This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3134382e302f32332d3233203d3e20323635373135.roa
File: 34352e36352e3134382e302f32332d3233203d3e20323635373135.roa (raw, json)
Hash identifier: WE3a6nx8GF38hDGGIw7JrCeQe6bJqinBe3Wq4siWsJk=
Subject key identifier: BD:4F:01:F4:E4:0E:D3:CC:84:6C:47:49:EC:DB:78:AC:49:65:27:25
Certificate issuer: /CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Certificate serial: 0563691B422E7BC82ADC3DE1BF94FD5A627237C6
Authority key identifier: 59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3134382e302f32332d3233203d3e20323635373135.roa
Signing time: Tue 06 Jan 2026 19:37:59 +0000
ROA not before: Tue 06 Jan 2026 19:32:59 +0000
ROA not after: Tue 05 Jan 2027 19:37:59 +0000
asID: 265715
IP address blocks: 45.65.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl
rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 11:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:63:69:1b:42:2e:7b:c8:2a:dc:3d:e1:bf:94:fd:5a:62:72:37:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Validity
Not Before: Jan 6 19:32:59 2026 GMT
Not After : Jan 5 19:37:59 2027 GMT
Subject: CN=BD4F01F4E40ED3CC846C4749ECDB78AC49652725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:73:ca:45:43:1a:72:f7:ca:fa:ac:77:6f:
5f:01:c9:bc:92:5a:a0:42:6f:ab:11:4a:37:a5:0c:
ac:ff:8e:5a:91:8d:c9:30:58:e3:cc:5a:8f:7b:8a:
2d:75:1a:9c:38:02:cd:1b:02:a0:01:9b:0a:0b:1d:
4f:35:67:a1:c0:3e:be:84:4b:ee:5a:c0:60:42:33:
57:0f:2c:a7:be:67:d4:48:3b:f0:4f:da:fa:4d:74:
d0:b7:08:cc:19:91:d1:33:0a:11:d8:fb:26:1f:2a:
d7:8e:30:de:d2:7b:f6:a0:8c:a5:74:87:b2:76:b0:
c2:1b:ce:17:4d:51:c4:42:85:43:89:cf:86:a8:9f:
fe:6e:2c:37:e6:6e:7d:76:8b:65:1b:e3:59:91:cd:
ab:e2:b1:78:54:4a:19:27:8f:ca:6b:02:c2:be:c7:
df:2d:eb:1c:74:e1:33:30:c1:76:b5:42:c5:f2:62:
f8:5b:be:7e:cd:a0:22:0e:f8:e6:74:cc:75:11:a8:
e3:23:2e:c4:8a:98:22:66:27:2f:eb:c9:81:49:12:
7d:ad:19:63:3b:26:cd:7f:d9:c5:1f:a3:2f:e6:a1:
e4:69:28:a6:bd:10:26:fa:85:23:ba:3a:36:a9:fa:
4e:de:ec:2a:6d:da:da:50:95:e0:92:30:84:49:55:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:01:F4:E4:0E:D3:CC:84:6C:47:49:EC:DB:78:AC:49:65:27:25
X509v3 Authority Key Identifier:
keyid:59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3134382e302f32332d3233203d3e20323635373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.148.0/23
Signature Algorithm: sha256WithRSAEncryption
04:fb:6f:9e:39:e9:12:61:f7:8c:30:dd:8f:f6:05:ca:fd:ac:
bf:3a:3b:fa:59:af:85:df:bc:ee:e2:55:31:12:b8:11:8c:1b:
18:7c:1f:30:a6:8b:ba:8d:33:dd:23:02:29:84:62:a0:10:7f:
05:9e:77:db:e5:6a:fa:a4:2a:06:93:e3:d2:c4:18:fc:26:cb:
24:7c:79:0b:df:22:4e:bb:8c:f0:bf:33:50:f7:66:36:0b:69:
38:ed:78:99:31:a2:a7:d0:cb:d5:15:0a:67:c1:88:42:0f:ec:
0a:d4:c0:85:88:f2:c4:46:1d:cc:70:bb:44:ad:31:e6:cb:83:
98:80:03:4a:61:03:e8:6c:b7:75:65:ce:b9:f7:2b:7c:34:4f:
d6:10:54:b7:a4:26:0d:20:b0:1c:03:24:01:a9:c8:25:24:95:
60:99:e8:33:e8:84:15:58:d4:ff:77:55:ba:c1:47:82:11:98:
7c:29:5e:2d:01:9e:8d:e1:51:4f:df:bb:b0:93:e2:7f:1b:10:
73:62:67:a4:78:8e:5b:29:bb:b5:a6:a1:0d:a7:34:91:e1:18:
31:e1:40:14:9a:f4:03:77:37:c8:08:0b:a0:e0:de:06:0d:32:
78:63:c3:e1:27:8f:72:a8:73:22:ce:a5:23:fd:d5:8f:74:e2:
fd:0e:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:10 2026 by rpki-client