This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231342e302f32342d3234203d3e20323636383831.roa
File: 34352e3136302e3231342e302f32342d3234203d3e20323636383831.roa (raw, json)
Hash identifier: m8t0QmjLcHnbMQpXcC+90WycGx/rB6yX734bKPeE534=
Subject key identifier: F1:71:C6:15:40:07:E7:E1:1F:58:7C:34:DD:09:0E:E1:9D:24:BB:47
Certificate issuer: /CN=1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927
Certificate serial: 2A3004AFF87B0E14F13052BF39272FB548DE5920
Authority key identifier: 1A:DC:8F:78:5D:1F:AD:0C:E5:D6:E3:7B:7C:9B:05:C5:42:5B:E9:27
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231342e302f32342d3234203d3e20323636383831.roa
Signing time: Fri 14 Nov 2025 03:00:46 +0000
ROA not before: Fri 14 Nov 2025 02:55:46 +0000
ROA not after: Fri 13 Nov 2026 03:00:46 +0000
asID: 266881
IP address blocks: 45.160.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.crl
rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:30:04:af:f8:7b:0e:14:f1:30:52:bf:39:27:2f:b5:48:de:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927
Validity
Not Before: Nov 14 02:55:46 2025 GMT
Not After : Nov 13 03:00:46 2026 GMT
Subject: CN=F171C6154007E7E11F587C34DD090EE19D24BB47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:cd:c3:fa:40:78:92:6d:66:c7:dd:9d:ab:
3c:16:a7:56:96:97:7f:64:ec:96:ba:6f:93:c8:69:
61:d0:8e:ac:1b:6a:b1:6b:e1:7d:2d:c4:ea:70:73:
4b:04:61:8a:82:95:38:c9:8f:14:27:57:78:dc:08:
67:e6:85:2b:d8:32:e0:62:1a:eb:46:2c:00:7b:04:
17:fb:3e:87:21:54:59:e8:ce:14:4d:eb:1e:8d:0d:
14:95:86:1d:ab:45:42:4d:98:27:28:56:fb:b3:52:
6b:f3:1c:39:7b:65:9e:04:fe:ff:f7:74:9a:33:70:
f3:2c:82:56:f9:75:a8:d0:fe:00:74:a8:5b:73:00:
cf:14:aa:46:53:39:1b:58:96:30:29:e5:7c:74:39:
e2:ae:07:3f:99:54:47:d7:57:20:91:2e:5c:d3:97:
d3:32:10:64:bd:0f:b3:13:cb:1b:c4:0d:30:93:98:
84:a4:ed:d6:b1:b0:6b:91:60:e2:87:b0:e7:c4:e5:
c3:a9:2a:af:ff:f2:cb:9c:ff:1d:82:9a:d4:5c:b0:
6f:0d:11:b1:3e:02:af:78:ae:fb:b1:d4:4a:45:12:
af:d1:4d:2a:7c:ed:c5:da:06:4b:47:e0:d5:29:35:
4e:11:f3:a5:cb:6e:31:25:b2:aa:ed:37:ad:09:ef:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:71:C6:15:40:07:E7:E1:1F:58:7C:34:DD:09:0E:E1:9D:24:BB:47
X509v3 Authority Key Identifier:
keyid:1A:DC:8F:78:5D:1F:AD:0C:E5:D6:E3:7B:7C:9B:05:C5:42:5B:E9:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231342e302f32342d3234203d3e20323636383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.214.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4b:fd:8a:69:94:41:17:be:69:76:ec:aa:96:65:36:10:30:
a3:1f:ae:7f:ec:9e:a0:64:68:f7:5c:21:d3:76:9e:74:ea:a4:
c4:c5:e4:20:fc:e3:cf:86:8c:97:c4:34:b5:20:c0:d5:20:a6:
b9:33:3a:91:db:54:83:5a:c9:64:08:60:4d:e3:22:5f:09:af:
8f:3d:03:81:3f:f2:ad:9a:8f:bf:f7:91:c7:3c:a1:a4:b4:e2:
2f:f0:3c:d9:e4:1a:3a:09:31:b7:ca:25:40:45:46:c1:80:cd:
e7:ef:25:04:8f:73:22:26:b5:0c:59:ab:54:47:03:6d:a7:43:
b8:aa:1c:4a:d7:20:fa:32:53:36:2e:3a:1f:ea:10:31:12:9f:
93:d4:2b:e0:58:20:1e:9b:78:ed:7c:b8:58:a4:17:8f:ab:9b:
c2:0a:b3:95:92:eb:88:9e:a9:27:69:0c:d4:21:0f:6b:a7:55:
4d:fb:0c:2d:ed:0e:fa:d3:bb:e3:98:84:cd:46:1d:48:07:7a:
3a:9c:c3:36:12:df:a8:a2:28:c4:ae:0d:f2:e6:db:1a:99:d1:
7a:25:27:f0:c4:eb:96:c4:29:3b:3f:c6:93:ff:1a:6b:ea:4b:
75:9b:d3:1b:3e:b5:cf:64:d4:91:17:29:fa:59:d8:ce:1a:03:
3c:c7:29:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:20:13 2025 by rpki-client