This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32322d3232203d3e20323635373239.roa
File: 34352e372e3230382e302f32322d3232203d3e20323635373239.roa (raw, json)
Hash identifier: Wr5E4hh3RJrK71hV+aTZkG1DR4qTdxvEj/k6RekCM5A=
Subject key identifier: 56:BA:2B:86:D0:EC:C2:7A:6C:43:32:9F:4F:87:73:4D:BB:A0:11:BB
Certificate issuer: /CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Certificate serial: 017D2D2F3D2F60DC61D69D547777A27A8A9F3B8A
Authority key identifier: 3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32322d3232203d3e20323635373239.roa
Signing time: Tue 06 Jan 2026 20:51:08 +0000
ROA not before: Tue 06 Jan 2026 20:46:08 +0000
ROA not after: Tue 05 Jan 2027 20:51:08 +0000
asID: 265729
IP address blocks: 45.7.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7d:2d:2f:3d:2f:60:dc:61:d6:9d:54:77:77:a2:7a:8a:9f:3b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Validity
Not Before: Jan 6 20:46:08 2026 GMT
Not After : Jan 5 20:51:08 2027 GMT
Subject: CN=56BA2B86D0ECC27A6C43329F4F87734DBBA011BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:62:97:83:c5:df:75:d5:9c:70:81:95:d4:
86:4d:53:79:47:92:63:fd:08:e7:c1:ea:e7:f1:59:
72:fd:99:3e:47:2d:0c:4f:ce:e0:2d:fe:07:1b:8a:
ed:ed:01:77:d7:2c:61:59:16:ed:3e:03:22:8f:da:
21:2a:37:cd:0c:9c:d7:57:76:bb:7a:e7:3a:64:09:
b5:18:59:c7:27:5c:2b:d0:21:7a:6b:a8:21:da:78:
2b:2c:e0:a0:ec:bf:79:ed:89:e9:b8:e2:25:d6:ad:
b3:9f:4a:1b:46:c7:bf:a4:4f:69:81:e9:a5:e4:5a:
fa:9d:01:6c:03:11:02:85:e7:8f:36:70:51:b3:64:
e0:8b:6f:d5:44:d2:4a:43:fe:69:4a:5c:62:75:f2:
c2:8c:6f:7d:f0:80:b2:eb:09:66:28:76:71:b2:8d:
e7:35:1d:91:d5:39:c9:f1:72:fc:a7:90:b8:dd:78:
ee:5e:fa:62:f2:f9:a5:88:e4:e5:3f:da:31:9c:7d:
5a:4c:f9:a9:60:4c:2c:79:c2:6b:f7:c4:90:70:38:
f5:25:ab:d6:da:2b:2c:6f:f8:50:3e:08:d8:cc:07:
b6:d7:62:bb:15:c7:0f:e6:06:e4:c7:1d:c2:69:1d:
47:b1:42:0b:79:2c:7a:d7:39:a9:ef:ed:df:8a:86:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:2B:86:D0:EC:C2:7A:6C:43:32:9F:4F:87:73:4D:BB:A0:11:BB
X509v3 Authority Key Identifier:
keyid:3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32322d3232203d3e20323635373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.208.0/22
Signature Algorithm: sha256WithRSAEncryption
41:59:35:45:9e:1c:67:d5:7d:3c:52:8f:1c:b2:f2:bc:cc:da:
13:71:54:64:5f:bf:0b:67:20:93:cf:fd:70:1c:b7:2e:f6:19:
ab:e1:cd:de:55:70:b5:ba:29:d3:9b:da:dc:35:b8:58:c9:4d:
84:d4:4c:04:a1:f4:c0:1b:d9:ec:39:5b:13:bf:1b:41:be:f3:
61:36:40:2b:aa:45:53:9e:dc:0d:50:6b:b5:e6:e1:d1:6d:d1:
13:78:c6:8b:5d:30:24:1b:d7:28:98:63:c7:c4:e4:0f:60:ee:
75:2b:9e:8e:93:c2:7a:54:ce:41:00:6d:b9:c8:29:2b:36:2f:
d1:0d:6f:3d:84:72:a9:7e:62:06:91:91:b1:78:22:42:2d:96:
13:20:9c:c6:63:7e:29:e6:36:4a:cb:97:57:db:7e:53:b1:c9:
ee:51:33:8a:2b:27:d4:3a:59:40:a1:4c:35:fd:84:dc:81:d7:
ac:9e:3a:76:09:71:10:96:c5:fd:ff:de:59:83:65:8a:4e:12:
63:80:10:a2:2a:12:97:10:d4:24:af:84:8f:ac:dc:89:a9:88:
9b:4b:78:6a:10:06:ef:ec:5d:2d:fb:a5:2e:7f:9e:dd:1f:0f:
e7:85:d4:fb:ad:ad:fd:12:7b:6c:90:44:bd:a8:00:8a:9f:6d:
fe:f5:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:40:00 2026 by rpki-client