This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32332d3233203d3e20323635353936.roa
File: 34352e3138312e34302e302f32332d3233203d3e20323635353936.roa (raw, json)
Hash identifier: FPFyXFG+54r3Fw2EQUZxqh+tZgJMt2OxvLBMCoavg4g=
Subject key identifier: D7:4A:F6:C5:0F:9B:C6:C8:90:14:8D:31:40:4C:33:40:6E:F5:52:81
Certificate issuer: /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Certificate serial: 74DC0501AD91C3DDB65CA02EBCCDDDE5E8A180B8
Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32332d3233203d3e20323635353936.roa
Signing time: Tue 06 Jan 2026 19:33:02 +0000
ROA not before: Tue 06 Jan 2026 19:28:02 +0000
ROA not after: Tue 05 Jan 2027 19:33:02 +0000
asID: 265596
IP address blocks: 45.181.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl
rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 11:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:dc:05:01:ad:91:c3:dd:b6:5c:a0:2e:bc:cd:dd:e5:e8:a1:80:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Validity
Not Before: Jan 6 19:28:02 2026 GMT
Not After : Jan 5 19:33:02 2027 GMT
Subject: CN=D74AF6C50F9BC6C890148D31404C33406EF55281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:48:6c:f4:bf:49:b2:d5:8f:4c:8f:49:68:
b7:b8:c1:3e:66:cb:e1:43:d7:3a:45:dc:1e:54:1e:
ae:fd:ea:23:f0:f9:24:cb:bc:4c:8f:f0:61:9e:ad:
81:1b:87:db:ff:38:16:76:e5:ec:81:1b:f3:c1:94:
df:7c:76:31:e4:74:03:9d:b1:f7:39:78:86:11:ef:
b8:be:97:52:58:eb:1c:a8:80:b4:a1:30:26:c1:0c:
37:72:10:7f:21:36:85:35:26:8d:76:b2:e3:3f:14:
06:89:c8:1b:40:5a:c1:8a:01:9e:3a:05:f2:ef:25:
b0:dd:c9:fe:20:94:a3:03:5a:44:cc:fe:83:f3:b1:
75:d9:d9:67:31:7c:07:5e:4f:66:73:43:07:61:e3:
5b:f3:dd:d7:e3:d1:d1:eb:3a:8a:e9:aa:f7:4f:d3:
d5:c0:a1:54:d7:62:1b:de:cc:b4:0a:89:b3:61:88:
9f:72:8d:c6:e8:74:c2:51:f1:b2:17:c1:c3:75:43:
0a:0c:df:dc:30:86:3e:b0:74:bc:13:da:a9:75:31:
0f:8c:43:37:bd:60:0c:80:5b:2a:9e:2a:50:ad:0c:
80:02:c4:2a:d1:dd:3c:f0:39:62:b4:31:f9:71:64:
49:ea:f8:cd:3f:64:f5:b8:37:1d:2e:31:5c:11:19:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4A:F6:C5:0F:9B:C6:C8:90:14:8D:31:40:4C:33:40:6E:F5:52:81
X509v3 Authority Key Identifier:
keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32332d3233203d3e20323635353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.40.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:14:60:12:8d:9c:45:e3:65:b1:89:21:b5:14:75:f0:f2:a5:
50:5b:83:7a:23:d1:4d:92:e6:ac:36:37:8f:1c:59:33:13:7c:
bf:2f:f2:50:6b:cf:87:fa:eb:e6:8f:b0:48:91:17:ab:bb:fd:
0f:5a:6f:09:33:98:20:24:ef:b2:45:9d:9a:c1:2c:46:5c:aa:
48:30:a2:ce:1a:52:d1:f9:21:67:71:36:cd:2f:42:af:81:5b:
79:b7:17:1f:68:a9:1f:89:35:3b:c4:93:c1:65:f2:26:a0:71:
62:55:4e:50:5f:ea:81:8d:3e:91:a7:aa:2d:e6:ae:18:b7:e9:
4c:33:9c:a2:b1:c2:fe:7b:a2:37:9b:3c:1c:68:b7:49:39:65:
15:d5:6d:ba:9e:12:09:ff:29:f2:36:fd:d3:7f:8d:5e:0b:45:
b3:65:5d:2b:aa:b4:46:54:5e:bf:b0:7a:4e:01:1d:55:7f:8e:
ae:e1:3b:57:f4:d9:cf:67:cb:97:57:be:f4:1a:da:c7:4a:c7:
cb:c5:a5:54:6b:a0:ff:cd:99:1d:ea:64:82:ce:fb:17:d4:94:
3c:43:b6:2e:de:0f:41:fc:5c:07:f6:14:da:75:0f:ec:3c:66:
7d:71:c7:04:10:aa:c2:6d:c7:7d:6a:e3:8f:46:86:61:77:c2:
92:fc:71:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:28 2026 by rpki-client