This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e302e302f32342d3234203d3e20323635383537.roa
File: 34352e3232352e302e302f32342d3234203d3e20323635383537.roa (raw, json)
Hash identifier: gXzEay1zHr0w90oFahWnBDvI7S0vCMVv5NT+oa9oDQU=
Subject key identifier: 9D:9A:66:4B:93:15:C3:C6:F8:2C:32:F3:E1:7F:08:A6:82:B2:1D:C2
Certificate issuer: /CN=B1225D42FCF145DB2561F136DC359390925409AD
Certificate serial: 0C977BB42484EEE6E56764B6C74CEDCA0A786B37
Authority key identifier: B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e302e302f32342d3234203d3e20323635383537.roa
Signing time: Tue 06 Jan 2026 19:20:00 +0000
ROA not before: Tue 06 Jan 2026 19:15:00 +0000
ROA not after: Tue 05 Jan 2027 19:20:00 +0000
asID: 265857
IP address blocks: 45.225.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl
rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 14:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:97:7b:b4:24:84:ee:e6:e5:67:64:b6:c7:4c:ed:ca:0a:78:6b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1225D42FCF145DB2561F136DC359390925409AD
Validity
Not Before: Jan 6 19:15:00 2026 GMT
Not After : Jan 5 19:20:00 2027 GMT
Subject: CN=9D9A664B9315C3C6F82C32F3E17F08A682B21DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:bd:91:3b:d3:f0:f5:b6:12:3b:1b:b7:5b:
6a:fe:f3:b7:a4:43:16:d5:c5:79:33:a1:d0:f9:c6:
98:46:73:0e:5d:c6:de:fe:d8:1b:22:b4:e4:a0:27:
3f:42:81:1b:fd:d8:12:db:4f:5d:0c:b5:ec:fc:fe:
f3:02:9f:50:a0:c6:d8:3d:d4:3f:ff:a2:d5:6f:f5:
f7:f7:42:42:72:b6:fc:78:b8:9c:4a:a5:ba:07:c2:
69:e0:bb:cd:3d:2f:3a:4f:58:0e:7d:7d:9f:4b:be:
74:e0:e0:5b:2d:ca:82:7a:a2:b4:03:22:dc:ef:ee:
95:63:a8:c3:1e:e2:43:d9:89:73:3e:aa:64:87:52:
b1:5e:c7:b1:6b:bf:ba:ff:38:9e:e3:e3:10:d1:34:
80:b8:12:bd:a5:74:af:b7:f4:6c:21:7b:9c:b3:64:
a4:8f:a3:46:88:41:5d:37:37:ab:9d:ce:09:a3:8e:
3b:82:42:29:2b:22:b0:8a:d1:4b:4a:ed:ff:da:9d:
b2:99:cf:4e:3d:5d:6c:4a:75:90:e4:1c:6c:6d:57:
5a:0b:7d:27:a3:e7:56:cb:07:d9:e8:f0:ad:55:d0:
6b:93:19:9a:32:48:ec:7c:99:ec:a8:23:b9:fb:32:
b2:b8:23:67:93:06:de:bc:27:be:f8:13:7b:ae:1b:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9A:66:4B:93:15:C3:C6:F8:2C:32:F3:E1:7F:08:A6:82:B2:1D:C2
X509v3 Authority Key Identifier:
keyid:B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e302e302f32342d3234203d3e20323635383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a5:c6:52:e6:db:fc:bc:d1:1b:fa:e7:fc:d8:4b:f7:e8:e3:
a6:a2:7a:79:f2:66:32:2a:bb:f9:58:90:bb:b2:a4:58:ef:b8:
54:48:8b:31:3a:e4:81:67:75:61:4f:e7:36:b2:a6:63:72:b3:
79:8a:e1:02:76:44:ce:53:c0:27:1c:83:9e:11:06:52:7d:d8:
54:6f:e2:3c:f5:e8:a4:5e:10:0f:a1:c6:3f:83:71:3f:ff:d2:
31:b0:c6:20:2b:da:3b:b0:a7:bc:19:78:3e:09:54:33:89:32:
c3:dc:ff:43:fd:33:42:46:61:b8:3e:e6:df:65:47:34:d5:da:
05:d9:33:85:e0:ce:34:24:48:ce:ab:22:55:e2:69:09:f2:50:
65:79:a4:43:65:80:a6:14:d7:97:ee:fe:0a:63:13:a3:de:0b:
24:a3:bf:5d:60:d0:0d:67:4b:d4:7b:ab:6b:4f:25:61:38:db:
70:bb:85:b4:62:d4:67:a6:47:03:6d:13:df:d9:72:84:b4:ac:
95:c6:06:da:ed:88:fb:45:5e:1a:50:50:0e:5f:5d:87:35:a0:
ac:d5:7f:76:7f:18:d4:a0:10:bc:c1:15:85:fa:97:17:84:aa:
d6:a2:83:65:2d:05:e7:67:84:e6:30:16:ff:aa:5d:80:b5:13:
4d:7a:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:25 2026 by rpki-client