This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/34352e3136342e3134382e302f32322d3232203d3e20323637373133.roa
File: 34352e3136342e3134382e302f32322d3232203d3e20323637373133.roa (raw, json)
Hash identifier: eJ4ZayAmoGftA9uSL/+zAbuKOlAHenWbszTJ16y8Q2w=
Subject key identifier: 53:CA:90:EF:DD:B7:43:19:22:85:28:94:B2:85:CE:D4:B8:39:9A:7B
Certificate issuer: /CN=616110FCE6833EA1E50974D2E8885CBCD8B7D7B2
Certificate serial: 7B937EF547505BFCE280054FEBC03F26A655FEB5
Authority key identifier: 61:61:10:FC:E6:83:3E:A1:E5:09:74:D2:E8:88:5C:BC:D8:B7:D7:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/34352e3136342e3134382e302f32322d3232203d3e20323637373133.roa
Signing time: Tue 06 Jan 2026 19:41:56 +0000
ROA not before: Tue 06 Jan 2026 19:36:56 +0000
ROA not after: Tue 05 Jan 2027 19:41:56 +0000
asID: 267713
IP address blocks: 45.164.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.crl
rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:93:7e:f5:47:50:5b:fc:e2:80:05:4f:eb:c0:3f:26:a6:55:fe:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616110FCE6833EA1E50974D2E8885CBCD8B7D7B2
Validity
Not Before: Jan 6 19:36:56 2026 GMT
Not After : Jan 5 19:41:56 2027 GMT
Subject: CN=53CA90EFDDB7431922852894B285CED4B8399A7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:a8:21:8c:53:16:6b:6d:46:b9:be:99:aa:
b8:8e:91:bc:1a:e5:aa:86:9a:84:d2:19:ea:22:41:
a4:21:67:43:ca:5f:f3:b1:d5:6a:55:8d:ff:53:0b:
a1:a9:b2:ec:d5:83:d7:bb:b4:40:00:13:82:be:91:
44:b9:5d:8e:52:2d:83:91:a4:c7:e5:2a:91:00:5d:
3e:f6:15:32:29:7f:37:34:3e:f4:53:8e:ae:6a:21:
6a:e3:20:76:d3:fd:5a:95:77:ca:ad:05:6f:20:f1:
ec:21:e6:b4:c8:c2:3e:d7:1e:80:d2:e8:53:5c:99:
be:eb:9d:fb:81:c5:1a:63:0c:dd:76:8c:1d:4f:f7:
46:ca:c7:cb:a6:ec:da:de:b9:b7:e2:6f:a6:a7:49:
fb:f2:44:b8:38:b3:58:e8:b4:eb:0e:fe:c8:4e:ca:
1b:a3:d7:bf:49:a2:0e:8f:b2:84:b4:70:2a:a6:d7:
2e:ed:43:55:ff:4b:cd:3a:c4:ae:7d:98:50:7d:70:
6f:09:6f:d3:19:6f:0d:bc:a8:24:12:34:31:1a:fd:
7b:65:5a:9d:5d:8a:49:97:38:69:22:e0:5b:81:3f:
6f:1b:80:ff:5f:fd:55:3a:06:69:d5:da:0c:70:11:
37:c2:78:f2:61:0e:56:45:1b:c2:59:76:b9:a6:79:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CA:90:EF:DD:B7:43:19:22:85:28:94:B2:85:CE:D4:B8:39:9A:7B
X509v3 Authority Key Identifier:
keyid:61:61:10:FC:E6:83:3E:A1:E5:09:74:D2:E8:88:5C:BC:D8:B7:D7:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/34352e3136342e3134382e302f32322d3232203d3e20323637373133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:6f:b4:d7:81:53:4d:8a:51:93:b9:a9:d8:00:44:60:6c:69:
53:2b:95:21:f5:70:19:f7:48:32:4e:c7:67:db:42:48:95:56:
2f:68:b4:5e:34:47:78:cf:8e:c5:00:f8:29:ef:f2:08:b5:22:
0f:5c:3e:e2:23:04:28:1f:3d:db:24:5e:6c:a2:11:e5:7b:f1:
25:18:2e:0b:4f:42:43:64:cd:ff:16:16:3b:52:2b:2e:0e:60:
57:af:fb:ed:c3:a3:fc:7e:fb:9d:33:19:07:9f:3d:74:e0:2c:
91:25:5c:5b:27:25:86:11:51:01:80:b9:7c:d4:0f:f8:41:f0:
8b:7b:45:6b:90:c7:37:aa:59:27:a1:d7:2f:88:5f:66:25:12:
64:01:9f:74:ea:c2:e3:64:26:68:1f:e5:56:5e:b4:2b:8f:15:
a4:8a:0a:2f:33:b2:70:6e:27:f0:bb:02:e9:c5:68:80:52:ac:
9c:f2:a1:85:2e:b2:31:ed:f7:bd:c6:59:66:e8:84:b0:5d:5b:
d4:28:c7:57:6e:17:1f:1d:91:9d:c3:6c:d2:8c:f5:af:53:75:
70:40:b6:44:b2:47:29:6c:37:29:dd:dc:f4:fa:69:a5:b0:03:
d5:b8:fd:ab:6b:b3:24:8e:4e:1a:54:e5:14:15:30:57:7f:b6:
07:aa:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:03:23 2026 by rpki-client