This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/34352e3232352e36382e302f32332d3234203d3e20323636363730.roa
File: 34352e3232352e36382e302f32332d3234203d3e20323636363730.roa (raw, json)
Hash identifier: 0khr+wy+bLNyFHMdx8qpp1sEBccerOmNPblk1WJQwx8=
Subject key identifier: CA:9A:23:3F:87:43:E7:87:A9:33:31:56:21:0C:69:1B:B7:F5:AC:BD
Certificate issuer: /CN=841EE6C0920D7F05C7686B132A17AE71FCC549B8
Certificate serial: 3BC70B206BD240BD38EEA6D2369823B077B65076
Authority key identifier: 84:1E:E6:C0:92:0D:7F:05:C7:68:6B:13:2A:17:AE:71:FC:C5:49:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/34352e3232352e36382e302f32332d3234203d3e20323636363730.roa
Signing time: Tue 06 Jan 2026 19:07:29 +0000
ROA not before: Tue 06 Jan 2026 19:02:29 +0000
ROA not after: Tue 05 Jan 2027 19:07:29 +0000
asID: 266670
IP address blocks: 45.225.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.crl
rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c7:0b:20:6b:d2:40:bd:38:ee:a6:d2:36:98:23:b0:77:b6:50:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841EE6C0920D7F05C7686B132A17AE71FCC549B8
Validity
Not Before: Jan 6 19:02:29 2026 GMT
Not After : Jan 5 19:07:29 2027 GMT
Subject: CN=CA9A233F8743E787A9333156210C691BB7F5ACBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:62:12:2a:b7:90:3e:4a:57:3f:29:cc:6e:
85:9d:75:e2:0a:3c:d9:b7:92:ae:f0:9e:81:e7:77:
f3:f8:8b:45:b1:24:e3:44:c8:a4:bf:e0:fe:75:38:
21:77:7f:b2:25:87:fa:8d:a4:36:c7:12:01:0d:6a:
67:35:f2:f7:01:4c:a6:53:01:38:3c:f6:65:89:27:
18:46:a6:da:11:40:b9:1e:69:de:0f:c8:d6:cd:bc:
57:d4:6b:46:4e:3d:73:a8:cf:5c:f5:ed:2b:79:da:
c0:82:9d:23:18:00:bc:4f:21:24:64:bb:a2:56:cd:
0f:80:72:9b:c6:62:3e:cf:6f:32:66:24:85:00:52:
b6:34:d0:26:54:71:a5:4b:ed:05:b8:0d:65:9b:26:
2f:2b:98:cb:1a:69:4f:88:ad:8b:5f:54:b7:d7:1b:
8b:fb:27:2a:b5:ee:74:43:09:50:b3:c5:49:18:b8:
9a:b4:02:44:a8:2e:21:9a:90:7a:34:ce:68:a9:17:
44:0f:e1:39:8b:b4:e8:27:9c:eb:cb:66:88:0f:1d:
47:87:8e:5d:80:8a:5b:4a:67:4a:07:71:80:7b:12:
da:2e:d3:fa:76:f2:02:61:6e:65:10:e3:dd:48:c6:
2a:8b:7a:e8:a0:12:77:9a:c8:7c:d0:33:7f:10:ae:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9A:23:3F:87:43:E7:87:A9:33:31:56:21:0C:69:1B:B7:F5:AC:BD
X509v3 Authority Key Identifier:
keyid:84:1E:E6:C0:92:0D:7F:05:C7:68:6B:13:2A:17:AE:71:FC:C5:49:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/34352e3232352e36382e302f32332d3234203d3e20323636363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.68.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:da:dd:85:d9:42:ca:39:56:22:f5:c1:9e:5a:9c:f5:b4:e3:
5a:f8:29:c6:4b:14:89:03:bb:b4:8f:54:56:4e:41:fb:eb:09:
47:eb:fb:6f:87:47:60:f2:04:df:3d:fa:99:a7:22:a4:43:11:
c4:e6:bc:21:4c:13:cf:af:41:aa:6b:1e:08:f4:e5:95:8c:1c:
2d:b1:e8:7d:b3:59:1f:0c:2d:4d:b7:b7:1c:d3:9c:cc:d2:e0:
39:cb:67:a2:a0:2a:ce:7a:10:b4:26:da:b2:fd:11:1e:0b:91:
bd:2e:fa:92:ed:0d:3a:4c:01:64:e9:e9:36:12:6d:6e:90:b5:
29:ed:1f:26:0c:f6:ba:06:35:90:14:25:b5:a5:71:78:ae:95:
b1:1c:bc:27:d2:c5:4f:db:43:05:9b:e7:da:22:1b:5e:fb:f0:
3b:87:50:e0:c1:5e:ea:ab:60:cf:4c:13:bc:1c:ab:12:58:a2:
29:c6:99:84:40:2c:de:b6:3d:ef:34:ce:fe:ad:9a:71:10:49:
7c:a7:62:ed:4e:89:b0:bb:91:d4:18:53:e0:82:18:98:20:74:
e5:51:42:c1:1f:d4:f3:d2:34:a2:79:3e:57:38:b7:df:9e:56:
9b:6a:67:60:ca:a6:4a:15:2a:64:95:2b:38:60:97:7c:bf:6e:
87:00:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:17 2026 by rpki-client