This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa
File: 34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa (raw, json)
Hash identifier: 6RDAI3z7rB3yn3uOS79gmGYQxkXQLkw1NPzSXRZna68=
Subject key identifier: 5F:0D:0D:F1:6C:25:5B:1D:61:1B:43:08:E6:82:31:EB:67:B6:0D:1E
Certificate issuer: /CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
Certificate serial: 6791CBFD2A4763B8D829B4DFBC024651C3325BF1
Authority key identifier: 88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa
Signing time: Tue 06 Jan 2026 20:58:33 +0000
ROA not before: Tue 06 Jan 2026 20:53:33 +0000
ROA not after: Tue 05 Jan 2027 20:58:33 +0000
asID: 272878
IP address blocks: 45.191.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl
rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 08:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:91:cb:fd:2a:47:63:b8:d8:29:b4:df:bc:02:46:51:c3:32:5b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
Validity
Not Before: Jan 6 20:53:33 2026 GMT
Not After : Jan 5 20:58:33 2027 GMT
Subject: CN=5F0D0DF16C255B1D611B4308E68231EB67B60D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:71:ec:a8:86:ea:ab:7e:42:6f:39:31:4f:
0a:d3:32:83:d8:63:b9:ba:9d:d3:da:eb:60:a0:5d:
59:74:a2:16:26:0a:fa:42:bf:87:0c:34:30:9e:b6:
ed:fa:6c:31:b4:b2:a0:a0:ad:af:78:8b:81:09:84:
14:8e:cd:6f:ca:82:d5:7a:76:1a:8c:47:5d:4b:fd:
ce:c4:34:98:08:9a:be:4c:3d:38:05:f5:f3:e8:35:
c7:e1:fd:dd:1b:41:92:d3:98:98:bc:4d:7a:18:c0:
6e:3e:51:83:2a:6b:22:67:e0:e6:9f:1e:50:9e:58:
ff:be:3e:a6:37:21:ec:b2:11:c3:11:c2:82:38:cf:
48:f7:0a:d7:3e:2c:ed:c7:40:8e:79:96:60:df:f6:
9c:6c:4f:35:94:09:8d:fc:4d:04:f9:5b:91:16:95:
cc:64:1a:6b:42:b5:ce:73:73:d6:02:9e:2f:a1:23:
3f:38:0b:71:b5:b8:62:01:47:77:5f:fd:57:2f:86:
52:92:07:8b:67:b6:25:9a:e3:e3:8d:8f:0f:f4:8d:
4b:a3:6a:a3:9d:fd:6a:28:32:a4:2e:d6:68:11:73:
5e:2e:f1:16:34:ee:56:a6:2d:91:2f:5c:b6:ff:1d:
35:a8:c6:6c:a8:1c:e1:16:f2:81:55:86:d3:62:eb:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0D:0D:F1:6C:25:5B:1D:61:1B:43:08:E6:82:31:EB:67:B6:0D:1E
X509v3 Authority Key Identifier:
keyid:88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.194.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1b:32:4d:81:fe:77:a5:48:88:14:be:ec:04:53:f1:75:da:
5b:8f:ac:66:3b:5c:e2:8e:bc:28:36:7f:c5:8f:b3:fd:67:7f:
5d:b1:19:86:29:7f:d8:51:03:b1:1e:09:f0:34:a5:28:79:86:
0e:e0:0c:72:0b:c5:32:66:54:0e:18:41:6e:30:ad:09:d5:b6:
6d:62:be:db:10:20:40:e9:0d:1a:43:02:8d:e7:3f:37:24:1e:
4a:0e:38:f5:ac:f9:b6:d4:ba:88:4b:b3:60:77:ab:9b:a0:d1:
85:4c:d3:bd:8d:e3:02:e6:6b:e0:da:23:51:59:a2:e0:54:2a:
e0:0c:7f:59:70:2e:72:dc:d1:a5:be:99:cd:e6:8f:5e:4b:19:
60:10:69:d4:b3:cc:51:ef:09:a2:ac:eb:55:ff:0e:ba:03:e4:
0a:18:39:57:6a:a7:37:c4:f8:db:cb:e4:b4:73:b1:55:9f:ab:
da:40:9e:9b:db:3b:55:a0:8b:f3:34:6e:36:a8:84:9b:32:45:
41:7f:d2:83:d3:33:02:a4:96:54:3a:aa:82:63:32:e3:92:aa:
30:f4:f3:64:4f:ad:4e:8c:e2:37:5c:1f:a6:13:60:6d:f0:53:
99:4e:09:f1:33:55:13:b2:b2:89:b3:25:4e:57:7f:3b:a4:1f:
cc:32:78:71
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZ5HL/SpHY7jYKbTfvAJGUcMyW/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5RDBFMDVEMDIzN0U2QkM2ODczMUI3Nzk4QTFENjJG
QTNBRTc5MTAeFw0yNjAxMDYyMDUzMzNaFw0yNzAxMDUyMDU4MzNaMDMxMTAvBgNV
BAMTKDVGMEQwREYxNkMyNTVCMUQ2MTFCNDMwOEU2ODIzMUVCNjdCNjBEMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYnHsqIbqq35CbzkxTwrTMoPY
Y7m6ndPa62CgXVl0ohYmCvpCv4cMNDCetu36bDG0sqCgra94i4EJhBSOzW/KgtV6
dhqMR11L/c7ENJgImr5MPTgF9fPoNcfh/d0bQZLTmJi8TXoYwG4+UYMqayJn4Oaf
HlCeWP++PqY3IeyyEcMRwoI4z0j3Ctc+LO3HQI55lmDf9pxsTzWUCY38TQT5W5EW
lcxkGmtCtc5zc9YCni+hIz84C3G1uGIBR3df/VcvhlKSB4tntiWa4+ONjw/0jUuj
aqOd/WooMqQu1mgRc14u8RY07lamLZEvXLb/HTWoxmyoHOEW8oFVhtNi62rxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXw0N8WwlWx1hG0MI5oIx62e2DR4wHwYDVR0j
BBgwFoAUiJ0OBdAjfmvGhzG3eYodYvo655EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NTIxQzE1QzE0RTRDNjM2OTlCMTYyQjY0RTg2RTRCQ0Qx
NzAyMjFGRjEzRjYyQTVENkQxQjREQkI3ODQwOEMyLzAvODg5RDBFMDVEMDIzN0U2
QkM2ODczMUI3Nzk4QTFENjJGQTNBRTc5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODlEMEUwNUQwMjM3RTZCQzY4
NzMxQjc3OThBMUQ2MkZBM0FFNzkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTUyMUMxNUMxNEU0QzYzNjk5QjE2MkI2NEU4NkU0QkNEMTcwMjIxRkYx
M0Y2MkE1RDZEMUI0REJCNzg0MDhDMi8wLzM0MzUyZTMxMzkzMTJlMzEzOTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzgzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb/C
MA0GCSqGSIb3DQEBCwUAA4IBAQCRGzJNgf53pUiIFL7sBFPxddpbj6xmO1zijrwo
Nn/Fj7P9Z39dsRmGKX/YUQOxHgnwNKUoeYYO4AxyC8UyZlQOGEFuMK0J1bZtYr7b
ECBA6Q0aQwKN5z83JB5KDjj1rPm21LqIS7Ngd6uboNGFTNO9jeMC5mvg2iNRWaLg
VCrgDH9ZcC5y3NGlvpnN5o9eSxlgEGnUs8xR7wmirOtV/w66A+QKGDlXaqc3xPjb
y+S0c7FVn6vaQJ6b2ztVoIvzNG42qISbMkVBf9KD0zMCpJZUOqqCYzLjkqow9PNk
T61OjOI3XB+mE2Bt8FOZTgnxM1UTsrKJsyVOV387pB/MMnhx
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:47 2026 by rpki-client