This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/34352e3137352e32312e302f32342d3234203d3e2037303439.roa
File: 34352e3137352e32312e302f32342d3234203d3e2037303439.roa (raw, json)
Hash identifier: g8hHWzP4kDSiOiSHBMQM7MYWGMPCqeG59pSNv4PvdWU=
Subject key identifier: CD:47:1E:AC:15:C4:43:82:63:77:98:40:CD:B5:11:89:53:D6:FF:22
Certificate issuer: /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
Certificate serial: 6A43709B0E59956240CC94D9B675ED53BA469C57
Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/34352e3137352e32312e302f32342d3234203d3e2037303439.roa
Signing time: Tue 06 Jan 2026 19:38:01 +0000
ROA not before: Tue 06 Jan 2026 19:33:01 +0000
ROA not after: Tue 05 Jan 2027 19:38:01 +0000
asID: 7049
IP address blocks: 45.175.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl
rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 08:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:43:70:9b:0e:59:95:62:40:cc:94:d9:b6:75:ed:53:ba:46:9c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
Validity
Not Before: Jan 6 19:33:01 2026 GMT
Not After : Jan 5 19:38:01 2027 GMT
Subject: CN=CD471EAC15C4438263779840CDB5118953D6FF22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:b0:33:0a:1a:74:1a:0f:ff:b8:0b:5f:d7:
7c:1b:f6:f3:e2:78:87:c5:79:fc:55:66:29:82:7f:
d7:1c:1d:4d:40:d4:b9:31:88:5b:b0:55:f7:9f:11:
9e:60:1e:b4:e5:0c:51:5d:0e:5b:dc:c6:9e:c7:08:
4a:33:0e:0a:38:8c:9c:4c:ad:5e:a8:95:2a:4a:f1:
c2:f4:88:98:a5:51:5a:44:0a:25:df:41:46:60:fa:
2f:6a:20:7f:e3:da:d7:75:e0:9b:b4:48:9f:f2:2a:
fa:ea:db:80:fe:7e:c2:c1:49:2a:3c:c6:95:d9:af:
b8:9f:84:2c:06:06:f1:87:0d:64:c3:f2:58:9e:a5:
6e:8b:d4:0a:f5:04:7a:74:ba:de:8d:65:c2:c6:c6:
09:24:71:4b:89:43:8d:90:a9:5e:2f:69:38:1e:e5:
2e:a0:c5:2d:71:b0:ab:a8:fb:c4:93:32:36:a1:89:
8b:ab:bd:08:29:96:82:d2:b7:ca:0d:34:5c:a8:7d:
ec:84:83:39:ff:a1:1f:86:87:ab:a4:1d:ec:37:84:
e7:c4:cd:71:4d:aa:0b:5a:c3:c2:ca:8b:b7:eb:4a:
70:ca:73:3a:77:0e:46:53:91:2e:56:46:d3:23:7d:
5d:9c:17:c9:6f:a8:3e:f6:60:e5:c3:b5:93:1e:34:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:47:1E:AC:15:C4:43:82:63:77:98:40:CD:B5:11:89:53:D6:FF:22
X509v3 Authority Key Identifier:
keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/34352e3137352e32312e302f32342d3234203d3e2037303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.21.0/24
Signature Algorithm: sha256WithRSAEncryption
98:47:86:21:99:06:76:00:b5:67:f6:38:a0:c0:fe:d5:d0:f0:
7c:2e:b1:14:cf:1a:f2:4e:b9:8a:2f:f5:8c:c2:64:f6:4b:42:
d3:8a:c7:11:77:12:6d:3c:be:17:35:36:f6:a2:b4:07:13:40:
35:49:a4:cb:f1:e3:7d:e9:eb:ca:02:84:6f:61:0d:f2:3a:4f:
17:ce:68:f6:f0:eb:c8:49:42:96:7f:2d:14:f9:47:56:e5:91:
62:dd:62:87:d9:9c:f2:a1:95:0f:93:5d:be:9d:7a:3d:c1:e8:
81:26:b5:b9:fa:cb:27:39:dd:51:2d:3c:df:5c:b1:8d:dd:48:
69:1c:41:81:14:3d:a0:b3:01:fe:c4:97:ea:f7:05:ea:4f:62:
5a:b0:02:8d:97:35:64:e5:ee:71:98:19:08:9d:80:e3:6d:f6:
8b:13:12:7e:2a:07:f4:1b:41:ab:37:46:47:e2:38:b6:c6:22:
cc:9f:ad:d8:57:a4:7a:3e:b2:e0:6b:84:49:11:4b:b7:e1:c2:
ce:09:85:be:b5:4a:94:21:83:08:f2:a5:7e:e4:4d:4a:f3:23:
0d:64:93:77:97:95:83:f5:07:2b:a6:b3:d1:1a:7f:d0:21:32:
94:45:17:70:72:fa:b8:28:e5:0e:a6:92:0e:c7:b2:41:3b:70:
7a:49:66:3f
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUakNwmw5ZlWJAzJTZtnXtU7pGnFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBGRDcwREMzMDFGRjkzRDI4OEVEODUxQzNBNjlCMjJE
N0IwNDIyMDAeFw0yNjAxMDYxOTMzMDFaFw0yNzAxMDUxOTM4MDFaMDMxMTAvBgNV
BAMTKENENDcxRUFDMTVDNDQzODI2Mzc3OTg0MENEQjUxMTg5NTNENkZGMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjbAzChp0Gg//uAtf13wb9vPi
eIfFefxVZimCf9ccHU1A1LkxiFuwVfefEZ5gHrTlDFFdDlvcxp7HCEozDgo4jJxM
rV6olSpK8cL0iJilUVpECiXfQUZg+i9qIH/j2td14Ju0SJ/yKvrq24D+fsLBSSo8
xpXZr7ifhCwGBvGHDWTD8liepW6L1Ar1BHp0ut6NZcLGxgkkcUuJQ42QqV4vaTge
5S6gxS1xsKuo+8STMjahiYurvQgploLSt8oNNFyofeyEgzn/oR+Gh6ukHew3hOfE
zXFNqgtaw8LKi7frSnDKczp3DkZTkS5WRtMjfV2cF8lvqD72YOXDtZMeNFjnAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUzUcerBXEQ4Jjd5hAzbURiVPW/yIwHwYDVR0j
BBgwFoAUIP1w3DAf+T0ojthRw6abItewQiAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQTIwRjM3RTFCRDYyQTUxQTk5REVENkI0QTEzOEIwNzBD
RTFCOUQzQjNCQUU2M0Y1NTVCMDU3OTAwNUYyMzAwLzAvMjBGRDcwREMzMDFGRjkz
RDI4OEVEODUxQzNBNjlCMjJEN0IwNDIyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEZENzBEQzMwMUZGOTNEMjg4
RUQ4NTFDM0E2OUIyMkQ3QjA0MjIwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkEyMEYzN0UxQkQ2MkE1MUE5OURFRDZCNEExMzhCMDcwQ0UxQjlEM0Iz
QkFFNjNGNTU1QjA1NzkwMDVGMjMwMC8wLzM0MzUyZTMxMzczNTJlMzIzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzAzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa8VMA0GCSqG
SIb3DQEBCwUAA4IBAQCYR4YhmQZ2ALVn9jigwP7V0PB8LrEUzxryTrmKL/WMwmT2
S0LTiscRdxJtPL4XNTb2orQHE0A1SaTL8eN96evKAoRvYQ3yOk8Xzmj28OvISUKW
fy0U+UdW5ZFi3WKH2ZzyoZUPk12+nXo9weiBJrW5+ssnOd1RLTzfXLGN3UhpHEGB
FD2gswH+xJfq9wXqT2JasAKNlzVk5e5xmBkInYDjbfaLExJ+Kgf0G0GrN0ZH4ji2
xiLMn63YV6R6PrLga4RJEUu34cLOCYW+tUqUIYMI8qV+5E1K8yMNZJN3l5WD9Qcr
prPRGn/QITKURRdwcvq4KOUOppIOx7JBO3B6SWY/
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:12 2026 by rpki-client