This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e2033333536.roa
File: 34352e36352e3230332e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: uasGTUpJnufGb0V6fuGmjMOBm8DTRLinVgfzp9NcFLI=
Subject key identifier: 42:A1:52:D5:DD:3E:E6:7A:EF:F8:63:20:83:CF:8B:43:03:3A:EA:AE
Certificate issuer: /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial: 56CEA44E5FCA43494318CE2614E07B6CEECE386E
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e2033333536.roa
Signing time: Tue 06 Jan 2026 19:32:02 +0000
ROA not before: Tue 06 Jan 2026 19:27:02 +0000
ROA not after: Tue 05 Jan 2027 19:32:02 +0000
asID: 3356
IP address blocks: 45.65.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ce:a4:4e:5f:ca:43:49:43:18:ce:26:14:e0:7b:6c:ee:ce:38:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Validity
Not Before: Jan 6 19:27:02 2026 GMT
Not After : Jan 5 19:32:02 2027 GMT
Subject: CN=42A152D5DD3EE67AEFF8632083CF8B43033AEAAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:ff:b2:c1:71:39:4e:d0:92:e5:d6:9f:9e:
93:54:2a:f3:fa:c7:8e:3e:eb:dd:d3:ff:f5:d1:ca:
e0:07:47:68:2e:16:a3:68:35:21:4f:b0:6a:be:5c:
91:4d:f7:5e:08:95:dd:41:71:a2:e7:2f:cc:d8:5d:
15:dd:de:1d:ff:56:e4:e9:23:33:79:ea:36:70:03:
ec:6a:2f:5d:e2:c1:d9:b1:31:ed:ba:e5:31:23:36:
8f:c9:c6:9c:50:46:3e:22:24:46:d4:23:5c:8c:59:
4e:1b:74:e9:36:df:3c:5a:69:19:49:f4:db:db:83:
94:54:dc:ce:fe:ba:49:58:d5:b2:ae:d4:22:ef:bb:
9a:11:44:99:ee:e6:c7:d3:88:a4:b1:1a:b2:25:b5:
a1:32:bd:04:9d:bb:ff:ea:24:57:af:83:7a:a1:5f:
73:2c:3d:3a:b5:57:a7:c0:fb:d3:72:6e:5d:2a:ba:
9b:32:24:18:71:e0:29:8f:ad:31:e6:2d:20:58:71:
27:f5:0a:72:90:45:ab:80:3b:0c:55:ac:aa:66:65:
ab:01:5f:bb:34:b2:25:b0:6f:99:8b:78:c0:ae:cd:
1b:45:c6:e5:d5:dd:40:bc:87:ee:ad:f7:de:2c:db:
b9:f7:d5:44:d5:c8:50:8c:78:26:cb:18:72:95:fa:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:52:D5:DD:3E:E6:7A:EF:F8:63:20:83:CF:8B:43:03:3A:EA:AE
X509v3 Authority Key Identifier:
keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:91:de:c5:d1:9a:3e:b9:33:ca:c9:1c:47:17:b9:1f:59:bf:
96:12:ce:e5:52:e0:3c:b5:69:a1:f8:fa:27:c6:26:ce:19:71:
59:ab:9f:96:f5:07:29:4f:85:63:90:f1:05:59:86:d8:de:91:
d8:82:a4:5e:29:ce:e1:6a:87:5b:92:74:78:a1:c9:d6:1b:2b:
db:63:ef:99:6f:58:82:75:5d:e1:94:c7:14:af:08:16:ce:d0:
7c:db:d5:19:73:2a:cf:1a:f1:62:d8:26:55:97:d0:80:a6:f3:
55:2e:12:c3:d2:f2:69:7d:05:6d:bc:ca:d6:e4:93:15:5e:57:
ae:08:37:60:dd:50:e9:02:45:35:12:47:73:33:a6:76:bd:59:
48:40:e3:85:6a:70:3e:83:29:8e:a8:4c:f2:ad:0b:ea:8d:03:
5b:d9:91:28:71:91:9d:7c:0f:28:a8:ea:dc:cc:6d:1f:af:0b:
cd:d4:bf:a8:95:75:97:fd:51:59:72:87:c9:28:76:24:f0:6f:
fe:57:cb:1f:b5:b6:ad:bc:4c:81:47:2e:02:aa:24:50:6c:48:
81:76:e8:f1:bc:af:1f:ce:8e:98:83:9d:ae:1c:88:1f:3b:c0:
b5:9c:a6:74:01:77:c4:fe:21:21:24:54:19:b5:6a:1b:26:70:
74:21:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:07 2026 by rpki-client