This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa
File: 34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa (raw, json)
Hash identifier: NIxPqdDe1fWQyN3JV9HUR7jNinj9B5RJZ4svaxMHbvw=
Subject key identifier: 48:28:80:1B:C4:69:6E:A8:39:25:8A:3C:B7:1B:85:95:8A:48:3D:00
Certificate issuer: /CN=2C105A8B66A79B278FD2A38A1572477F4D886617
Certificate serial: 04867FA479D5815C500BFA535BAAE15A070A8EE5
Authority key identifier: 2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa
Signing time: Tue 06 Jan 2026 20:56:28 +0000
ROA not before: Tue 06 Jan 2026 20:51:28 +0000
ROA not after: Tue 05 Jan 2027 20:56:28 +0000
asID: 267820
IP address blocks: 45.174.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl
rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:86:7f:a4:79:d5:81:5c:50:0b:fa:53:5b:aa:e1:5a:07:0a:8e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C105A8B66A79B278FD2A38A1572477F4D886617
Validity
Not Before: Jan 6 20:51:28 2026 GMT
Not After : Jan 5 20:56:28 2027 GMT
Subject: CN=4828801BC4696EA839258A3CB71B85958A483D00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:45:cd:0f:12:ea:c3:57:b7:59:a5:26:cf:
a4:6f:e9:30:20:28:ab:c6:2c:75:71:4a:d5:fd:9e:
b5:49:61:7c:16:87:f1:19:97:bc:db:e3:d6:4d:89:
33:12:58:1c:e5:52:79:60:57:77:83:eb:45:d9:00:
89:7c:3e:b3:10:62:48:1d:12:e1:a6:47:80:56:82:
ec:46:be:56:84:8a:92:b5:a3:68:75:67:7b:35:f3:
a1:bb:62:88:1f:0e:91:49:cf:f2:aa:bf:ad:0c:8f:
a3:4a:73:23:bd:16:8e:15:26:9c:38:1b:e9:ac:73:
21:f5:d0:7d:be:5e:13:ea:a1:82:df:db:18:58:bf:
66:93:4f:e0:65:95:93:de:9f:74:42:47:b0:86:b2:
57:8f:63:b7:9d:44:30:ad:0e:98:88:c8:89:1a:0e:
5f:cd:d1:a2:fb:92:63:f1:87:b9:de:dc:34:ea:9f:
f4:ac:a8:b7:0e:99:f0:e9:68:17:36:8c:62:83:95:
a2:f1:05:fc:8c:c0:9e:ed:81:ae:ac:d3:79:1d:91:
e8:d2:9e:d8:b7:31:fc:76:e2:07:5e:39:5c:7a:98:
09:45:51:6e:96:d7:f7:89:2f:fe:58:7c:e7:8a:9c:
07:8c:ad:7d:d5:4b:11:f1:3f:bb:f2:17:3b:2e:30:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:28:80:1B:C4:69:6E:A8:39:25:8A:3C:B7:1B:85:95:8A:48:3D:00
X509v3 Authority Key Identifier:
keyid:2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.129.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5f:b0:5c:45:94:bd:83:84:38:3a:8b:24:0b:9c:bd:7f:c2:
ee:59:a0:66:50:14:92:d8:31:74:5b:1f:22:95:69:30:96:7e:
a2:7e:a0:45:90:1d:fa:a9:71:74:1b:77:2e:1c:e3:da:cf:45:
59:95:c2:99:a0:3a:92:bb:c3:10:c7:ed:3f:1c:23:9c:fb:8d:
f5:5b:97:4e:9c:b0:ff:81:e1:de:b2:c5:29:5a:df:13:dd:62:
52:7b:67:1c:4b:6f:7a:76:a6:f7:74:d3:4f:e8:93:9f:25:23:
83:00:f8:c2:a5:31:88:e4:1a:aa:3e:05:37:57:44:8b:b4:24:
e8:1d:23:3b:dd:65:ea:db:dc:18:d8:42:19:53:4e:8e:7f:a3:
8d:b2:4b:3c:26:3b:99:81:67:2b:ef:82:ac:3b:ae:b7:3c:d4:
c5:92:4d:2c:fd:96:88:0e:46:b7:0d:f8:3c:84:2e:86:48:b8:
c7:40:19:21:56:1e:1f:07:82:c3:ae:18:47:92:68:33:e8:fe:
bc:33:43:b7:e7:79:ff:5b:fd:b4:50:63:5a:b4:4d:78:be:43:
aa:6a:b7:98:4c:7a:5a:cb:ef:f2:7d:8e:5d:f7:8f:d1:a0:1d:
db:8b:be:c0:22:07:d9:3e:80:22:e4:d1:eb:16:2b:dc:25:98:
de:95:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:13 2026 by rpki-client