This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa
File: 34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa (raw, json)
Hash identifier: rLRe4kMrLHUwFBLZXMay1+7+ZHHUsBxG6+CNcy7ZhHg=
Subject key identifier: FC:3E:83:75:69:11:A7:99:B4:FD:3C:5D:22:D3:C2:10:48:38:72:93
Certificate issuer: /CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
Certificate serial: 1674473101FCDF57C26C6CD3341A981350BDABA3
Authority key identifier: 88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa
Signing time: Tue 06 Jan 2026 20:58:34 +0000
ROA not before: Tue 06 Jan 2026 20:53:34 +0000
ROA not after: Tue 05 Jan 2027 20:58:34 +0000
asID: 269933
IP address blocks: 45.191.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl
rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 08:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:74:47:31:01:fc:df:57:c2:6c:6c:d3:34:1a:98:13:50:bd:ab:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
Validity
Not Before: Jan 6 20:53:34 2026 GMT
Not After : Jan 5 20:58:34 2027 GMT
Subject: CN=FC3E83756911A799B4FD3C5D22D3C21048387293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:a9:57:94:c0:ca:f2:04:3c:f8:51:f8:9b:
24:be:5e:9a:12:7b:1a:b9:49:7a:d4:50:4f:6d:c9:
27:bc:07:fd:78:bb:17:b3:6f:20:97:ab:d8:f9:7a:
b4:41:36:99:ce:0a:ab:f0:a9:9e:85:25:02:6c:92:
71:d0:ed:88:32:5b:8d:2d:9f:1d:f0:1a:44:5a:3a:
2c:d2:a6:6d:47:b5:ac:32:5a:70:43:e2:ac:78:15:
16:27:d2:c7:7a:69:71:c6:02:1e:de:60:d2:08:23:
b2:d1:07:9e:d9:43:75:87:42:c8:59:cc:53:f8:ba:
50:50:bb:fa:7b:ad:30:14:3e:9e:ce:16:79:f8:d4:
c2:ae:5d:75:35:53:c5:99:01:70:36:c8:88:6e:97:
08:3c:72:da:ad:8c:90:97:9e:01:87:d8:4e:9c:b5:
01:12:d9:06:96:36:73:d8:76:29:65:28:6e:96:71:
88:2d:c7:7e:50:4f:ef:fc:0c:70:01:57:4b:5f:4e:
77:a7:3b:58:3b:10:40:52:2f:0b:99:a8:03:b2:af:
6a:02:16:8c:ec:eb:08:78:61:f4:19:5e:b5:f3:4f:
70:7d:e2:66:89:50:7e:c0:c7:04:a7:f4:90:13:db:
0f:8d:d2:3c:06:3c:9b:ee:59:13:7f:33:0c:33:d9:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3E:83:75:69:11:A7:99:B4:FD:3C:5D:22:D3:C2:10:48:38:72:93
X509v3 Authority Key Identifier:
keyid:88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.192.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:23:67:b2:d3:5b:9a:2c:e8:a2:18:bd:9b:cc:e5:e7:39:e6:
fa:7d:03:4f:d6:8a:ed:38:8e:9e:7d:a5:27:9a:38:93:3d:fd:
04:e7:5d:20:f9:3a:b2:7e:20:aa:1a:4d:76:96:43:72:9f:b0:
ab:a8:c3:ab:b7:50:31:38:f9:44:11:83:97:a4:96:61:17:e3:
ee:22:d9:f9:2f:b2:8d:61:cc:65:b3:d8:2b:28:c1:d2:6d:06:
76:2b:12:6b:1d:4c:90:f9:dc:11:27:c9:14:a7:db:36:2a:89:
7c:0c:a6:53:70:d1:62:be:e6:fc:31:59:8d:ff:f0:9f:76:5f:
5c:37:97:3b:6f:4b:66:71:76:34:ef:72:5c:73:62:c3:fd:a4:
59:93:0f:04:cd:aa:2a:ba:bd:6c:0e:c2:8c:91:ec:81:1b:7a:
cb:e7:52:f5:7c:85:65:b7:63:86:b6:97:37:e4:98:6a:ec:a5:
67:d7:fb:69:86:0d:c6:9e:79:cf:90:be:84:7d:16:16:7a:0b:
39:c6:c3:0c:21:9e:3e:71:12:68:3b:d3:b7:3e:23:fe:07:dc:
67:13:84:25:6b:d5:8e:ee:9a:46:46:84:c1:13:c5:a8:b8:9e:
c4:74:ec:30:f8:18:2a:29:0a:4d:58:09:f0:3c:08:a6:94:7a:
d4:b3:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:35 2026 by rpki-client