This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33322e302f32332d3233203d3e20323636383435.roa
File: 34352e3233392e33322e302f32332d3233203d3e20323636383435.roa (raw, json)
Hash identifier: NKpHdOExKIx7SR0BfkGurJZP1IILUkCDo2Y9A9u5taQ=
Subject key identifier: CE:33:4B:A5:49:81:A6:4A:62:F8:49:ED:8A:B6:9D:36:44:4A:95:DB
Certificate issuer: /CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Certificate serial: 66C6636FF529A844C3425C19485CB98F5562C315
Authority key identifier: 9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33322e302f32332d3233203d3e20323636383435.roa
Signing time: Tue 06 Jan 2026 19:14:30 +0000
ROA not before: Tue 06 Jan 2026 19:09:30 +0000
ROA not after: Tue 05 Jan 2027 19:14:30 +0000
asID: 266845
IP address blocks: 45.239.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl
rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 14:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c6:63:6f:f5:29:a8:44:c3:42:5c:19:48:5c:b9:8f:55:62:c3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Validity
Not Before: Jan 6 19:09:30 2026 GMT
Not After : Jan 5 19:14:30 2027 GMT
Subject: CN=CE334BA54981A64A62F849ED8AB69D36444A95DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:ac:56:5c:bd:d1:03:61:e5:59:d1:30:c1:
94:2e:c4:31:7c:6c:14:02:a4:52:c7:f9:63:aa:15:
18:3d:d9:de:08:0e:5e:0d:64:f1:b5:f3:5e:c4:7c:
d9:f3:78:be:36:46:96:ca:96:cc:aa:12:09:8d:c8:
75:e0:6b:e7:4f:66:57:96:64:3a:ca:0c:a8:2c:42:
34:cd:79:ac:cc:2a:5d:78:88:1e:ca:86:e7:4d:c1:
a0:ae:79:5c:d9:2c:d4:93:fd:77:8e:13:5f:3f:c1:
a9:42:b5:46:b5:52:18:23:98:a7:93:35:cd:93:fe:
5c:8a:c1:76:5c:5a:52:ed:48:bc:94:84:d5:1c:71:
aa:87:3e:a7:58:66:28:ba:ed:58:0a:83:f4:ab:ba:
e4:ad:85:c8:88:8d:97:c2:3d:54:b4:bf:66:f6:25:
64:b3:6f:a5:ab:18:4b:6a:b7:ae:f2:4c:ec:3d:d3:
d1:34:7e:d4:27:2e:61:21:67:60:72:ec:96:14:80:
3d:98:46:9a:35:9d:fc:88:e1:33:f9:ff:9a:2f:8a:
d6:c7:f1:03:f2:c3:c8:0d:af:6f:fc:ca:46:8d:5a:
12:69:c2:6f:df:fe:3b:69:fc:94:a1:49:f9:25:04:
20:4e:e8:b3:04:74:18:39:17:82:f6:3b:25:98:23:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:33:4B:A5:49:81:A6:4A:62:F8:49:ED:8A:B6:9D:36:44:4A:95:DB
X509v3 Authority Key Identifier:
keyid:9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33322e302f32332d3233203d3e20323636383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.32.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:f7:73:4a:32:37:b5:a2:d8:f6:63:03:05:a7:ea:74:b2:f2:
bb:3c:e5:9a:d4:a2:01:8b:bd:0a:cd:75:81:5a:3b:4d:a1:f7:
cf:79:d7:09:24:9e:b4:ee:a7:a5:fd:d0:11:f5:19:a6:82:df:
b8:9e:e1:71:77:99:f3:d1:c7:d2:3a:49:ce:5c:25:34:09:4a:
b8:77:c7:ff:a4:24:b7:01:55:33:5f:2a:60:e6:76:a4:c1:bf:
0c:c8:96:bc:62:1e:bc:7a:ee:c8:82:a6:e8:a2:db:a5:d0:d4:
a7:17:3b:54:8d:86:10:c4:73:12:26:87:0e:5c:a0:13:a9:a9:
6a:db:10:94:9b:6d:0c:a3:1c:29:31:4d:47:d2:d3:d2:91:74:
64:1a:28:85:99:31:01:60:f3:79:56:2a:30:f0:0c:7b:d9:f0:
b9:c9:a7:ba:34:87:c8:00:81:98:6b:26:90:c4:67:61:50:ce:
d9:20:e3:9e:95:2f:c6:71:88:26:07:ec:c5:d9:b1:b8:f9:87:
67:e1:e0:15:44:01:70:66:b1:5b:7e:df:98:2a:f9:c1:ae:15:
a6:4d:2e:3b:55:82:6c:8d:f9:ac:bd:3a:1e:3e:c9:9f:2c:e8:
85:23:46:72:9a:f6:c2:3f:95:18:a3:c6:78:2b:9a:07:ae:4e:
9d:18:9e:e4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZsZjb/UpqETDQlwZSFy5j1ViwxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM0N0EyQ0U3MTM2NTE0MEE3QUNCRTcyNTJCQjA5MTZD
MDU0QkUxNjAeFw0yNjAxMDYxOTA5MzBaFw0yNzAxMDUxOTE0MzBaMDMxMTAvBgNV
BAMTKENFMzM0QkE1NDk4MUE2NEE2MkY4NDlFRDhBQjY5RDM2NDQ0QTk1REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzKxWXL3RA2HlWdEwwZQuxDF8
bBQCpFLH+WOqFRg92d4IDl4NZPG1817EfNnzeL42RpbKlsyqEgmNyHXga+dPZleW
ZDrKDKgsQjTNeazMKl14iB7KhudNwaCueVzZLNST/XeOE18/walCtUa1UhgjmKeT
Nc2T/lyKwXZcWlLtSLyUhNUccaqHPqdYZii67VgKg/SruuSthciIjZfCPVS0v2b2
JWSzb6WrGEtqt67yTOw909E0ftQnLmEhZ2By7JYUgD2YRpo1nfyI4TP5/5ovitbH
8QPyw8gNr2/8ykaNWhJpwm/f/jtp/JShSfklBCBO6LMEdBg5F4L2OyWYI2ZLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzjNLpUmBpkpi+EntiradNkRKldswHwYDVR0j
BBgwFoAUnEeiznE2UUCnrL5yUrsJFsBUvhYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DM0IzQzU5RTIzNkMzMjlBQzM4OUEwNjA2OUJBQUE2MTFE
ODlBNkI5NzczQURCOUZDQjU4MzQ4QTczRjlGOEIzLzAvOUM0N0EyQ0U3MTM2NTE0
MEE3QUNCRTcyNTJCQjA5MTZDMDU0QkUxNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzQ3QTJDRTcxMzY1MTQwQTdB
Q0JFNzI1MkJCMDkxNkMwNTRCRTE2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzNCM0M1OUUyMzZDMzI5QUMzODlBMDYwNjlCQUFBNjExRDg5QTZCOTc3
M0FEQjlGQ0I1ODM0OEE3M0Y5RjhCMy8wLzM0MzUyZTMyMzMzOTJlMzMzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM4MzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3vIDAN
BgkqhkiG9w0BAQsFAAOCAQEAuPdzSjI3taLY9mMDBafqdLLyuzzlmtSiAYu9Cs11
gVo7TaH3z3nXCSSetO6npf3QEfUZpoLfuJ7hcXeZ89HH0jpJzlwlNAlKuHfH/6Qk
twFVM18qYOZ2pMG/DMiWvGIevHruyIKm6KLbpdDUpxc7VI2GEMRzEiaHDlygE6mp
atsQlJttDKMcKTFNR9LT0pF0ZBoohZkxAWDzeVYqMPAMe9nwucmnujSHyACBmGsm
kMRnYVDO2SDjnpUvxnGIJgfsxdmxuPmHZ+HgFUQBcGaxW37fmCr5wa4Vpk0uO1WC
bI35rL06Hj7JnyzohSNGcpr2wj+VGKPGeCuaB65OnRie5A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:41 2026 by rpki-client