This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32342d3234203d3e20323730313433.roa File: 34352e372e36342e302f32342d3234203d3e20323730313433.roa (raw, json) Hash identifier: IYmPGSIxeQLmuG4TfY/7wWmxD2IgUONwE7eG1d85qhg= Subject key identifier: DF:00:82:88:C1:9D:45:43:E4:02:63:B0:21:E6:88:9B:82:53:5F:4A Certificate issuer: /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C Certificate serial: 7AF7E10297DC65A90C0C313FE20EC889A81B4A51 Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32342d3234203d3e20323730313433.roa Signing time: Tue 06 Jan 2026 19:38:53 +0000 ROA not before: Tue 06 Jan 2026 19:33:53 +0000 ROA not after: Tue 05 Jan 2027 19:38:53 +0000 asID: 270143 IP address blocks: 45.7.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Jan 2026 18:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f7:e1:02:97:dc:65:a9:0c:0c:31:3f:e2:0e:c8:89:a8:1b:4a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C Validity Not Before: Jan 6 19:33:53 2026 GMT Not After : Jan 5 19:38:53 2027 GMT Subject: CN=DF008288C19D4543E40263B021E6889B82535F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:77:a0:33:f8:67:b8:46:db:3a:04:e9:45: a9:27:6e:ce:47:3a:e7:90:25:e7:1a:6c:95:be:04: 41:ba:59:1e:67:7b:65:a0:55:d3:e1:7b:41:12:80: 86:88:11:8f:c1:ab:5b:be:9a:41:e1:91:df:d4:ca: 17:c3:d1:8b:df:79:3e:0e:c7:02:74:f2:2a:f5:a1: 63:8d:b3:56:0e:be:87:ae:c0:bf:90:a5:a9:3a:5f: 24:a5:77:16:d0:3d:69:b3:67:91:e9:52:b3:75:83: a9:38:75:30:94:60:1a:e0:71:bd:d8:40:1f:6c:82: ac:9a:32:65:32:43:ea:cb:81:a3:ed:70:65:44:83: e6:66:4b:6e:15:71:8f:2a:9d:a5:9b:db:1b:d5:cd: 91:bc:57:0f:68:5b:fd:3b:89:3e:a1:91:a7:ae:0a: d6:8e:9e:7a:5f:a9:88:31:cc:6f:85:0e:ab:af:e8: c8:58:e9:5d:53:b5:91:86:fb:44:4c:4d:99:4b:72: d3:86:16:5c:74:9d:3a:0f:e7:63:d2:27:df:2a:77: 9f:b4:a1:0c:2e:86:2c:15:eb:9c:bf:91:a6:e0:d7: 9f:86:ad:e8:40:39:48:41:5d:66:e7:9b:5d:50:d0: 47:84:5c:0a:b0:71:0e:01:7b:0e:0a:5f:b6:3c:37: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:00:82:88:C1:9D:45:43:E4:02:63:B0:21:E6:88:9B:82:53:5F:4A X509v3 Authority Key Identifier: keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32342d3234203d3e20323730313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.64.0/24 Signature Algorithm: sha256WithRSAEncryption 02:ef:6e:c7:f3:c2:83:b6:29:46:f0:13:8d:21:3a:3b:67:76: 21:f9:de:f3:ff:ab:24:5c:ea:a5:c5:f9:1a:d2:3c:c3:f4:19: ef:71:4f:1d:e9:e0:f7:1a:eb:35:cf:4b:f2:ac:83:f6:c7:69: 82:b8:78:19:b6:d0:d0:93:52:2c:19:db:29:ed:62:47:fa:1a: cd:42:1c:c9:07:c2:d8:a2:f4:91:25:da:fa:83:32:a7:96:4a: ef:9e:f6:ae:6d:ef:c0:09:ec:1a:8d:9a:a2:56:15:76:83:0d: 90:d6:09:53:62:bb:5e:3c:7e:34:7c:79:02:23:a3:77:3f:35: 18:72:e0:e7:c8:11:49:83:ab:e4:ce:20:c9:42:55:c9:b9:92: d6:db:b2:46:74:1e:a6:c6:67:24:49:b2:88:af:88:06:47:cc: 19:7c:52:ff:41:dd:69:8b:9a:c1:2b:3a:66:e2:58:23:50:c8: 6a:39:0e:d9:24:fb:72:f6:3d:b6:46:cb:9b:be:91:84:7b:d2: e9:49:92:fd:90:f1:5a:64:c9:f3:a0:a6:5f:44:82:a5:04:f6: 81:88:48:7d:01:ee:9c:ac:aa:6c:0d:45:c3:a7:51:2e:d8:d9: 1e:be:21:d4:75:8f:4d:22:34:ab:03:3c:d2:46:ff:3b:3b:db: f8:e7:f9:a6 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUevfhApfcZakMDDE/4g7IiagbSlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3RkJBM0UxREY4QUQ2OTFEQjc1NTM3MkQ3MzFERkFC NkUwQ0Q4QzAeFw0yNjAxMDYxOTMzNTNaFw0yNzAxMDUxOTM4NTNaMDMxMTAvBgNV BAMTKERGMDA4Mjg4QzE5RDQ1NDNFNDAyNjNCMDIxRTY4ODlCODI1MzVGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JnegM/hnuEbbOgTpRaknbs5H OueQJecabJW+BEG6WR5ne2WgVdPhe0ESgIaIEY/Bq1u+mkHhkd/UyhfD0YvfeT4O xwJ08ir1oWONs1YOvoeuwL+Qpak6XySldxbQPWmzZ5HpUrN1g6k4dTCUYBrgcb3Y QB9sgqyaMmUyQ+rLgaPtcGVEg+ZmS24VcY8qnaWb2xvVzZG8Vw9oW/07iT6hkaeu CtaOnnpfqYgxzG+FDquv6MhY6V1TtZGG+0RMTZlLctOGFlx0nToP52PSJ98qd5+0 oQwuhiwV65y/kabg15+GrehAOUhBXWbnm11Q0EeEXAqwcQ4Bew4KX7Y8N4IbAgMB AAGjggLEMIICwDAdBgNVHQ4EFgQU3wCCiMGdRUPkAmOwIeaIm4JTX0owHwYDVR0j BBgwFoAUO3+6Ph34rWkdt1U3LXMd+rbgzYwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRkM5QzE0MjI3NUQ2RTExQTBFRDlCNEZBQUREQkI4QzJB N0QzRjFDNDZENzUzMjBBNzI1MUM3MTk5NjE4N0YxLzAvM0I3RkJBM0UxREY4QUQ2 OTFEQjc1NTM3MkQ3MzFERkFCNkUwQ0Q4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjdGQkEzRTFERjhBRDY5MURC NzU1MzcyRDczMURGQUI2RTBDRDhDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUZDOUMxNDIyNzVENkUxMUEwRUQ5QjRGQUFEREJCOEMyQTdEM0YxQzQ2 RDc1MzIwQTcyNTFDNzE5OTYxODdGMS8wLzM0MzUyZTM3MmUzNjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNzMwMzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQdAMA0GCSqG SIb3DQEBCwUAA4IBAQAC727H88KDtilG8BONITo7Z3Yh+d7z/6skXOqlxfka0jzD 9BnvcU8d6eD3Gus1z0vyrIP2x2mCuHgZttDQk1IsGdsp7WJH+hrNQhzJB8LYovSR Jdr6gzKnlkrvnvaube/ACewajZqiVhV2gw2Q1glTYrtePH40fHkCI6N3PzUYcuDn yBFJg6vkziDJQlXJuZLW27JGdB6mxmckSbKIr4gGR8wZfFL/Qd1pi5rBKzpm4lgj UMhqOQ7ZJPty9j22RsubvpGEe9LpSZL9kPFaZMnzoKZfRIKlBPaBiEh9Ae6crKps DUXDp1Eu2NkeviHUdY9NIjSrAzzSRv87O9v45/mm -----END CERTIFICATE-----Generated at Sun Jan 25 12:41:06 2026 by rpki-client