This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3C261D60CFF2CC817F1BDD37CA53735F214946BAA128FD0196CCF77B7157403/0/34352e3232382e37322e302f32322d3232203d3e20323636363734.roa
File: 34352e3232382e37322e302f32322d3232203d3e20323636363734.roa (raw, json)
Hash identifier: IszbGdRSQq0BtI5KFGuXPhEY0Wnht4X05lLV9oJqoM4=
Subject key identifier: 3A:46:B5:52:0E:6A:28:2B:E4:F1:F0:97:A3:5C:9F:E1:E0:2A:11:32
Certificate issuer: /CN=8AB2A1D33EB248DC5F5F6C58C06621168CF54033
Certificate serial: 60427528232AD733737E18C24FF017F99E265E31
Authority key identifier: 8A:B2:A1:D3:3E:B2:48:DC:5F:5F:6C:58:C0:66:21:16:8C:F5:40:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB2A1D33EB248DC5F5F6C58C06621168CF54033.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3C261D60CFF2CC817F1BDD37CA53735F214946BAA128FD0196CCF77B7157403/0/34352e3232382e37322e302f32322d3232203d3e20323636363734.roa
Signing time: Wed 07 Jan 2026 00:00:00 +0000
ROA not before: Tue 06 Jan 2026 23:55:00 +0000
ROA not after: Wed 06 Jan 2027 00:00:00 +0000
asID: 266674
IP address blocks: 45.228.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A3C261D60CFF2CC817F1BDD37CA53735F214946BAA128FD0196CCF77B7157403/0/8AB2A1D33EB248DC5F5F6C58C06621168CF54033.crl
rsync://repository.lacnic.net/rpki/lacnic/A3C261D60CFF2CC817F1BDD37CA53735F214946BAA128FD0196CCF77B7157403/0/8AB2A1D33EB248DC5F5F6C58C06621168CF54033.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB2A1D33EB248DC5F5F6C58C06621168CF54033.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:42:75:28:23:2a:d7:33:73:7e:18:c2:4f:f0:17:f9:9e:26:5e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AB2A1D33EB248DC5F5F6C58C06621168CF54033
Validity
Not Before: Jan 6 23:55:00 2026 GMT
Not After : Jan 6 00:00:00 2027 GMT
Subject: CN=3A46B5520E6A282BE4F1F097A35C9FE1E02A1132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:db:4e:c0:14:47:22:16:5d:85:0a:cb:fa:
b6:f1:cc:43:9d:3f:5b:b4:0f:a9:d9:fe:66:1d:60:
f3:e1:f0:95:b5:df:97:6b:fa:05:2a:03:17:66:b8:
1a:d5:0b:a7:25:16:0c:75:f1:c2:6b:1f:34:14:d1:
e2:98:b4:67:5c:cd:5a:55:57:eb:35:81:76:f3:4a:
c5:93:64:1c:58:9c:a1:94:73:f3:1e:09:a8:55:df:
ac:c0:bf:52:1f:5d:7e:cc:6f:bd:b5:bb:27:87:78:
0a:0f:1f:f8:4f:ad:c7:9f:62:02:c2:a5:c9:e9:ae:
99:04:21:6c:f9:e6:1c:35:ec:bd:eb:a8:16:c0:49:
a8:26:cb:da:27:55:e2:3c:d1:95:82:4a:87:40:88:
2e:f6:21:5c:27:4d:f6:8f:3c:68:ec:40:8d:84:36:
3e:72:27:69:44:b7:26:41:7d:5b:3a:7c:a4:f8:4b:
26:99:80:02:7e:a6:80:62:92:fb:25:f4:7f:b3:93:
d4:1b:e3:9b:22:19:2d:dc:82:5a:de:c7:69:ce:d6:
05:ac:53:8f:0a:7a:9b:47:08:26:62:df:7d:a3:d9:
fb:33:1d:e3:46:5a:9b:30:44:63:34:4d:5e:67:74:
8a:21:f2:c5:6c:b7:40:7b:1b:ed:45:ec:19:11:98:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:46:B5:52:0E:6A:28:2B:E4:F1:F0:97:A3:5C:9F:E1:E0:2A:11:32
X509v3 Authority Key Identifier:
keyid:8A:B2:A1:D3:3E:B2:48:DC:5F:5F:6C:58:C0:66:21:16:8C:F5:40:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3C261D60CFF2CC817F1BDD37CA53735F214946BAA128FD0196CCF77B7157403/0/8AB2A1D33EB248DC5F5F6C58C06621168CF54033.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB2A1D33EB248DC5F5F6C58C06621168CF54033.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3C261D60CFF2CC817F1BDD37CA53735F214946BAA128FD0196CCF77B7157403/0/34352e3232382e37322e302f32322d3232203d3e20323636363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.72.0/22
Signature Algorithm: sha256WithRSAEncryption
86:49:9e:e9:4d:70:e7:02:54:9c:c5:cc:06:70:1e:b7:29:31:
58:8d:0c:b7:01:e3:23:13:71:12:89:a8:ac:62:15:a8:39:31:
2f:55:47:c8:91:24:a0:ce:4e:75:ff:22:e6:78:6a:49:74:fc:
2a:b7:0e:4d:b0:b7:0d:d1:cb:6b:31:30:44:77:ea:ff:22:9a:
7f:ad:b9:98:ee:4c:2d:eb:e3:7a:96:66:44:95:bc:ac:2e:26:
1c:24:67:d2:18:bd:63:b0:e0:f1:d9:46:bf:3d:63:44:71:ec:
1f:2b:93:39:13:80:dd:4f:6e:48:ee:e9:d8:af:76:82:01:45:
fb:0f:4a:06:d8:1a:61:a4:3f:db:07:f9:34:51:ff:11:c2:7c:
80:d3:f9:bd:73:c4:20:81:fb:e8:2b:be:3a:d0:b8:55:20:cf:
61:06:0f:1b:74:94:c1:64:80:65:4f:0d:66:e3:f4:66:1d:63:
4d:32:9d:92:0d:d2:00:87:f1:e2:c7:af:4f:18:23:04:03:ad:
f8:59:09:1e:32:7f:1a:6c:b6:7a:fe:0e:98:cc:dd:10:28:20:
a6:b0:0d:65:38:16:25:b0:a2:12:d0:4c:a3:6c:d9:b4:ce:4c:
97:87:f9:4c:1c:4f:6d:48:95:77:af:1d:d8:83:21:c8:43:37:
a3:48:0a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:28:09 2026 by rpki-client