This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/34352e3232342e39362e302f32322d3234203d3e203532343638.roa
File: 34352e3232342e39362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: pCiFgLbfotTPb1YPOzAPqQc/ACVAIx/2QqAgtV6BC3k=
Subject key identifier: 97:9B:17:B4:8F:93:2B:0D:C7:22:8D:0E:5C:C9:5C:B4:49:C3:4A:F9
Certificate issuer: /CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Certificate serial: 4589AF7650F86E600E090E6CE2ED0173021B12C9
Authority key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/34352e3232342e39362e302f32322d3234203d3e203532343638.roa
Signing time: Tue 06 Jan 2026 19:04:01 +0000
ROA not before: Tue 06 Jan 2026 18:59:01 +0000
ROA not after: Tue 05 Jan 2027 19:04:01 +0000
asID: 52468
IP address blocks: 45.224.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 21:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:89:af:76:50:f8:6e:60:0e:09:0e:6c:e2:ed:01:73:02:1b:12:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Validity
Not Before: Jan 6 18:59:01 2026 GMT
Not After : Jan 5 19:04:01 2027 GMT
Subject: CN=979B17B48F932B0DC7228D0E5CC95CB449C34AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:de:a4:b0:9a:57:16:5e:cb:d1:cb:0e:14:
0c:e7:ac:0e:6b:f4:bd:67:0f:96:39:ed:eb:cd:fc:
28:07:96:09:79:3d:3f:08:be:07:ae:9d:d6:8d:cf:
e9:ff:b5:e9:8f:f3:b4:70:0c:76:88:94:ef:41:e0:
f9:a3:19:2d:d1:fd:65:ed:56:52:d3:6f:95:33:00:
39:9b:17:84:fc:2a:4e:a9:6a:79:6c:3c:1f:0a:24:
11:82:97:76:14:fc:d9:cf:59:5e:16:aa:29:8a:b9:
70:05:94:e1:05:5e:14:bd:6b:db:ea:30:36:e8:8e:
69:98:30:48:1e:f7:e4:68:81:48:96:ce:ea:a5:79:
06:df:53:ff:b3:2a:bc:ff:e2:6e:da:df:56:31:42:
6a:93:d5:80:08:da:85:50:7b:54:76:0e:f0:30:d8:
09:2c:da:0e:76:3a:c8:21:19:8f:57:95:35:31:46:
ec:ff:5f:28:14:dc:82:e8:01:d3:81:8a:7a:e4:39:
6a:51:f0:fe:75:af:0a:a6:fd:b3:4d:cc:fd:17:2d:
ff:9a:ee:ca:d8:82:cd:b8:26:38:7b:1e:9d:7d:ce:
37:1e:68:d9:d1:c9:56:75:f1:0b:21:02:6b:33:a4:
af:af:91:9e:f9:65:8e:cd:01:a3:e8:d5:30:76:85:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9B:17:B4:8F:93:2B:0D:C7:22:8D:0E:5C:C9:5C:B4:49:C3:4A:F9
X509v3 Authority Key Identifier:
keyid:87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/34352e3232342e39362e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.96.0/22
Signature Algorithm: sha256WithRSAEncryption
11:92:5a:35:8a:95:0d:5e:89:69:ad:11:42:a5:d9:b3:5e:44:
2c:e0:3e:fc:de:c3:35:f0:c1:e5:e4:af:7e:79:58:be:32:20:
a8:06:e6:17:60:e1:86:72:9d:0c:55:8a:b6:eb:f9:76:aa:5c:
b1:40:f7:93:ee:18:90:a3:96:4a:ec:e6:f2:30:3d:39:e3:5f:
ca:3a:06:57:d6:ee:6b:56:b3:32:c0:59:31:71:9b:ba:e5:c8:
9e:5d:71:c7:34:78:b2:97:6c:c7:87:f2:f8:a9:13:57:24:a6:
c0:af:2d:4d:4b:07:40:c5:9d:10:a1:d4:8b:2c:a6:07:79:01:
69:d5:1f:e3:34:a2:28:9f:97:11:e2:f9:2f:c4:17:0f:de:54:
66:81:9f:dc:41:92:b6:ec:21:ad:ed:2e:65:c4:c7:68:c6:8e:
5b:cf:c1:46:0b:08:56:3c:6f:cd:ce:28:b9:c8:15:0e:60:01:
67:1e:d3:12:94:6c:0b:e1:80:65:87:de:1f:f7:be:3e:88:c1:
b1:23:d8:ad:11:fa:d5:2a:51:71:a5:5d:3d:48:9d:16:d9:35:
44:79:38:ae:3e:da:de:27:e2:c1:00:c8:7c:62:9d:e9:58:49:
27:2d:77:24:d0:01:2c:58:11:5b:2a:8a:11:20:db:bf:04:9a:
de:58:b2:61
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURYmvdlD4bmAOCQ5s4u0BcwIbEskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcxNzBGRTY2MzkzMERBNURCOTQ3NUNFQUM4QjA2MDBC
MkMwMjgzMjAeFw0yNjAxMDYxODU5MDFaFw0yNzAxMDUxOTA0MDFaMDMxMTAvBgNV
BAMTKDk3OUIxN0I0OEY5MzJCMERDNzIyOEQwRTVDQzk1Q0I0NDlDMzRBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4d6ksJpXFl7L0csOFAznrA5r
9L1nD5Y57evN/CgHlgl5PT8IvgeundaNz+n/temP87RwDHaIlO9B4PmjGS3R/WXt
VlLTb5UzADmbF4T8Kk6panlsPB8KJBGCl3YU/NnPWV4WqimKuXAFlOEFXhS9a9vq
MDbojmmYMEge9+RogUiWzuqleQbfU/+zKrz/4m7a31YxQmqT1YAI2oVQe1R2DvAw
2Aks2g52OsghGY9XlTUxRuz/XygU3ILoAdOBinrkOWpR8P51rwqm/bNNzP0XLf+a
7srYgs24Jjh7Hp19zjceaNnRyVZ18QshAmszpK+vkZ75ZY7NAaPo1TB2hT61AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUl5sXtI+TKw3HIo0OXMlctEnDSvkwHwYDVR0j
BBgwFoAUhxcP5mOTDaXblHXOrIsGALLAKDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOEY3NDlEMTVBMjM5RTc3MTFDNUJCRkNEMTc5RTAyMjE5
MjhCQTRGM0VCQkM3NUIwRTA4QzEyQTdFRjI4RTY5LzAvODcxNzBGRTY2MzkzMERB
NURCOTQ3NUNFQUM4QjA2MDBCMkMwMjgzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzE3MEZFNjYzOTMwREE1REI5
NDc1Q0VBQzhCMDYwMEIyQzAyODMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjhGNzQ5RDE1QTIzOUU3NzExQzVCQkZDRDE3OUUwMjIxOTI4QkE0RjNF
QkJDNzVCMEUwOEMxMkE3RUYyOEU2OS8wLzM0MzUyZTMyMzIzNDJlMzkzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt4GAwDQYJ
KoZIhvcNAQELBQADggEBABGSWjWKlQ1eiWmtEUKl2bNeRCzgPvzewzXwweXkr355
WL4yIKgG5hdg4YZynQxVirbr+XaqXLFA95PuGJCjlkrs5vIwPTnjX8o6BlfW7mtW
szLAWTFxm7rlyJ5dccc0eLKXbMeH8vipE1ckpsCvLU1LB0DFnRCh1Isspgd5AWnV
H+M0oiiflxHi+S/EFw/eVGaBn9xBkrbsIa3tLmXEx2jGjlvPwUYLCFY8b83OKLnI
FQ5gAWce0xKUbAvhgGWH3h/3vj6IwbEj2K0R+tUqUXGlXT1InRbZNUR5OK4+2t4n
4sEAyHxinelYSSctdyTQASxYEVsqihEg278Emt5YsmE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:06 2026 by rpki-client