This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36372e302f32342d3234203d3e20323730313433.roa
File: 34352e372e36372e302f32342d3234203d3e20323730313433.roa (raw, json)
Hash identifier: KLnRjJ8wal6L8BCEte/zqAL3pj8mtKMx6i6v+5TtuyU=
Subject key identifier: 82:AA:17:A8:F4:04:B0:74:AC:C2:D5:09:90:9B:B8:F9:A9:3F:37:56
Certificate issuer: /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial: 490297BBDC267A78381C2CE54F2CBAF0BF5EC29F
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36372e302f32342d3234203d3e20323730313433.roa
Signing time: Tue 06 Jan 2026 19:38:53 +0000
ROA not before: Tue 06 Jan 2026 19:33:53 +0000
ROA not after: Tue 05 Jan 2027 19:38:53 +0000
asID: 270143
IP address blocks: 45.7.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 18:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:02:97:bb:dc:26:7a:78:38:1c:2c:e5:4f:2c:ba:f0:bf:5e:c2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Validity
Not Before: Jan 6 19:33:53 2026 GMT
Not After : Jan 5 19:38:53 2027 GMT
Subject: CN=82AA17A8F404B074ACC2D509909BB8F9A93F3756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:b0:66:34:64:15:d9:ec:58:54:f8:50:fd:
9e:c8:b4:b6:41:6d:5b:d0:4f:62:c7:68:54:04:b0:
aa:14:ee:86:38:78:5a:4d:e4:96:7e:e3:7e:82:67:
2e:a9:a3:1a:28:b4:03:24:64:02:72:c6:cc:03:dc:
be:db:6e:01:d1:2d:f1:15:49:4f:b0:9c:a8:39:a3:
a1:af:95:0b:b9:bb:7c:b7:63:dc:9f:af:a5:a7:b7:
72:4e:16:30:48:13:f2:95:1d:ff:34:c4:61:1e:9e:
7d:d4:73:66:df:7d:47:4a:75:95:cc:4f:11:30:07:
35:17:23:38:0e:0c:6e:3c:46:a7:bc:ae:35:7b:04:
47:e1:8e:85:7c:42:2a:ff:4e:bb:a5:8f:65:5f:f5:
cd:42:40:70:b0:3d:0c:6c:1b:72:10:da:cc:59:ef:
33:cb:c7:79:7f:cb:29:aa:c6:50:38:93:aa:eb:0f:
29:10:61:1b:c2:89:ba:a5:42:3e:4d:89:8b:30:b6:
c2:53:db:c2:bb:e2:29:cd:3c:f5:39:0f:ee:b2:47:
f4:9b:3e:9a:b8:c0:4d:0c:b0:d2:a0:1d:a3:a4:4c:
8b:67:a7:27:69:b3:0a:1a:7a:99:7c:ff:3a:8c:62:
8f:93:2d:69:2c:d8:a2:e2:bf:ca:5a:b7:94:ba:e5:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AA:17:A8:F4:04:B0:74:AC:C2:D5:09:90:9B:B8:F9:A9:3F:37:56
X509v3 Authority Key Identifier:
keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36372e302f32342d3234203d3e20323730313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.67.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0f:fe:b2:e6:45:00:a0:71:8e:e4:aa:01:de:34:1d:8e:8c:
f2:d1:bf:a2:77:88:31:eb:0a:ef:7b:cc:24:0a:fa:b9:54:57:
10:3c:30:79:c6:7e:9c:b0:d0:76:da:3d:06:d9:7d:33:ca:da:
34:72:1f:cc:c4:c6:52:4e:a1:05:06:3e:11:fd:c5:c7:53:22:
6d:dd:f4:1e:8e:57:18:b1:94:20:1a:e9:0c:a7:19:cf:30:3e:
67:f0:f7:d1:73:d0:44:26:a7:f6:37:d7:1c:b2:c8:88:46:c5:
69:b5:bc:44:dd:b3:79:97:13:cc:c0:83:3b:ba:45:fa:a4:2b:
8b:8b:48:ec:7c:70:cd:73:35:64:53:78:0a:fa:27:72:47:0c:
8b:e4:2f:32:90:4a:57:d7:ad:14:71:3e:24:bc:dc:37:28:65:
5d:46:ef:28:2a:91:90:29:a3:fd:7e:e3:7c:8b:59:f3:25:ff:
e9:13:78:eb:8c:ae:53:a0:c3:4d:07:b3:43:6d:75:0f:5b:11:
a6:73:64:3d:0c:9a:35:b7:4c:17:16:a4:a7:40:7b:15:ea:5f:
a5:dd:24:38:b8:8d:d8:6f:bf:33:54:11:18:ae:a9:03:17:2b:
92:bb:1b:8a:ad:7d:2e:6c:c3:42:f1:5e:51:8c:af:7a:26:10:
34:82:fd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:41:38 2026 by rpki-client