This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/34352e3137352e34302e302f32322d3234203d3e20323635383136.roa
File: 34352e3137352e34302e302f32322d3234203d3e20323635383136.roa (raw, json)
Hash identifier: 3ErmpPMErSPDuoUkzGuGVFVJxbTy+x1iy0kuwA7xGrk=
Subject key identifier: 41:A3:00:08:6E:4F:9E:FB:8C:51:3B:76:20:1A:5C:0C:98:6C:31:F0
Certificate issuer: /CN=9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996
Certificate serial: 57D27E957F6DD4E3774FA59765C79BD1A2A593DA
Authority key identifier: 9F:9A:55:54:E1:BA:C2:CE:4F:27:F7:B2:8B:3D:29:01:6A:1B:99:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/34352e3137352e34302e302f32322d3234203d3e20323635383136.roa
Signing time: Wed 24 Dec 2025 13:56:00 +0000
ROA not before: Wed 24 Dec 2025 13:51:00 +0000
ROA not after: Wed 23 Dec 2026 13:56:00 +0000
asID: 265816
IP address blocks: 45.175.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.crl
rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d2:7e:95:7f:6d:d4:e3:77:4f:a5:97:65:c7:9b:d1:a2:a5:93:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996
Validity
Not Before: Dec 24 13:51:00 2025 GMT
Not After : Dec 23 13:56:00 2026 GMT
Subject: CN=41A300086E4F9EFB8C513B76201A5C0C986C31F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:08:7a:68:dd:9b:e3:98:d9:e4:2e:8c:6e:
d1:bf:71:a3:ae:df:e9:f7:ac:79:18:3c:95:83:78:
af:f8:4c:b5:e4:6a:df:64:0d:82:3f:9d:b3:19:44:
8c:c9:0e:92:01:7b:09:84:9e:04:8b:14:c7:ca:c1:
ce:d7:e6:fe:1d:62:86:c6:fd:a0:d4:89:e7:75:0a:
9e:b6:68:48:92:e1:db:90:c3:d8:b6:57:ff:f5:c8:
2c:fc:80:29:81:dd:23:16:1f:7e:c9:1b:93:41:7c:
60:ed:8e:8c:00:ff:80:65:de:34:ad:07:55:a6:6e:
49:70:d6:9b:7a:0e:de:d9:5c:82:3b:67:ee:f4:b1:
06:87:f5:c9:d9:7a:a1:49:e7:31:70:2e:ff:b7:d3:
bb:60:da:33:67:06:12:8f:ce:86:39:f4:96:9f:bb:
25:dd:d7:89:3a:47:e7:91:6c:6d:5a:92:26:32:8b:
81:6a:ef:09:8d:49:64:83:9c:35:5b:4d:e5:8b:0c:
19:f2:c5:82:d1:90:ed:0b:79:dd:f4:5b:3f:8f:e7:
d7:31:0f:46:f7:2d:f9:48:76:eb:1e:21:85:f7:00:
69:b2:29:f8:46:83:c8:53:08:a0:2e:52:4b:e0:e2:
c9:83:49:a0:76:87:22:5f:2d:4e:e4:1f:21:18:30:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A3:00:08:6E:4F:9E:FB:8C:51:3B:76:20:1A:5C:0C:98:6C:31:F0
X509v3 Authority Key Identifier:
keyid:9F:9A:55:54:E1:BA:C2:CE:4F:27:F7:B2:8B:3D:29:01:6A:1B:99:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/34352e3137352e34302e302f32322d3234203d3e20323635383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:01:78:ae:92:d1:01:b3:98:b2:b4:57:27:39:1c:8d:d9:39:
72:fd:34:f2:ee:b4:dc:d1:3d:4c:ed:68:46:69:de:95:3f:40:
f3:83:b4:10:e4:56:85:f0:ab:e9:4a:c4:02:2d:2c:36:8c:e3:
c1:e9:2f:3d:88:a5:16:63:3e:d9:8c:2b:63:cf:b9:7d:ec:2d:
da:1e:20:68:a1:ca:57:d0:3c:e4:2e:2c:fd:f1:07:30:21:28:
d4:14:61:8d:36:fd:bb:67:5c:b1:80:07:7b:55:e0:db:67:2f:
e5:37:95:c9:c0:be:27:31:d8:16:50:33:47:d2:08:15:aa:a6:
9b:20:46:83:bd:22:e9:b0:31:70:c3:59:4a:34:31:49:a0:38:
7b:8f:9b:fe:70:e2:f5:20:2e:e3:c9:99:01:f2:ac:b0:9c:5e:
8c:54:7f:f6:94:60:dc:c1:82:01:93:84:bd:3e:33:e2:fe:b4:
5f:71:67:4e:97:1d:3e:f8:54:d4:48:77:35:c7:5b:a6:31:de:
a6:41:e7:fb:60:6d:16:09:21:6d:0b:0c:7f:37:05:d1:b4:38:
35:5e:69:f0:db:e1:47:a7:0a:e0:2a:ab:29:fb:9f:df:4d:fc:
66:95:37:a5:d4:74:f3:15:64:13:3e:f1:cb:d0:b8:5f:77:d6:
6b:2e:56:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:34 2026 by rpki-client