This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32322d3234203d3e20323730313433.roa
File: 34352e372e36342e302f32322d3234203d3e20323730313433.roa (raw, json)
Hash identifier: FxZjMO4EHMTNt0clNwQkW4G6PRRbq9kCFZeHdVzdEGE=
Subject key identifier: 22:BA:8E:92:47:44:B7:C8:DB:33:8F:47:CF:0B:32:A0:3B:95:3B:11
Certificate issuer: /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial: 32E0FBBDD71ADE66BB6E9110EBC369268BCCEFA8
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32322d3234203d3e20323730313433.roa
Signing time: Tue 06 Jan 2026 19:38:54 +0000
ROA not before: Tue 06 Jan 2026 19:33:54 +0000
ROA not after: Tue 05 Jan 2027 19:38:54 +0000
asID: 270143
IP address blocks: 45.7.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 18:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e0:fb:bd:d7:1a:de:66:bb:6e:91:10:eb:c3:69:26:8b:cc:ef:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Validity
Not Before: Jan 6 19:33:54 2026 GMT
Not After : Jan 5 19:38:54 2027 GMT
Subject: CN=22BA8E924744B7C8DB338F47CF0B32A03B953B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:a4:70:b1:ae:30:a1:5b:08:fb:c0:65:f2:
72:4d:4f:61:09:a3:2f:c4:8d:05:04:eb:91:87:16:
41:b6:15:70:c8:36:7f:36:7a:5f:38:f3:b6:32:de:
63:ce:6a:3c:d7:5f:76:bd:5c:23:e3:20:7a:40:dd:
65:fc:43:26:44:4e:af:bc:21:f2:60:89:86:97:a5:
ed:aa:e6:f0:27:b7:ca:a0:6a:2d:4d:4b:a1:e9:5f:
e6:fa:7e:02:36:15:26:53:6c:20:50:77:25:15:f1:
8a:7c:e2:d2:d1:75:ae:6e:6d:fb:15:5e:f7:59:e1:
37:c2:01:f3:d5:7f:4a:ae:32:cf:18:04:40:16:8f:
6c:cd:c8:4a:3b:08:48:8c:7b:29:a2:67:7b:45:cd:
68:5b:3c:d9:4c:d8:06:a4:9e:87:57:0a:b6:20:69:
b4:cc:97:9b:bf:98:77:57:b5:d0:bf:74:0e:2b:e4:
8e:1d:4e:34:65:5f:47:3b:59:39:7f:a2:78:40:fe:
95:33:d7:c3:41:06:22:9b:66:9a:5b:5c:74:2f:eb:
c3:b1:6d:d0:bd:91:fd:f4:1d:4e:ce:09:96:69:20:
a6:7e:7c:de:da:ab:9e:17:d6:fa:a4:1c:b5:00:77:
b1:dc:c1:01:bf:9b:9d:5e:de:5b:e3:62:f4:b2:69:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BA:8E:92:47:44:B7:C8:DB:33:8F:47:CF:0B:32:A0:3B:95:3B:11
X509v3 Authority Key Identifier:
keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32322d3234203d3e20323730313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:78:9a:28:27:9c:2a:04:c4:58:42:fe:20:db:43:e2:0d:a8:
ce:25:d3:b7:8c:9e:f2:34:01:81:83:1f:7a:93:09:14:4f:c8:
12:1c:e6:1f:45:7d:f2:a9:5a:03:7e:52:02:e9:57:83:97:b1:
7d:13:dc:ae:38:b6:7a:b2:b6:92:e9:23:14:b3:90:60:1f:10:
f0:52:36:64:a6:90:0d:ea:3a:72:04:ed:9b:41:ad:b3:2a:6e:
43:77:ad:ce:b9:89:d7:2e:be:c5:61:29:24:42:02:74:94:71:
be:35:ac:ad:6d:29:17:32:d4:6f:fa:e9:0f:c2:86:89:1b:7c:
c0:82:12:2b:88:61:8f:83:d7:3c:83:e9:cd:57:d8:a3:d7:80:
1f:c7:65:22:67:76:5f:61:61:f4:bc:88:0a:17:2c:65:28:a3:
de:d1:db:56:c8:1c:a2:5b:79:3b:6a:68:5e:2c:a8:1f:d0:65:
a5:d9:03:37:1c:9d:92:f7:9b:79:a3:a7:3d:92:05:04:e9:0a:
03:26:7d:a6:6f:c6:d0:00:0a:99:b2:9f:e0:81:d6:27:e4:eb:
6f:bd:e1:23:3c:e7:12:cb:0c:43:c1:a7:c0:52:2e:8a:50:96:
40:b7:41:60:f0:ae:74:fc:b5:00:e3:f8:08:27:cc:9e:e1:1c:
a6:ec:89:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:16:45 2026 by rpki-client