This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa
File: 34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa (raw, json)
Hash identifier: L0rNgPF+0ZsBDw0mhIA2qIuloQe4H/6i0JbNB6mYa4Y=
Subject key identifier: 24:E3:A0:5C:6D:89:C5:2B:97:4E:D5:AD:FF:AE:55:EC:93:B0:5F:9C
Certificate issuer: /CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
Certificate serial: 7C0CA6727396210DBF0FFF47A0972C430A4F852B
Authority key identifier: CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa
Signing time: Sun 25 Jan 2026 01:27:18 +0000
ROA not before: Sun 25 Jan 2026 01:22:18 +0000
ROA not after: Sun 24 Jan 2027 01:27:18 +0000
asID: 266848
IP address blocks: 45.238.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl
rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:0c:a6:72:73:96:21:0d:bf:0f:ff:47:a0:97:2c:43:0a:4f:85:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
Validity
Not Before: Jan 25 01:22:18 2026 GMT
Not After : Jan 24 01:27:18 2027 GMT
Subject: CN=24E3A05C6D89C52B974ED5ADFFAE55EC93B05F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:3b:c8:ce:63:d2:6d:89:59:5a:10:b2:b4:
10:81:87:b4:09:64:0e:c8:53:38:d7:42:e3:b3:3a:
0e:c0:0e:62:fd:78:ea:74:53:e3:06:15:8d:b4:e7:
1c:a9:14:a3:51:72:5d:65:66:ab:e4:cd:45:c6:a0:
a3:f5:21:dc:ad:06:e7:a1:35:bc:03:1f:fb:fa:b6:
8d:e6:b4:92:4a:3d:84:b1:4c:c0:76:42:a9:74:b4:
ee:db:04:64:98:cd:5c:c5:03:62:a1:f1:81:94:cd:
1f:48:a9:80:61:10:c6:e6:78:fc:58:dd:88:36:e8:
2b:d8:99:a0:89:5e:24:c5:40:8a:16:fe:67:13:7e:
f3:b5:08:e5:b8:6f:2c:41:45:26:59:1a:a4:fa:3d:
6b:a1:b2:95:17:7b:fc:56:d5:b8:75:74:dc:67:0b:
97:eb:16:ff:3a:78:45:d7:0c:39:98:35:e0:bb:51:
ef:4d:54:cd:58:df:04:29:68:92:55:b4:8c:27:93:
df:10:d4:25:cb:ce:d5:e4:48:89:0e:f5:ff:f4:25:
ee:6f:00:fc:c4:f6:d2:98:fd:90:16:2f:57:14:8a:
c2:b8:3a:a4:8d:51:c4:85:1d:d6:b1:c1:71:c8:63:
3a:e4:33:e9:ff:eb:da:d8:93:5f:28:f1:86:bf:32:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:A0:5C:6D:89:C5:2B:97:4E:D5:AD:FF:AE:55:EC:93:B0:5F:9C
X509v3 Authority Key Identifier:
keyid:CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.196.0/22
Signature Algorithm: sha256WithRSAEncryption
14:ee:11:30:e1:dc:7c:0e:d4:9c:c5:cb:b8:61:25:a2:b8:d2:
fc:cd:0f:6f:55:6a:50:5d:05:5b:d5:95:5b:ab:ae:fd:80:1c:
da:93:da:d7:c1:25:d9:dc:4f:a5:38:d1:92:9e:02:49:e3:a9:
36:05:68:5c:c8:19:d6:e1:30:92:d3:52:87:0d:78:60:22:c4:
a1:a1:0d:63:17:e3:a3:5d:76:c7:06:8d:c2:fd:17:f8:3f:34:
b1:a6:93:50:e0:c6:b4:b0:77:9f:7a:b2:f1:aa:7a:5b:d4:24:
a8:45:d8:16:50:c2:ea:78:3c:eb:c3:c8:d8:44:80:91:4b:a2:
d7:4c:7f:20:bf:ef:be:d8:34:4c:cd:f9:b2:e0:97:a3:38:d3:
0c:8f:b2:2f:e0:16:6c:ae:35:1c:d6:42:d6:d3:1f:86:dc:70:
e6:09:d3:ea:e3:32:8c:31:1c:7c:43:3a:70:67:8e:71:fd:a8:
9e:55:5a:1c:e8:85:fd:8d:29:e3:79:ae:dc:f0:3f:85:e7:7f:
cd:ef:fe:b8:0b:66:fd:e0:ec:a4:a5:42:10:a6:f4:62:07:5b:
7d:61:75:19:80:1a:48:73:31:d0:7a:64:1d:ad:1a:8d:0f:aa:
2a:f8:b1:e3:1a:7e:4e:c2:24:14:cf:32:ef:ea:f9:b1:7b:af:
ef:b5:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:49 2026 by rpki-client