This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa
File: 34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa (raw, json)
Hash identifier: QU0G0JEy2ysZ/0kzoIL4B8Mfpnbo6GEW6yMKbdITVQU=
Subject key identifier: B1:FC:F8:92:A8:C5:3D:72:80:8D:06:23:8F:4F:84:A3:69:5C:10:93
Certificate issuer: /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Certificate serial: 7783DA5D9ECF3FDBCD8D9F74F1B8D3C2817226D8
Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa
Signing time: Tue 06 Jan 2026 20:55:49 +0000
ROA not before: Tue 06 Jan 2026 20:50:49 +0000
ROA not after: Tue 05 Jan 2027 20:55:49 +0000
asID: 266706
IP address blocks: 45.229.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl
rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 18:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:83:da:5d:9e:cf:3f:db:cd:8d:9f:74:f1:b8:d3:c2:81:72:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Validity
Not Before: Jan 6 20:50:49 2026 GMT
Not After : Jan 5 20:55:49 2027 GMT
Subject: CN=B1FCF892A8C53D72808D06238F4F84A3695C1093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:04:88:37:dc:b7:68:ca:e5:28:cf:1b:e4:
d3:70:29:b5:12:75:b5:e4:1f:a9:94:9e:08:06:38:
60:22:12:85:54:e8:3e:ac:62:14:7f:b5:bf:fd:df:
bf:2b:78:39:84:a8:b5:47:0b:ad:12:1a:46:a5:6a:
2f:84:99:35:eb:3b:e0:f3:cc:f5:41:51:56:b5:02:
41:ae:a8:2f:4d:9f:96:b7:c1:e3:0a:9d:69:88:3d:
a9:d7:15:79:82:9d:46:64:2f:8c:1d:19:35:a0:37:
91:f8:49:fd:44:64:a8:b9:d7:b4:09:49:40:d4:ab:
ce:50:3d:7d:4c:fd:bf:14:57:08:69:9b:9e:b3:20:
5d:47:0d:ea:24:68:22:65:38:83:78:4e:56:03:4b:
89:11:b1:9c:94:7a:62:b9:31:72:ba:e5:d9:35:e7:
d8:66:4b:78:4e:63:9a:b4:0c:6b:78:d2:10:7b:02:
c4:6d:37:18:68:01:03:37:64:52:1a:ab:3b:a9:8c:
c6:7e:36:53:85:52:61:df:2e:b6:70:c1:fd:3f:2a:
e5:e8:8d:5b:71:1e:9b:b0:77:a6:dd:e7:a3:38:e3:
c9:53:85:86:a0:e6:18:9b:2c:13:59:ee:4a:6f:4b:
ca:4e:a3:80:f8:08:27:18:a3:28:bc:55:3a:1d:1b:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FC:F8:92:A8:C5:3D:72:80:8D:06:23:8F:4F:84:A3:69:5C:10:93
X509v3 Authority Key Identifier:
keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.189.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:7a:0d:17:38:78:3b:6b:7f:dc:95:0c:1d:7a:13:ee:42:03:
30:c0:24:f2:3b:ce:7f:65:2c:05:d1:8f:4f:26:3d:6d:ff:fa:
38:c1:3d:a4:59:50:13:e6:7b:9e:4b:1c:28:ee:85:36:c8:20:
06:f3:fd:7a:05:cc:65:d2:63:52:4b:d5:3e:0a:51:e6:9f:a5:
dc:b6:9e:76:0c:f3:d3:d1:25:5b:fb:bd:48:90:b8:cb:ae:6f:
cc:48:29:29:b6:20:c7:56:59:e6:58:e5:a4:a0:9c:6b:d5:11:
f0:0d:0b:68:e3:99:16:8e:75:75:0a:e6:85:85:4f:27:3c:b9:
50:7f:52:61:1b:1c:f2:c8:90:f3:e1:50:db:ac:c9:cc:34:4c:
1b:fd:d8:e4:db:fd:39:b9:87:27:36:15:ab:78:80:b7:90:9c:
b2:a6:bc:48:fe:88:2e:ed:f7:e2:55:c8:ff:20:1a:f8:da:fb:
0b:d2:87:8a:c2:04:c9:da:2c:13:87:79:b0:8b:92:f7:da:e8:
e1:5b:cc:46:fe:32:eb:77:4c:72:12:12:c9:b1:1a:ef:63:32:
d2:77:e4:b6:f9:a1:a3:11:a8:1c:72:78:b3:27:66:89:15:b3:
1a:48:b5:11:5a:3a:57:9d:5c:12:95:6b:b3:66:fd:02:cb:4a:
6d:56:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:35:44 2026 by rpki-client