This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/34352e3232382e35362e302f32322d3235203d3e20323632313936.roa
File: 34352e3232382e35362e302f32322d3235203d3e20323632313936.roa (raw, json)
Hash identifier: sXojk9ubDWRho2PgNuTbbnkW36yeyMxFvxD8MNEEKwA=
Subject key identifier: E2:80:4D:E5:CE:C6:34:3D:60:D7:3D:14:CB:61:F2:7C:19:0F:15:BF
Certificate issuer: /CN=476EB61F17B49CD88A0DB6ABED2E966A61AAAA97
Certificate serial: 04C9E06B25D003790647855DBB00567E5A52020D
Authority key identifier: 47:6E:B6:1F:17:B4:9C:D8:8A:0D:B6:AB:ED:2E:96:6A:61:AA:AA:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/34352e3232382e35362e302f32322d3235203d3e20323632313936.roa
Signing time: Tue 06 Jan 2026 19:10:03 +0000
ROA not before: Tue 06 Jan 2026 19:05:03 +0000
ROA not after: Tue 05 Jan 2027 19:10:03 +0000
asID: 262196
IP address blocks: 45.228.56.0/22 maxlen: 25
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl
rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c9:e0:6b:25:d0:03:79:06:47:85:5d:bb:00:56:7e:5a:52:02:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476EB61F17B49CD88A0DB6ABED2E966A61AAAA97
Validity
Not Before: Jan 6 19:05:03 2026 GMT
Not After : Jan 5 19:10:03 2027 GMT
Subject: CN=E2804DE5CEC6343D60D73D14CB61F27C190F15BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:d1:f2:73:aa:03:e5:bb:5d:81:dc:21:b9:
fe:43:03:ff:a7:6f:2d:4a:87:c6:4c:d4:e8:53:8b:
88:df:b1:f6:56:81:45:ea:34:6a:96:05:97:b0:d5:
4c:ba:6d:47:27:43:ad:25:3e:d6:83:8d:b1:25:ba:
66:9b:96:40:86:87:30:5e:46:72:df:b7:d2:6d:20:
63:bd:72:e3:51:27:86:02:dd:58:7d:e9:08:4b:23:
a8:26:2f:f8:34:d5:a6:e1:b6:8a:de:9f:f8:eb:49:
eb:79:a7:b8:ae:7a:0b:16:78:67:ae:c1:8f:40:64:
23:6b:4b:b2:c2:db:10:02:c7:5a:a2:61:86:81:9d:
42:98:bf:c3:c9:13:26:2a:35:b1:b3:cd:69:68:56:
52:56:13:cc:19:af:46:3b:1c:88:4e:e5:06:b9:66:
ac:85:21:5c:29:10:7f:6d:a6:e0:37:1b:95:ae:96:
57:eb:c3:0a:84:ba:23:4d:9d:9b:48:c7:2d:29:d1:
0b:41:a3:75:80:30:99:12:5b:41:a2:83:30:50:d7:
4d:4f:84:31:68:f0:f4:c7:83:d5:6c:66:4d:5a:20:
33:5f:ea:ec:ab:d7:62:43:aa:ac:4f:39:25:2d:39:
11:d6:cd:40:01:de:e7:55:9c:a7:7f:95:5f:ed:fc:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:80:4D:E5:CE:C6:34:3D:60:D7:3D:14:CB:61:F2:7C:19:0F:15:BF
X509v3 Authority Key Identifier:
keyid:47:6E:B6:1F:17:B4:9C:D8:8A:0D:B6:AB:ED:2E:96:6A:61:AA:AA:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/34352e3232382e35362e302f32322d3235203d3e20323632313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:b1:17:2c:41:0a:36:b8:86:e8:0d:42:9e:29:20:3b:2b:05:
2b:c4:08:aa:72:ab:52:47:3b:07:a3:96:ce:9d:b6:7c:46:a3:
f7:bc:45:b3:fe:55:e4:b2:03:eb:d0:00:fd:56:9a:48:3c:53:
59:09:77:78:f0:c0:3a:94:60:6d:b1:a1:ac:5f:cd:7c:89:0a:
f1:63:32:7f:2a:34:d2:1e:e1:0e:d8:02:78:13:7e:fc:5f:3b:
75:bf:29:53:f9:cc:4b:88:33:e7:cb:80:55:fd:a2:0d:fb:fe:
e4:b8:24:bb:81:cf:7e:53:08:28:53:47:63:62:11:8f:54:eb:
30:6e:f1:6a:79:2f:fc:48:e5:77:2b:bc:8a:5e:a7:cc:92:6d:
f6:f3:c6:19:78:a6:bc:43:09:63:af:c7:a1:5c:5f:53:1d:ee:
62:3a:fb:ff:0d:59:89:15:c2:cf:9f:a1:e7:be:da:03:03:f8:
c4:de:85:75:26:dd:7f:11:f5:15:98:0a:0d:a9:c2:de:d0:55:
05:1d:80:68:99:3a:cc:c1:38:58:10:72:4e:f5:91:12:86:dd:
f8:68:62:e3:72:ff:58:95:09:fa:9a:30:ed:0f:25:96:6f:9d:
67:6f:d5:f7:f4:42:3b:b7:ac:c9:86:61:a5:a6:10:30:d7:97:
04:4a:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:17 2026 by rpki-client