This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/34352e3136312e3233362e302f32322d3234203d3e203631353132.roa
File: 34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier: SdzwWw6dcvaS4XdRSsV3w69+iMp+QDvuAVHag7agkAE=
Subject key identifier: 41:4A:3E:18:71:35:74:96:F4:B6:A0:EC:F4:AC:01:F8:95:D7:EB:3D
Certificate issuer: /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial: 2F9066AB03116EE0B36318F5788D4ECC525A4E06
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/34352e3136312e3233362e302f32322d3234203d3e203631353132.roa
Signing time: Tue 06 Jan 2026 19:40:25 +0000
ROA not before: Tue 06 Jan 2026 19:35:25 +0000
ROA not after: Tue 05 Jan 2027 19:40:25 +0000
asID: 61512
IP address blocks: 45.161.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:90:66:ab:03:11:6e:e0:b3:63:18:f5:78:8d:4e:cc:52:5a:4e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Validity
Not Before: Jan 6 19:35:25 2026 GMT
Not After : Jan 5 19:40:25 2027 GMT
Subject: CN=414A3E1871357496F4B6A0ECF4AC01F895D7EB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:20:65:25:66:a2:bb:17:cd:9c:14:81:29:
22:96:6c:1f:74:72:fb:91:8d:12:8d:e4:45:4b:55:
cf:3d:17:82:97:95:7e:3a:54:2a:7c:c9:5e:cf:7d:
82:55:5e:9c:04:23:40:c6:a6:96:cb:9f:85:87:3f:
d3:10:6a:a4:4e:95:ef:58:e4:07:df:41:2d:fc:df:
df:0f:fe:ea:1b:80:2d:a6:f6:77:e6:6a:43:94:73:
af:a6:50:5a:82:99:29:75:82:14:0a:da:80:75:15:
21:a4:86:a0:42:68:4e:7b:8a:6a:87:20:e9:83:4f:
8f:28:7c:52:5f:83:8b:ef:3b:16:3c:b6:fc:9c:12:
13:20:14:d1:b1:ab:fa:da:35:6f:22:b2:e5:a5:29:
3c:c8:79:66:e2:f7:05:fa:6d:5f:2c:b5:19:fd:a5:
f0:0b:eb:05:73:c0:3b:54:65:2e:55:9a:1a:87:cf:
d4:07:de:21:02:a1:45:19:d0:fa:21:0b:8a:95:7f:
1b:0b:c0:54:9f:58:21:bc:52:ff:ee:7b:97:63:91:
74:89:26:03:57:79:7f:cb:32:f9:0a:a4:68:de:0e:
32:f7:2c:88:00:08:87:21:c0:fa:ba:76:1a:8e:19:
40:5e:7a:07:14:43:a9:a1:22:a7:70:c7:f6:00:80:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4A:3E:18:71:35:74:96:F4:B6:A0:EC:F4:AC:01:F8:95:D7:EB:3D
X509v3 Authority Key Identifier:
keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/34352e3136312e3233362e302f32322d3234203d3e203631353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.236.0/22
Signature Algorithm: sha256WithRSAEncryption
23:c4:72:fb:86:e0:63:09:fc:d1:30:0f:b7:68:47:ca:f5:50:
3f:69:1d:05:bd:7b:bb:54:e9:ab:27:87:22:fa:9d:25:f3:9c:
b7:df:65:32:33:49:ce:f2:83:e1:b9:c4:ba:33:0b:78:3a:02:
ca:b5:8e:98:b4:e1:cf:83:85:9d:c8:a3:f2:78:9b:5f:17:9f:
62:2e:43:03:43:d3:1f:7e:d2:bc:05:91:7e:36:ae:06:d4:c3:
77:35:6e:87:81:2c:4b:68:13:09:ce:6c:17:db:8b:57:39:bc:
72:c0:68:49:66:72:a1:bb:16:0d:da:31:10:6d:0b:ca:c7:ec:
f9:37:20:f5:f8:8b:d6:e9:0b:36:f1:d8:70:7b:50:a2:93:64:
cf:d5:3d:5a:14:ec:90:a9:90:7c:ce:41:9f:07:45:5f:7a:3e:
8b:4f:19:c5:66:c5:a7:24:7d:06:bc:a8:0c:1e:a6:36:15:a5:
14:9c:5d:3f:0a:f9:25:ef:0e:e9:b1:55:7d:2b:03:1c:b0:12:
15:4b:b1:1f:84:b1:ba:23:99:b5:82:7e:45:01:46:69:9c:3e:
9d:f5:02:2b:7b:46:4f:c1:96:ba:62:63:10:73:02:49:a6:9d:
e3:4e:94:62:2f:2d:dd:93:ef:d4:7e:16:c1:e1:0f:4f:31:c7:
69:96:c9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:18 2026 by rpki-client