This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/34352e3136372e3232302e302f32322d3234203d3e20323637373239.roa
File: 34352e3136372e3232302e302f32322d3234203d3e20323637373239.roa (raw, json)
Hash identifier: QjeJvA8Me4d7+0HQAhKk9mhnAC/sH3+IzQE85AKWvZ8=
Subject key identifier: A7:D9:D3:86:BC:4B:F2:57:A4:5B:0C:82:41:04:D5:62:A0:F6:20:6C
Certificate issuer: /CN=F9CEC307FF91092A2F7FB4205641318B887562C4
Certificate serial: 4FB4C4C18E4EDAEED1A9DE6A3262C3D5C9375EA1
Authority key identifier: F9:CE:C3:07:FF:91:09:2A:2F:7F:B4:20:56:41:31:8B:88:75:62:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9CEC307FF91092A2F7FB4205641318B887562C4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/34352e3136372e3232302e302f32322d3234203d3e20323637373239.roa
Signing time: Tue 06 Jan 2026 19:07:36 +0000
ROA not before: Tue 06 Jan 2026 19:02:36 +0000
ROA not after: Tue 05 Jan 2027 19:07:36 +0000
asID: 267729
IP address blocks: 45.167.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/F9CEC307FF91092A2F7FB4205641318B887562C4.crl
rsync://repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/F9CEC307FF91092A2F7FB4205641318B887562C4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9CEC307FF91092A2F7FB4205641318B887562C4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 13:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b4:c4:c1:8e:4e:da:ee:d1:a9:de:6a:32:62:c3:d5:c9:37:5e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9CEC307FF91092A2F7FB4205641318B887562C4
Validity
Not Before: Jan 6 19:02:36 2026 GMT
Not After : Jan 5 19:07:36 2027 GMT
Subject: CN=A7D9D386BC4BF257A45B0C824104D562A0F6206C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:1e:0c:02:fd:2b:75:72:46:a3:78:2c:99:
35:04:13:c7:f4:e6:93:7e:22:56:21:db:84:66:95:
dd:6d:2d:50:ca:e5:ff:50:92:5b:5a:d7:8c:3c:6b:
0f:a4:d7:2e:48:3e:6d:2d:9b:80:20:7c:6c:ba:2f:
99:10:dd:e8:46:66:f8:a2:c3:c8:92:60:8a:86:91:
8e:5b:b6:68:8c:40:c9:63:f4:28:10:4e:b1:12:6b:
2b:47:33:b1:18:ff:97:f5:67:58:e2:c7:90:1d:f2:
16:d6:80:1f:07:3e:80:f7:2f:54:2b:a7:28:77:db:
bb:ad:8e:c1:3d:ea:0f:92:d5:54:a9:ad:e8:48:75:
38:52:86:c3:54:ac:8b:c0:65:d1:9d:34:62:8b:d4:
d4:14:82:7d:bb:c4:db:4b:d3:48:78:cd:7d:b9:35:
f9:c6:27:2d:d0:3e:3c:7d:25:12:33:53:32:17:4b:
bc:21:0a:88:59:f0:0c:ac:9a:ee:97:83:53:32:ad:
c0:62:bc:c2:49:36:79:39:2c:87:0f:ef:05:e7:98:
f4:f0:3b:65:db:66:b4:96:61:33:3e:d3:72:bf:be:
e9:66:58:65:21:c3:c8:67:e7:21:3b:a4:6e:3a:91:
a2:77:8b:ba:b2:c7:4c:0b:58:05:db:bb:e4:9e:fe:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:D3:86:BC:4B:F2:57:A4:5B:0C:82:41:04:D5:62:A0:F6:20:6C
X509v3 Authority Key Identifier:
keyid:F9:CE:C3:07:FF:91:09:2A:2F:7F:B4:20:56:41:31:8B:88:75:62:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/F9CEC307FF91092A2F7FB4205641318B887562C4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9CEC307FF91092A2F7FB4205641318B887562C4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/34352e3136372e3232302e302f32322d3234203d3e20323637373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.220.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:ff:6f:39:72:5c:4b:7d:ea:e4:52:79:46:87:e9:67:78:a5:
6a:55:52:bd:6a:95:3f:46:a7:bb:36:c6:19:2c:22:bc:a5:5a:
a2:03:36:c9:1c:ff:70:f6:33:27:42:26:3e:f3:a2:56:aa:b4:
00:af:6b:c6:4f:df:61:23:86:24:76:d6:ef:88:09:a0:40:6a:
fb:4e:51:90:36:9a:1e:d0:47:0b:6e:d2:d0:bb:ce:76:71:fe:
bf:1d:94:de:53:d8:63:b2:a5:19:23:3d:59:45:5c:11:94:b5:
a9:ad:c2:4d:99:bb:7d:a5:6d:f1:e9:ef:63:7d:65:74:60:52:
c1:a7:65:7e:e9:5b:c6:3f:95:81:5d:e5:94:42:08:be:c1:ce:
19:ad:37:26:56:8e:a5:4c:4a:19:2a:e4:ef:19:60:51:62:1e:
6e:b1:34:df:51:39:9a:ad:33:c2:fc:15:3a:88:72:79:be:6b:
8c:c2:6e:8a:63:24:09:15:9c:91:f3:cd:d9:23:13:f6:49:9d:
2a:6c:56:42:ea:83:34:d4:cf:ca:a7:2e:13:9f:a4:aa:1f:60:
47:2c:88:3b:1f:c2:a6:f1:c4:2a:c4:c2:e1:0a:27:f7:e2:0a:
d2:11:28:f4:14:ec:c0:0f:8b:e9:5b:50:7a:e7:00:51:b9:cb:
37:77:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:53 2026 by rpki-client