This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
File: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier: KfCwacbp9eH9hJb9ZGCMfC5QzcFXtkIAZsp5iOIs0Ic=
Subject key identifier: AF:40:53:D7:BA:24:DF:81:30:50:B9:F8:45:7C:79:DB:E2:7E:28:A9
Certificate issuer: /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial: 13C3EA39E8A1D2C23A1E607F4C75BBDD96192C5B
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
Signing time: Tue 06 Jan 2026 19:02:17 +0000
ROA not before: Tue 06 Jan 2026 18:57:17 +0000
ROA not after: Tue 05 Jan 2027 19:02:17 +0000
asID: 266819
IP address blocks: 45.237.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 11:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c3:ea:39:e8:a1:d2:c2:3a:1e:60:7f:4c:75:bb:dd:96:19:2c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
Validity
Not Before: Jan 6 18:57:17 2026 GMT
Not After : Jan 5 19:02:17 2027 GMT
Subject: CN=AF4053D7BA24DF813050B9F8457C79DBE27E28A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:e3:13:0f:93:3c:c2:dc:3f:c2:89:0f:b3:
8f:26:03:80:40:a2:0e:64:13:22:59:d6:e8:a0:41:
b1:d7:8a:fc:3b:1e:72:89:e3:48:d5:ae:7b:f8:47:
20:49:e6:2e:4e:19:fe:78:e4:93:be:6f:aa:1e:a3:
6a:71:56:58:6a:15:ee:d2:3f:e1:53:fd:cd:80:41:
e2:02:d8:1c:a2:a3:73:e2:5a:be:99:5a:cf:54:d7:
93:96:a0:3d:b1:5f:86:a1:9d:ed:80:97:3b:3f:67:
7f:79:81:29:ed:0c:e2:4a:68:fc:81:f2:a1:b5:86:
94:48:49:96:ef:ee:75:49:45:be:10:94:b9:42:02:
b1:1a:47:7f:6a:66:b8:73:6e:f1:5c:31:7c:9f:a2:
bf:fb:a5:64:bb:55:9d:65:5f:1f:15:25:bc:39:3b:
b1:06:c0:8b:68:a2:a2:34:90:96:e1:9a:4c:bc:46:
97:74:76:82:3f:f3:7e:04:57:c3:d1:8e:46:be:6a:
72:80:2c:3c:10:76:4d:5b:c5:8d:29:12:bd:ad:8c:
65:79:91:e0:98:67:96:61:1f:61:25:ec:5c:c1:9b:
28:4f:ea:0b:f7:ae:2a:3c:2d:b4:97:7f:47:37:7d:
48:ac:d7:ed:2c:b7:65:21:ec:22:e3:3c:20:92:a7:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:53:D7:BA:24:DF:81:30:50:B9:F8:45:7C:79:DB:E2:7E:28:A9
X509v3 Authority Key Identifier:
keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.223.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4f:06:fb:fc:6b:f6:02:06:df:cb:07:12:f8:ea:b0:96:df:
1c:60:b7:e6:f3:cc:c7:78:79:5a:9b:24:8d:43:88:e6:de:b9:
46:b9:f3:b6:3e:ff:6e:f5:b6:ea:fc:89:5f:c9:a1:28:f1:6f:
5e:60:06:f6:98:96:57:c4:28:a9:cc:41:5a:88:77:61:ec:36:
ac:ad:31:14:7f:3a:7e:c4:66:f6:f0:09:8f:7c:d7:0a:0e:79:
b4:56:e1:1d:f7:56:8e:63:fa:6d:dc:ae:4f:ee:1a:b1:c6:f7:
68:d8:c5:af:b5:b3:50:c1:39:31:a8:be:89:78:22:9e:fb:78:
ec:f7:3a:ae:f7:28:70:ff:3b:51:e9:1a:b0:d9:f2:f1:0e:19:
5f:10:b2:ac:76:9d:26:50:3c:1a:73:88:8c:70:d7:c0:02:87:
a0:c9:da:18:be:7e:3d:fb:9a:e6:6a:73:f4:c8:00:02:c3:0b:
ec:0c:25:ac:8d:ce:ba:80:26:85:a0:0b:99:3d:a8:83:3a:4e:
e2:a3:13:36:d4:ba:40:ab:97:b1:5e:87:f2:29:02:bb:9c:53:
91:10:19:ee:55:56:34:94:72:27:46:74:98:63:de:45:13:b1:
a5:f0:de:db:db:c2:c3:23:a5:72:64:a5:79:9c:95:10:67:71:
41:fd:6a:1f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUE8PqOeih0sI6HmB/THW73ZYZLFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEyMzM4QjY2NjMyRDgyM0Y3NzA3MjEyNTExMkI1QkYx
RjcyMTc2OTAeFw0yNjAxMDYxODU3MTdaFw0yNzAxMDUxOTAyMTdaMDMxMTAvBgNV
BAMTKEFGNDA1M0Q3QkEyNERGODEzMDUwQjlGODQ1N0M3OURCRTI3RTI4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QuMTD5M8wtw/wokPs48mA4BA
og5kEyJZ1uigQbHXivw7HnKJ40jVrnv4RyBJ5i5OGf545JO+b6oeo2pxVlhqFe7S
P+FT/c2AQeIC2Byio3PiWr6ZWs9U15OWoD2xX4ahne2Alzs/Z395gSntDOJKaPyB
8qG1hpRISZbv7nVJRb4QlLlCArEaR39qZrhzbvFcMXyfor/7pWS7VZ1lXx8VJbw5
O7EGwItooqI0kJbhmky8Rpd0doI/834EV8PRjka+anKALDwQdk1bxY0pEr2tjGV5
keCYZ5ZhH2El7FzBmyhP6gv3rio8LbSXf0c3fUis1+0st2Uh7CLjPCCSp2DJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUr0BT17ok34EwULn4RXx52+J+KKkwHwYDVR0j
BBgwFoAUqiM4tmYy2CP3cHISURK1vx9yF2kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODZBODdDMDI2MEY3ODcwOTU0QzAxNjQ4RDNFMjk3MzIz
OUQwMzM2OTRBQTQwRDk4NzIzNTI1RjIxMTYyRDc4LzAvQUEyMzM4QjY2NjMyRDgy
M0Y3NzA3MjEyNTExMkI1QkYxRjcyMTc2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIzMzhCNjY2MzJEODIzRjc3
MDcyMTI1MTEyQjVCRjFGNzIxNzY5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg2QTg3QzAyNjBGNzg3MDk1NEMwMTY0OEQzRTI5NzMyMzlEMDMzNjk0
QUE0MEQ5ODcyMzUyNUYyMTE2MkQ3OC8wLzM0MzUyZTMyMzMzNzJlMzIzMjMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzMTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe3f
MA0GCSqGSIb3DQEBCwUAA4IBAQCBTwb7/Gv2AgbfywcS+Oqwlt8cYLfm88zHeHla
mySNQ4jm3rlGufO2Pv9u9bbq/IlfyaEo8W9eYAb2mJZXxCipzEFaiHdh7DasrTEU
fzp+xGb28AmPfNcKDnm0VuEd91aOY/pt3K5P7hqxxvdo2MWvtbNQwTkxqL6JeCKe
+3js9zqu9yhw/ztR6Rqw2fLxDhlfELKsdp0mUDwac4iMcNfAAoegydoYvn49+5rm
anP0yAACwwvsDCWsjc66gCaFoAuZPaiDOk7ioxM21LpAq5exXofyKQK7nFOREBnu
VVY0lHInRnSYY95FE7Gl8N7b28LDI6VyZKV5nJUQZ3FB/Wof
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:41 2026 by rpki-client