4:ee:fe:21:03:19:f5:1c:74:1a:6d:72:d1: d9:53:c5:62:09:a7:08:2e:49:20:6b:ea:15:e6:7c:a1:e9:b6: 31:2d:25:11:64:1c:38:8a:57:5e:bc:06:72:47:2d:7c:f5:cd: 0f:0a:6d:b4 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUEKoDNgphfnidIG+Ai6HnQYW18hkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1QjREOTI3QTYwMkY5Q0EyMjJEOEZDQUY3NTZERDRB MzhEQzk0NTAeFw0yNTEyMDMwOTU1MDBaFw0yNjEyMDIxMDAwMDBaMDMxMTAvBgNV BAMTKEI2RDM2MDVBQjQzREFGODdGOEU5MEY1MjE3QUM1MjYzQkY0RTMwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WZw3mMap+xvL47BDz9/8c1A+ gvG5tqSR3TEuLxPx7cd+MUdGB5tbzaO5cu5d1csaoRiRZ2T285HH3dvBAKEklYIN G9DnCwTDoHHWxPLGzcohk1woq9E4R1OdQ+8/Ez+e524aKZAq8Wmcyq015E7NTeiU pjhlM8qZlidzVfcNJOrt9qyZ7ZL8iqKlQWNpE0bN7Zeu+6wjw12sWAsfixoFheg6 eZ9qicyl7IO7uvqIMcO4D3T6Ly6yU2pERe8gWKoLAUT7HfB+zCNME/f5JFPhw9AT xwrJa6wYRdchkwn8b9ZvY9BLpRApS3dOkwQoyY1G+tn2APieojzgW50+qq5rAgMB AAGjggLEMIICwDAdBgNVHQ4EFgQUttNgWrQ9r4f46Q9SF6xSY79OMEwwHwYDVR0j BBgwFoAUiVtNknpgL5yiItj8r3Vt1KONyUUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQUY2MkI0MTc1OTUyREIzNjFEQ0U1NTdCRTUyMjE3OUFD NzE2QTU2QTM2QTc0M0Q4RTcyNjhBRkYxQTQzMDdCLzAvODk1QjREOTI3QTYwMkY5 Q0EyMjJEOEZDQUY3NTZERDRBMzhEQzk0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OTVCNEQ5MjdBNjAyRjlDQTIy MkQ4RkNBRjc1NkRENEEzOERDOTQ1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEFGNjJCNDE3NTk1MkRCMzYxRENFNTU3QkU1MjIxNzlBQzcxNkE1NkEz NkE3NDNEOEU3MjY4QUZGMUE0MzA3Qi8wLzM0MzUyZTM1MmUzMjMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQUUMA0GCSqG SIb3DQEBCwUAA4IBAQAyqHcxl8A+dPHxBdzjb2/UuMM/cMCXk6z2xwp3zVwL46Nk RSx/3YJDdnBz3z9dd9oBNgFE43W23vL8J2gfpOhq1yn7TVh3UYBoW4fXGlhf+rCT 6B5fHp5uODELMh/N5GUL6S8T5ynbu1tKS7GWtGEom8zdPnKCQwjcv86NCF8e+O05 JrNlqOl0YiXtbzyMd8H7+eC/pwV4L2TxZ6itQi1nP4IknJmJpitxCHK1ATi5npFy IDDe9Nj3q5flfVv4+9lv6O13q7EsHHHjxMTu/iEDGfUcdBptctHZU8ViCacILkkg a+oV5nyh6bYxLSURZBw4ildevAZyRy189c0PCm20 -----END CERTIFICATE-----Generated at Sun Dec 7 22:22:06 2025 by rpki-client