This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa
File: 34352e372e3230392e302f32342d3234203d3e20323635373239.roa (raw, json)
Hash identifier: Sn7xuI3ToXiraW/2x/biOp9AQBEF2FmMWXAuu+9HVLs=
Subject key identifier: A9:94:F6:27:A6:91:AA:4D:6A:BC:19:7A:A8:3A:4F:92:5E:BE:8F:BD
Certificate issuer: /CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Certificate serial: 5C28103C33867C534515FCC095AD16B5C1844F20
Authority key identifier: 3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa
Signing time: Tue 06 Jan 2026 20:51:07 +0000
ROA not before: Tue 06 Jan 2026 20:46:07 +0000
ROA not after: Tue 05 Jan 2027 20:51:07 +0000
asID: 265729
IP address blocks: 45.7.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:28:10:3c:33:86:7c:53:45:15:fc:c0:95:ad:16:b5:c1:84:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Validity
Not Before: Jan 6 20:46:07 2026 GMT
Not After : Jan 5 20:51:07 2027 GMT
Subject: CN=A994F627A691AA4D6ABC197AA83A4F925EBE8FBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:d5:86:5b:ea:a6:26:c1:86:8c:ca:60:d8:
d0:e9:48:69:b5:3f:25:03:06:d1:c4:e9:c1:cd:69:
ba:2d:89:6a:c9:da:6d:e4:8e:3d:b9:b5:48:18:2b:
46:de:28:f5:4c:01:7e:f1:81:a6:5a:a1:c7:7a:45:
97:46:7f:85:6d:e4:c2:2a:26:15:54:c2:c2:ec:4d:
c6:ee:ce:2b:18:6e:26:0e:ba:e2:eb:4e:30:d3:2e:
8a:68:38:60:3e:55:64:a2:90:b3:c0:a3:24:43:03:
96:b2:5e:58:99:21:01:e2:fc:e4:17:c7:75:08:40:
dc:7b:ab:d0:87:9f:ad:1a:64:0a:c3:a3:03:0e:6b:
79:98:be:2d:83:3b:ad:73:81:d2:aa:7f:f4:5f:e8:
1e:54:0c:74:6e:82:a9:4d:10:0b:ce:e3:d9:72:79:
55:18:f3:75:a9:94:1f:f0:32:b4:7c:cd:c3:e8:7c:
3b:9f:56:4f:4b:aa:d5:66:8d:b2:b5:1f:22:5e:d2:
5b:57:72:3d:ef:eb:32:42:4f:55:c6:61:13:ca:f8:
1a:ac:4d:e3:47:4c:8b:96:18:f6:48:8e:bf:2d:b0:
b1:6a:ea:e9:73:10:ff:fb:9d:02:b1:bd:bc:66:d3:
c9:0c:d2:60:ff:bc:c3:58:b9:2f:c7:97:ad:22:ba:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:F6:27:A6:91:AA:4D:6A:BC:19:7A:A8:3A:4F:92:5E:BE:8F:BD
X509v3 Authority Key Identifier:
keyid:3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.209.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cf:9c:8e:7d:ee:e4:78:25:2c:6e:be:84:fc:43:5b:77:0c:
49:59:9d:b6:2c:53:e4:5e:87:8d:72:f1:6f:b2:e9:ab:0b:88:
8c:5e:28:86:c7:5e:3a:d2:ea:28:d7:5b:03:66:73:de:ab:20:
0f:36:14:c9:a2:a2:5c:3c:07:56:60:e9:da:19:d6:71:97:53:
b3:92:d3:75:29:6f:b5:c9:b3:1e:d1:a2:9a:e8:e8:a3:7b:c9:
de:88:f9:06:d8:fe:0c:4e:d2:08:ed:6e:1b:f5:20:02:f4:8c:
2b:fe:08:d9:17:59:16:01:da:98:5c:e0:8a:a7:65:14:61:02:
5f:fb:20:81:ed:fb:da:79:48:38:99:cd:ca:b2:90:db:55:4d:
26:78:41:d4:0c:93:d1:8b:22:8e:73:62:23:25:cc:84:0e:e0:
b2:ad:35:cb:92:6a:2e:45:86:83:63:8a:68:f8:de:fb:4d:a6:
43:27:d8:66:be:81:42:4b:a9:42:8c:d5:06:e1:c8:15:50:f3:
75:6b:0b:98:c8:d5:31:6f:bc:af:1d:00:50:87:e2:53:2a:e7:
d2:00:4b:28:8a:9f:0d:81:58:0e:68:73:b6:3f:f0:64:1b:ad:
20:aa:76:46:aa:72:0a:58:3c:d9:e0:ca:15:3f:f8:92:77:7d:
38:f0:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:48 2026 by rpki-client