This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa
File: 34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa (raw, json)
Hash identifier: 4r/Ycb2It+axZdCPW4Gpw/M49d95d7cextIQ5hDQMwg=
Subject key identifier: 9C:E8:42:2D:D1:14:B4:72:AE:E1:93:4C:84:4C:69:E4:8D:A6:96:24
Certificate issuer: /CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Certificate serial: 3C298AF9C47FC587F085DBDF0DFF8A8AB2FC24E1
Authority key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa
Signing time: Tue 06 Jan 2026 19:00:57 +0000
ROA not before: Tue 06 Jan 2026 18:55:57 +0000
ROA not after: Tue 05 Jan 2027 19:00:57 +0000
asID: 267707
IP address blocks: 45.163.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:29:8a:f9:c4:7f:c5:87:f0:85:db:df:0d:ff:8a:8a:b2:fc:24:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Validity
Not Before: Jan 6 18:55:57 2026 GMT
Not After : Jan 5 19:00:57 2027 GMT
Subject: CN=9CE8422DD114B472AEE1934C844C69E48DA69624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:7f:84:a5:d5:73:57:a8:2d:18:e1:d1:da:
bc:65:e2:44:22:5f:29:06:60:23:30:60:2f:ac:e0:
bf:57:3c:37:c2:a7:95:a2:6a:d7:38:52:07:f6:49:
35:32:05:45:5e:2f:b4:78:ba:14:fe:39:66:b6:84:
91:33:0e:69:60:63:7e:ba:80:21:de:47:db:97:57:
b8:69:4c:45:d5:a9:70:68:e2:ae:55:ca:cd:ed:6e:
f6:ca:6f:5d:49:43:2d:80:d7:b6:c7:d0:58:26:cb:
07:5b:6c:cc:92:f2:be:36:7e:71:e4:33:b4:3c:05:
bf:3c:e6:d6:84:ab:05:52:52:50:cb:c7:81:5d:c4:
92:f2:c0:c3:f9:eb:0e:ea:5f:01:3e:70:a9:9b:ff:
3a:8f:fe:65:4c:3e:ea:d8:32:7f:a1:1e:b5:5f:ae:
fc:45:f0:5a:37:67:44:35:3d:94:37:7e:3c:e3:e8:
3a:6d:87:76:35:f2:7c:da:fa:87:4f:2c:ed:3b:d9:
e2:df:28:6b:23:58:33:96:ab:3c:56:2e:01:fc:66:
5b:4a:22:41:ee:a6:e2:11:51:0c:7a:68:2b:d6:4d:
4e:db:67:a2:28:1d:75:34:01:05:bd:ef:ea:4c:8f:
a4:e3:19:a8:d6:4f:40:69:b5:a5:d3:89:b8:91:4d:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E8:42:2D:D1:14:B4:72:AE:E1:93:4C:84:4C:69:E4:8D:A6:96:24
X509v3 Authority Key Identifier:
keyid:2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:3e:6b:40:4f:d9:86:7d:1d:1e:ac:a1:dc:24:58:d7:21:5b:
d1:2d:86:47:e5:8e:48:3c:5e:63:79:86:7f:6c:5d:18:17:c7:
13:26:68:37:f8:19:99:be:92:3a:6b:c1:56:99:0e:c4:b0:a6:
93:d4:78:70:23:ab:d3:75:8c:da:3f:34:a0:11:c5:65:71:3f:
15:1c:67:92:fd:a5:4f:84:33:ac:e8:34:8d:4a:a4:69:bc:0c:
d8:c7:6c:e2:1f:ec:3d:81:26:a7:d5:9d:31:2d:0c:f0:a3:81:
2c:df:31:ca:d4:c7:4b:59:3c:fb:3b:ad:d3:2a:a3:90:21:3f:
e0:81:89:4f:c2:76:1c:72:77:20:b8:87:f4:7e:ab:2e:9d:9f:
29:8e:bb:44:47:88:28:d4:53:4d:bb:ba:dd:0a:35:6e:4c:a8:
fd:85:47:cf:ee:47:d5:00:08:5b:21:68:53:96:a2:31:56:36:
9f:c0:f1:ae:a6:fb:f3:3c:0c:a5:24:9b:60:fc:95:5c:ea:c9:
a6:e2:73:e7:0e:ad:92:71:87:33:59:58:4e:1e:68:ae:f8:b6:
5d:27:64:51:1c:73:c5:6b:ab:af:cd:ce:0d:3a:46:ca:e3:c5:
a9:0d:aa:8d:da:43:60:5a:5e:c1:14:8e:08:a3:06:65:35:31:
0b:f5:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:53 2026 by rpki-client