This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32332e302f32342d3234203d3e20323733303434.roa
File: 34352e352e32332e302f32342d3234203d3e20323733303434.roa (raw, json)
Hash identifier: LBgvLZUM95ZckPtjs2iVvy8MG/hFgsh3LKD4Wxuv5tk=
Subject key identifier: 4C:83:A4:2B:CC:B9:5D:F0:28:D2:DA:C0:0E:D2:F7:49:96:1B:FA:65
Certificate issuer: /CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
Certificate serial: 4D44A1E51C03532A0589D5211FCC74E44356A30B
Authority key identifier: 89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32332e302f32342d3234203d3e20323733303434.roa
Signing time: Tue 06 Jan 2026 19:46:17 +0000
ROA not before: Tue 06 Jan 2026 19:41:17 +0000
ROA not after: Tue 05 Jan 2027 19:46:17 +0000
asID: 273044
IP address blocks: 45.5.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl
rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:44:a1:e5:1c:03:53:2a:05:89:d5:21:1f:cc:74:e4:43:56:a3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
Validity
Not Before: Jan 6 19:41:17 2026 GMT
Not After : Jan 5 19:46:17 2027 GMT
Subject: CN=4C83A42BCCB95DF028D2DAC00ED2F749961BFA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:b5:93:af:49:79:52:db:7d:a8:fd:e7:42:
e4:7a:98:18:15:af:4e:56:44:02:7e:8b:fa:3f:ed:
e8:90:c9:7d:de:9e:d0:02:ef:e3:78:bb:56:39:7e:
ab:5d:57:8b:bf:bd:81:b0:2c:44:ce:01:a0:cc:b6:
85:36:5f:9b:e4:fa:a8:f2:e5:19:36:c6:66:e7:89:
99:5e:50:99:94:ca:c9:65:29:ed:1b:a0:a7:62:a1:
18:ec:0c:8a:19:72:8b:38:ff:ea:a0:67:fa:53:28:
5e:8e:30:43:59:d2:5d:d9:44:ad:3a:03:4f:87:28:
9b:b5:80:f6:07:ca:ec:38:46:06:c9:ee:44:2f:6d:
51:d5:57:f1:d6:b7:7e:7c:52:aa:78:6e:40:1e:39:
a4:d1:61:eb:aa:bc:0f:3d:2b:e0:cf:7e:c4:c8:bc:
6c:5a:92:66:61:22:67:26:0b:aa:9f:bb:63:05:92:
5d:89:21:33:07:8b:13:57:cc:9a:b3:ab:01:7c:64:
1e:35:ee:f9:48:55:80:31:d3:25:dc:8a:5e:3b:52:
fd:10:55:b6:1d:f8:11:1f:90:f7:95:41:cc:4d:33:
8f:02:63:64:27:2d:9c:d0:8c:bd:42:e7:4f:bc:f5:
f4:41:d2:d9:e5:4c:a2:80:39:18:66:03:63:37:85:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:83:A4:2B:CC:B9:5D:F0:28:D2:DA:C0:0E:D2:F7:49:96:1B:FA:65
X509v3 Authority Key Identifier:
keyid:89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32332e302f32342d3234203d3e20323733303434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.23.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:24:2b:e7:af:f9:26:1d:59:a7:62:22:c2:77:32:4d:d0:d5:
cf:ee:8f:d4:42:17:7d:02:f8:20:a5:2a:63:24:c1:0a:3a:22:
03:4f:43:b3:f1:99:70:8a:67:13:c9:31:63:86:bb:4c:df:59:
11:d6:8d:f0:6a:59:2c:eb:51:4a:06:84:f7:a7:bd:d9:65:e4:
aa:8d:be:e0:2a:6c:06:e0:3d:0f:80:51:e7:3f:8f:1c:3d:12:
53:c9:02:8a:35:a6:f8:85:b5:d0:37:b3:fa:34:b1:9e:49:5d:
86:6e:df:df:dd:e5:cf:cd:71:36:21:a0:6f:9c:54:3c:93:48:
92:95:db:48:ab:3a:f3:50:39:5b:dc:2a:7c:a2:09:cf:80:96:
60:e6:2a:d4:a1:d7:5e:3e:d2:89:2a:6d:49:8b:a7:63:8d:9f:
19:eb:af:81:16:c4:01:1a:26:4c:b2:80:96:81:c5:38:b8:3b:
81:75:ca:78:b7:b7:e9:f9:2f:f5:96:54:6c:41:62:4e:79:67:
65:0c:bc:3d:7c:bd:e6:6a:ce:4c:6e:37:e8:cb:bf:af:4b:39:
be:bd:d0:eb:34:c7:c8:ac:d5:2d:94:ad:d6:85:f9:58:d4:af:
73:d1:71:c9:e8:0a:d9:1e:fb:ff:08:b2:5c:93:f3:8e:b1:50:
ee:7f:49:47
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUTUSh5RwDUyoFidUhH8x05ENWowswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk1QjREOTI3QTYwMkY5Q0EyMjJEOEZDQUY3NTZERDRB
MzhEQzk0NTAeFw0yNjAxMDYxOTQxMTdaFw0yNzAxMDUxOTQ2MTdaMDMxMTAvBgNV
BAMTKDRDODNBNDJCQ0NCOTVERjAyOEQyREFDMDBFRDJGNzQ5OTYxQkZBNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CLWTr0l5Utt9qP3nQuR6mBgV
r05WRAJ+i/o/7eiQyX3entAC7+N4u1Y5fqtdV4u/vYGwLETOAaDMtoU2X5vk+qjy
5Rk2xmbniZleUJmUysllKe0boKdioRjsDIoZcos4/+qgZ/pTKF6OMENZ0l3ZRK06
A0+HKJu1gPYHyuw4RgbJ7kQvbVHVV/HWt358Uqp4bkAeOaTRYeuqvA89K+DPfsTI
vGxakmZhImcmC6qfu2MFkl2JITMHixNXzJqzqwF8ZB417vlIVYAx0yXcil47Uv0Q
VbYd+BEfkPeVQcxNM48CY2QnLZzQjL1C50+89fRB0tnlTKKAORhmA2M3hZarAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUTIOkK8y5XfAo0trADtL3SZYb+mUwHwYDVR0j
BBgwFoAUiVtNknpgL5yiItj8r3Vt1KONyUUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQUY2MkI0MTc1OTUyREIzNjFEQ0U1NTdCRTUyMjE3OUFD
NzE2QTU2QTM2QTc0M0Q4RTcyNjhBRkYxQTQzMDdCLzAvODk1QjREOTI3QTYwMkY5
Q0EyMjJEOEZDQUY3NTZERDRBMzhEQzk0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OTVCNEQ5MjdBNjAyRjlDQTIy
MkQ4RkNBRjc1NkRENEEzOERDOTQ1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEFGNjJCNDE3NTk1MkRCMzYxRENFNTU3QkU1MjIxNzlBQzcxNkE1NkEz
NkE3NDNEOEU3MjY4QUZGMUE0MzA3Qi8wLzM0MzUyZTM1MmUzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQUXMA0GCSqG
SIb3DQEBCwUAA4IBAQAfJCvnr/kmHVmnYiLCdzJN0NXP7o/UQhd9AvggpSpjJMEK
OiIDT0Oz8ZlwimcTyTFjhrtM31kR1o3walks61FKBoT3p73ZZeSqjb7gKmwG4D0P
gFHnP48cPRJTyQKKNab4hbXQN7P6NLGeSV2Gbt/f3eXPzXE2IaBvnFQ8k0iSldtI
qzrzUDlb3Cp8ognPgJZg5irUoddePtKJKm1Ji6djjZ8Z66+BFsQBGiZMsoCWgcU4
uDuBdcp4t7fp+S/1llRsQWJOeWdlDLw9fL3mas5Mbjfoy7+vSzm+vdDrNMfIrNUt
lK3WhflY1K9z0XHJ6ArZHvv/CLJck/OOsVDuf0lH
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:23 2026 by rpki-client