This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/34352e37302e382e302f32322d3234203d3e20323635383137.roa
File: 34352e37302e382e302f32322d3234203d3e20323635383137.roa (raw, json)
Hash identifier: beI6gE1T6co/GarC13HaIM50C1gW25MN+D7kMbXgrck=
Subject key identifier: 58:95:50:81:80:6B:5D:D9:43:53:B7:9C:41:68:1E:13:1C:F1:3B:D5
Certificate issuer: /CN=B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A
Certificate serial: 04AF310DB677D83066CFAD50235A675E8C184980
Authority key identifier: B0:CE:0E:B3:B2:5D:7D:B2:D3:F8:23:AA:4E:8D:73:CA:D5:AD:CD:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/34352e37302e382e302f32322d3234203d3e20323635383137.roa
Signing time: Tue 06 Jan 2026 19:01:38 +0000
ROA not before: Tue 06 Jan 2026 18:56:38 +0000
ROA not after: Tue 05 Jan 2027 19:01:38 +0000
asID: 265817
IP address blocks: 45.70.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.crl
rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 15:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:af:31:0d:b6:77:d8:30:66:cf:ad:50:23:5a:67:5e:8c:18:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A
Validity
Not Before: Jan 6 18:56:38 2026 GMT
Not After : Jan 5 19:01:38 2027 GMT
Subject: CN=58955081806B5DD94353B79C41681E131CF13BD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1d:0c:05:07:52:a9:c8:5e:b6:0e:97:47:b7:
60:c0:cd:2d:f3:e3:1f:58:e2:39:2a:f2:79:b3:19:
b4:b7:04:ff:34:8d:cb:a7:4d:83:c9:5d:34:37:2c:
d3:58:f1:5f:5c:4a:48:1c:01:71:d6:f2:bd:d7:ee:
84:7f:29:93:5e:e9:81:34:01:e8:0f:94:ca:38:7c:
cf:6c:39:00:37:cc:0b:66:4c:da:7a:56:60:01:21:
b5:21:b7:c6:0c:a3:01:c7:66:9d:f1:7c:6d:1c:f8:
e1:54:2d:c4:8b:90:28:f8:77:cc:dc:4b:c6:0e:3b:
64:ee:2e:dc:8a:8d:a3:92:55:02:fc:95:01:a0:16:
3b:e0:8e:08:20:51:5f:24:67:dc:f8:e8:ef:75:ad:
55:66:73:69:ea:00:72:53:47:80:7a:a3:15:a1:1e:
e0:ba:14:82:cf:5f:a5:e2:6d:0a:94:e2:b8:e9:fe:
43:24:bc:9c:10:98:8f:57:b5:05:3d:00:75:8a:b2:
24:2e:e4:bf:81:2b:e4:57:6d:62:58:03:35:ed:34:
b8:d9:6c:55:41:ad:c4:7d:8f:b7:2d:54:32:c2:66:
76:c2:3d:27:5c:71:b8:02:4e:bb:56:a1:a4:eb:e2:
0a:6b:32:53:6e:09:0b:57:b4:dc:e5:40:08:c7:4c:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:50:81:80:6B:5D:D9:43:53:B7:9C:41:68:1E:13:1C:F1:3B:D5
X509v3 Authority Key Identifier:
keyid:B0:CE:0E:B3:B2:5D:7D:B2:D3:F8:23:AA:4E:8D:73:CA:D5:AD:CD:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0CE0EB3B25D7DB2D3F823AA4E8D73CAD5ADCD7A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DB359FBDD12B1D4AF7A57066DD229D0586F8D259779E9AADCA7994B631E393C/0/34352e37302e382e302f32322d3234203d3e20323635383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.8.0/22
Signature Algorithm: sha256WithRSAEncryption
20:50:4d:88:b6:a6:52:0f:d5:84:8d:f9:e8:67:65:d7:d7:ab:
0d:79:de:27:a8:5c:43:66:e8:38:b9:58:8c:d4:f0:cb:c4:94:
92:aa:42:ac:c6:e7:99:b4:15:59:ad:4b:b6:44:09:69:10:a3:
4e:26:eb:32:13:da:f3:7a:91:1d:92:69:90:44:dc:ce:65:47:
f0:67:28:05:1e:19:03:cd:85:a1:45:ea:32:f3:4c:c2:38:9e:
d0:07:c1:45:23:63:45:0f:3e:70:5c:4b:81:fa:0a:03:8a:67:
53:2d:93:85:67:06:56:f4:5f:75:b4:0a:81:62:1a:41:25:d4:
9e:ee:ba:a6:62:d9:a8:18:f6:d0:dd:b8:82:2e:2f:66:85:dc:
64:10:96:00:35:79:40:84:e4:fb:b0:07:ca:0e:c2:bf:b1:2f:
66:6b:bd:eb:d6:41:ee:58:e3:42:8c:e8:fb:a8:12:0b:97:8d:
46:03:fa:66:cd:e1:31:5a:ea:43:95:06:63:29:5b:4d:29:42:
03:00:d9:91:3d:5f:2d:61:9b:7a:f2:27:7e:38:8c:34:48:d8:
b5:ab:75:4f:da:92:6f:89:c2:d1:74:7c:07:5a:b4:a4:f3:03:
d6:ed:76:8f:e8:75:53:92:48:79:bf:da:30:00:83:e9:7f:7c:
e8:75:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:31 2026 by rpki-client