This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/34352e3233382e3234382e302f32322d3232203d3e20323636383338.roa
File: 34352e3233382e3234382e302f32322d3232203d3e20323636383338.roa (raw, json)
Hash identifier: nLroOEzg4TGqDXHfdRpah36QDr8bBPlqbzymqNMAlC4=
Subject key identifier: 1F:57:51:46:5E:33:B6:81:F3:20:27:7E:93:25:13:6D:47:3C:AC:52
Certificate issuer: /CN=C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024
Certificate serial: 1D62EA683FB8CF707534333593B00E833DFDAE26
Authority key identifier: C3:EC:0E:3B:B4:31:09:E8:97:4E:C1:70:FA:7B:FC:7D:E3:D8:20:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/34352e3233382e3234382e302f32322d3232203d3e20323636383338.roa
Signing time: Tue 06 Jan 2026 19:13:49 +0000
ROA not before: Tue 06 Jan 2026 19:08:49 +0000
ROA not after: Tue 05 Jan 2027 19:13:49 +0000
asID: 266838
IP address blocks: 45.238.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.crl
rsync://repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 13:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:62:ea:68:3f:b8:cf:70:75:34:33:35:93:b0:0e:83:3d:fd:ae:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024
Validity
Not Before: Jan 6 19:08:49 2026 GMT
Not After : Jan 5 19:13:49 2027 GMT
Subject: CN=1F5751465E33B681F320277E9325136D473CAC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:1f:e0:c1:03:0d:58:3c:07:06:85:d1:b2:
18:d9:79:41:24:78:e7:40:de:a6:c3:30:ff:7a:48:
5c:fb:8d:d8:55:9e:af:68:a4:ed:6e:17:32:0a:a2:
36:ad:8e:ae:1f:72:43:58:ad:0a:5c:32:01:c0:58:
54:f9:4d:92:d9:50:ae:39:a4:f9:d1:20:77:7c:4b:
b3:50:9c:35:c5:ab:cd:87:38:f0:60:91:f6:cb:93:
05:c9:50:db:2c:e5:93:cd:90:e3:33:8c:60:d0:98:
f5:66:7e:e9:a8:66:e2:0d:d0:97:39:df:2c:b3:d2:
0d:a0:83:af:b9:5c:48:fc:da:05:95:5d:97:38:88:
11:89:a6:20:8d:4c:f8:1a:64:66:d8:a3:14:61:40:
51:ec:7d:a4:f0:43:48:78:42:56:ad:f3:df:2b:3b:
aa:f2:ed:f0:2f:73:f0:eb:20:19:72:af:cd:98:4e:
e4:db:bf:b8:fb:20:bc:18:56:35:7e:24:aa:c5:ed:
fc:0b:03:ee:01:31:72:43:ba:69:5a:08:c4:fe:19:
11:ba:73:23:e0:80:df:57:21:9e:5e:db:0a:c9:dc:
70:9c:2f:f5:6d:71:46:b2:3a:a7:ab:da:f6:a8:b1:
65:2f:ce:b5:3b:49:f2:c6:95:b1:47:15:f1:d9:19:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:51:46:5E:33:B6:81:F3:20:27:7E:93:25:13:6D:47:3C:AC:52
X509v3 Authority Key Identifier:
keyid:C3:EC:0E:3B:B4:31:09:E8:97:4E:C1:70:FA:7B:FC:7D:E3:D8:20:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3EC0E3BB43109E8974EC170FA7BFC7DE3D82024.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DC09DB95218CBF425B33EEDB656D1B6F8D980048086FDE50C37D3BB65FA19C8/0/34352e3233382e3234382e302f32322d3232203d3e20323636383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.248.0/22
Signature Algorithm: sha256WithRSAEncryption
75:22:38:43:d4:c7:46:6e:75:44:6f:60:b5:d9:ad:b4:82:e2:
21:38:34:30:2b:92:b8:5d:83:e7:4d:a4:62:3e:c5:a6:c0:a0:
35:56:62:ad:63:cc:b4:17:7a:23:23:aa:62:33:83:67:01:a6:
38:de:1b:a1:97:6d:2b:7e:12:41:08:67:4a:d3:a7:55:72:c2:
62:6a:1a:df:4b:d5:d7:84:cd:38:59:ab:a2:08:e3:b5:9b:61:
5e:5c:63:cf:35:44:32:d1:98:c8:71:49:cb:31:e5:b5:0a:cd:
4e:45:f0:93:63:3c:86:d3:65:66:71:7c:8e:ef:f7:bb:f8:3d:
81:65:ae:43:e8:80:a3:d6:ae:18:b6:8d:d3:ba:aa:80:86:a9:
00:2f:78:fc:03:6c:69:14:6d:7d:80:0a:c4:ab:2f:8f:f4:7f:
f6:dd:fa:09:f1:bc:f1:92:ba:73:f8:ef:ff:15:ba:fb:7c:2d:
57:5a:36:4e:cd:81:1e:6b:87:31:73:0a:b2:cc:46:7a:31:18:
96:63:cd:64:f6:f4:d2:e1:9a:0e:26:e0:eb:74:45:94:59:0f:
3e:24:92:34:1e:c0:fb:db:29:41:d6:5c:81:e5:8c:1d:73:99:
0c:0a:47:ae:ae:10:31:a2:ba:cf:61:e6:1d:4d:76:d0:e8:5c:
f1:a8:81:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:59:12 2026 by rpki-client