This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
File: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (raw, json)
Hash identifier: uCp0Q9i+9+veJ1b/OCdVe/YrScL0cJtyu9wRI4ruDrM=
Subject key identifier: 6A:A8:1E:9C:3C:20:FA:4C:9C:80:D8:80:5D:A3:02:E6:BC:CF:AB:EC
Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5
Certificate serial: 67E6EF81EFE87503E70DD24DE646D1472CF523A0
Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
Signing time: Tue 06 Jan 2026 19:02:09 +0000
ROA not before: Tue 06 Jan 2026 18:57:09 +0000
ROA not after: Tue 05 Jan 2027 19:02:09 +0000
asID: 269828
IP address blocks: 45.186.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl
rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e6:ef:81:ef:e8:75:03:e7:0d:d2:4d:e6:46:d1:47:2c:f5:23:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5
Validity
Not Before: Jan 6 18:57:09 2026 GMT
Not After : Jan 5 19:02:09 2027 GMT
Subject: CN=6AA81E9C3C20FA4C9C80D8805DA302E6BCCFABEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:4a:e4:da:e6:d0:5d:59:c9:bc:68:06:ab:
a4:0b:cf:18:6a:60:4a:0d:b4:40:02:19:f3:3d:6f:
44:52:ee:31:89:8c:1d:64:1e:df:2e:2e:e0:78:69:
b7:c9:dc:0d:a1:4f:d5:57:45:07:e0:78:af:98:8b:
95:b6:03:fc:ee:d9:a7:75:aa:fd:52:b6:d1:af:fb:
5b:87:ab:90:92:11:ea:1c:40:2e:2f:5a:05:f4:8a:
ba:1a:1f:51:0b:2b:b7:67:5f:62:98:b4:c4:95:9b:
11:43:76:b6:58:65:c9:59:15:40:3e:6d:85:56:ff:
43:64:43:d9:ca:ad:0e:fc:16:03:ca:b8:af:4b:34:
22:18:c9:a6:37:cc:3c:b5:5d:2c:57:18:03:a9:67:
88:37:9e:a1:ae:68:d6:04:8f:30:df:84:87:6e:fa:
db:3b:8d:04:5a:3c:1b:ce:6a:96:ef:6d:8f:ac:45:
35:6d:9a:d1:13:1d:b7:d4:46:2b:29:61:15:2c:43:
76:a8:6b:08:8f:70:c4:fd:93:37:d6:52:9b:b8:82:
09:71:ca:e8:20:90:b1:ae:38:db:0e:f1:31:4f:2a:
65:3f:21:dd:48:17:fc:4f:da:e6:2c:8c:be:1d:6f:
f3:01:57:15:cd:09:52:7b:cc:ac:e2:f7:3b:a2:30:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A8:1E:9C:3C:20:FA:4C:9C:80:D8:80:5D:A3:02:E6:BC:CF:AB:EC
X509v3 Authority Key Identifier:
keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.148.0/22
Signature Algorithm: sha256WithRSAEncryption
71:79:86:26:e4:b3:e0:46:f3:35:40:e4:76:22:3f:a6:0e:1a:
2a:6d:29:6c:b6:89:fd:93:7d:f1:7d:47:d6:c4:7d:fc:81:4c:
ad:17:fb:10:1d:43:9d:83:95:1f:69:10:a1:68:c5:3a:ba:e4:
68:9e:b4:5f:d0:e7:b7:c0:94:99:32:32:1f:2c:8e:8b:fe:05:
19:63:69:5b:a0:4b:d7:76:d2:b6:41:9e:0f:51:55:da:07:1d:
59:a9:5b:52:e6:af:b0:e5:17:fa:b6:04:18:f6:72:a8:25:08:
92:20:e5:78:bc:38:00:69:69:36:27:3f:36:65:7d:3c:d3:53:
a3:d3:04:3f:0f:ed:92:4c:0c:42:17:86:df:10:b2:31:9c:ee:
3c:68:9e:8b:5e:f5:5f:b7:94:bc:8a:31:04:51:43:6f:75:2c:
87:f7:49:64:e1:a2:d3:76:8f:4c:84:2f:3e:ac:c6:be:39:37:
77:4a:c3:4b:55:42:86:d7:3d:c7:7c:60:3f:a4:ef:e9:df:72:
90:c7:f5:18:89:91:b2:03:45:bc:a6:55:c4:a1:b1:15:f6:24:
77:58:07:3a:ca:70:bb:4d:1f:00:27:03:2b:56:c6:76:c9:b4:
d7:81:15:31:32:36:b0:11:31:e9:77:b5:84:39:10:9c:c0:ac:
9d:57:fd:d4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZ+bvge/odQPnDdJN5kbRRyz1I6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFBOTQ5MjMzMjUxODQ5QjVGNzkwODVGQTgxNDA2RTU4
OEZGMzZFNTAeFw0yNjAxMDYxODU3MDlaFw0yNzAxMDUxOTAyMDlaMDMxMTAvBgNV
BAMTKDZBQTgxRTlDM0MyMEZBNEM5QzgwRDg4MDVEQTMwMkU2QkNDRkFCRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLUrk2ubQXVnJvGgGq6QLzxhq
YEoNtEACGfM9b0RS7jGJjB1kHt8uLuB4abfJ3A2hT9VXRQfgeK+Yi5W2A/zu2ad1
qv1SttGv+1uHq5CSEeocQC4vWgX0iroaH1ELK7dnX2KYtMSVmxFDdrZYZclZFUA+
bYVW/0NkQ9nKrQ78FgPKuK9LNCIYyaY3zDy1XSxXGAOpZ4g3nqGuaNYEjzDfhIdu
+ts7jQRaPBvOapbvbY+sRTVtmtETHbfURispYRUsQ3aoawiPcMT9kzfWUpu4gglx
yuggkLGuONsO8TFPKmU/Id1IF/xP2uYsjL4db/MBVxXNCVJ7zKzi9zuiMI91AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUaqgenDwg+kycgNiAXaMC5rzPq+wwHwYDVR0j
BBgwFoAUKqlJIzJRhJtfeQhfqBQG5Yj/NuUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOTFGNEMxRkNCREZDOTE4Q0ZCQzgxQTU4Q0JFNDQ2QTBE
OTJEM0Q2M0UxMEM4NUREQkIzQ0Y2RUY1RjQ4RkJDLzAvMkFBOTQ5MjMzMjUxODQ5
QjVGNzkwODVGQTgxNDA2RTU4OEZGMzZFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUE5NDkyMzMyNTE4NDlCNUY3
OTA4NUZBODE0MDZFNTg4RkYzNkU1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzkxRjRDMUZDQkRGQzkxOENGQkM4MUE1OENCRTQ0NkEwRDkyRDNENjNF
MTBDODVEREJCM0NGNkVGNUY0OEZCQy8wLzM0MzUyZTMxMzgzNjJlMzEzNDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbqU
MA0GCSqGSIb3DQEBCwUAA4IBAQBxeYYm5LPgRvM1QOR2Ij+mDhoqbSlston9k33x
fUfWxH38gUytF/sQHUOdg5UfaRChaMU6uuRonrRf0Oe3wJSZMjIfLI6L/gUZY2lb
oEvXdtK2QZ4PUVXaBx1ZqVtS5q+w5Rf6tgQY9nKoJQiSIOV4vDgAaWk2Jz82ZX08
01Oj0wQ/D+2STAxCF4bfELIxnO48aJ6LXvVft5S8ijEEUUNvdSyH90lk4aLTdo9M
hC8+rMa+OTd3SsNLVUKG1z3HfGA/pO/p33KQx/UYiZGyA0W8plXEobEV9iR3WAc6
ynC7TR8AJwMrVsZ2ybTXgRUxMjawETHpd7WEORCcwKydV/3U
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:35 2026 by rpki-client