This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e2033333536.roa
File: 34352e3233322e3131362e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier: 6FVfduLAwgXyd4BVSHyMlGOiRoSIXZ91+Fa8Q6V3MXc=
Subject key identifier: 81:16:28:05:32:55:1E:21:59:AF:4E:82:0C:CF:67:0C:E6:4D:EF:3E
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 658E078B2D3130FBAE1CC399D136F01A0F24E824
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e2033333536.roa
Signing time: Tue 06 Jan 2026 19:30:35 +0000
ROA not before: Tue 06 Jan 2026 19:25:35 +0000
ROA not after: Tue 05 Jan 2027 19:30:35 +0000
asID: 3356
IP address blocks: 45.232.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:8e:07:8b:2d:31:30:fb:ae:1c:c3:99:d1:36:f0:1a:0f:24:e8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Jan 6 19:25:35 2026 GMT
Not After : Jan 5 19:30:35 2027 GMT
Subject: CN=8116280532551E2159AF4E820CCF670CE64DEF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:fc:c8:0e:f0:1b:df:35:97:ea:b1:36:00:
99:18:1a:2b:b5:a2:02:ee:be:07:59:30:dc:b2:f9:
a1:d8:9e:4c:2a:94:49:6a:c1:bd:85:f7:53:3d:dd:
07:30:0d:b3:92:6f:cb:85:27:39:89:b3:00:fb:07:
ef:2d:bb:ca:c3:41:9a:65:6c:38:cc:1c:97:97:2b:
ab:f5:72:0b:74:e1:5f:6b:85:1c:cc:12:73:6e:01:
9f:d2:e3:fa:97:71:29:b7:a9:d5:7d:76:a9:11:08:
d5:78:53:99:5c:68:ed:fc:43:c1:80:9c:c2:95:b8:
22:6c:6a:76:cc:6f:8c:e0:00:79:8b:60:8c:be:a4:
7b:69:58:02:ad:5b:bb:43:b2:9b:44:ba:c7:7f:f6:
6b:4a:49:10:25:91:10:4c:b9:b0:36:d2:a8:e2:c6:
ac:b2:69:e2:ee:50:0d:b8:af:3b:e8:74:75:63:b8:
b2:58:93:2d:e0:6a:e2:da:9d:78:a7:02:cc:b3:c0:
4f:86:36:9f:ce:85:40:1f:5c:5f:b5:fe:e7:53:3b:
59:0a:a3:24:f7:a6:37:65:94:75:b2:28:70:0d:c6:
f2:38:de:f4:5a:ed:9b:12:70:ae:4b:bf:e5:f0:1b:
bd:6a:79:33:d0:6a:ba:ec:c5:f0:a9:2a:fc:5e:63:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:16:28:05:32:55:1E:21:59:AF:4E:82:0C:CF:67:0C:E6:4D:EF:3E
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
05:4f:10:7e:09:1b:08:95:a9:6a:05:56:70:ce:ef:40:3e:ea:
b9:c3:62:e2:3a:3d:54:07:c7:91:54:a7:01:46:32:08:a1:bd:
6e:70:6c:92:d5:f2:dc:c5:42:d8:32:1b:28:29:d3:d9:d7:e1:
6a:34:2b:4f:e6:81:d3:82:77:03:19:3b:f3:10:3c:c5:24:b6:
1c:60:56:80:dc:8d:be:14:32:bc:f0:7b:cc:1f:f2:14:19:50:
44:e8:4d:0f:e4:9c:8e:a6:ee:3c:ed:85:f2:41:97:82:74:14:
fd:25:99:03:11:38:0c:1b:10:1f:82:69:ae:71:30:5c:0f:48:
4c:91:22:5d:c9:cf:d7:ed:fb:6f:3e:6a:9a:f0:e2:97:6d:bd:
64:58:2b:af:d2:63:65:e3:e4:ef:1b:cc:f4:f2:8c:b2:e8:7e:
85:5f:12:64:4f:a5:be:21:3a:b0:f7:b1:1a:84:68:56:79:09:
70:49:09:3b:93:d3:a2:4c:94:80:32:4d:7d:4f:89:3e:01:b4:
0d:1b:25:16:ee:42:ac:db:bf:3e:30:c5:7c:04:ea:3a:09:36:
33:25:ca:a5:29:07:9e:bc:9e:9f:ef:b5:c9:6a:c9:c8:f7:bc:
ac:1a:7e:71:f1:fe:df:e2:40:e1:27:9f:89:7b:08:36:fa:20:
2d:68:af:6e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZY4Hiy0xMPuuHMOZ0TbwGg8k6CQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNjAxMDYxOTI1MzVaFw0yNzAxMDUxOTMwMzVaMDMxMTAvBgNV
BAMTKDgxMTYyODA1MzI1NTFFMjE1OUFGNEU4MjBDQ0Y2NzBDRTY0REVGM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46/zIDvAb3zWX6rE2AJkYGiu1
ogLuvgdZMNyy+aHYnkwqlElqwb2F91M93QcwDbOSb8uFJzmJswD7B+8tu8rDQZpl
bDjMHJeXK6v1cgt04V9rhRzMEnNuAZ/S4/qXcSm3qdV9dqkRCNV4U5lcaO38Q8GA
nMKVuCJsanbMb4zgAHmLYIy+pHtpWAKtW7tDsptEusd/9mtKSRAlkRBMubA20qji
xqyyaeLuUA24rzvodHVjuLJYky3gauLanXinAsyzwE+GNp/OhUAfXF+1/udTO1kK
oyT3pjdllHWyKHANxvI43vRa7ZsScK5Lv+XwG71qeTPQarrsxfCpKvxeY0opAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUgRYoBTJVHiFZr06CDM9nDOZN7z4wHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzM0MzUyZTMyMzMzMjJlMzEzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt6HQwDQYJ
KoZIhvcNAQELBQADggEBAAVPEH4JGwiVqWoFVnDO70A+6rnDYuI6PVQHx5FUpwFG
MgihvW5wbJLV8tzFQtgyGygp09nX4Wo0K0/mgdOCdwMZO/MQPMUkthxgVoDcjb4U
Mrzwe8wf8hQZUEToTQ/knI6m7jzthfJBl4J0FP0lmQMROAwbEB+Caa5xMFwPSEyR
Il3Jz9ft+28+aprw4pdtvWRYK6/SY2Xj5O8bzPTyjLLofoVfEmRPpb4hOrD3sRqE
aFZ5CXBJCTuT06JMlIAyTX1PiT4BtA0bJRbuQqzbvz4wxXwE6joJNjMlyqUpB568
np/vtclqycj3vKwafnHx/t/iQOEnn4l7CDb6IC1or24=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:43 2026 by rpki-client