This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa
File: 34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa (raw, json)
Hash identifier: pcNhdQZ+cA/f6YyEZyq8ITJWoKYBOS9ZkHqtegKIo7Q=
Subject key identifier: 9B:67:91:81:F1:40:1B:6D:2C:8B:40:01:65:EF:86:6A:46:F7:71:9D
Certificate issuer: /CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41
Certificate serial: 5172CB30BD31ADA6D70B00D6674A1F280B642921
Authority key identifier: 57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa
Signing time: Tue 06 Jan 2026 20:56:20 +0000
ROA not before: Tue 06 Jan 2026 20:51:20 +0000
ROA not after: Tue 05 Jan 2027 20:56:20 +0000
asID: 265534
IP address blocks: 45.174.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl
rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:72:cb:30:bd:31:ad:a6:d7:0b:00:d6:67:4a:1f:28:0b:64:29:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41
Validity
Not Before: Jan 6 20:51:20 2026 GMT
Not After : Jan 5 20:56:20 2027 GMT
Subject: CN=9B679181F1401B6D2C8B400165EF866A46F7719D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:7e:f2:00:84:85:c1:55:73:29:c8:2a:03:
8d:f9:41:49:e6:d0:71:99:00:d6:9d:d2:f4:4d:2c:
e1:ad:c0:09:88:2e:13:a8:f8:06:22:3e:b4:b8:16:
e3:bd:62:45:f6:03:f1:99:b8:2e:86:8e:4e:8b:21:
cb:13:be:2f:31:2d:23:ce:b9:58:28:3e:3a:af:df:
9a:36:1a:be:03:22:7d:a1:da:e8:ff:f5:11:e5:97:
a0:da:f9:e9:76:a7:db:a8:82:6c:56:33:3b:3b:1f:
de:a7:57:57:80:55:83:99:a8:81:a5:10:35:5c:6d:
48:4b:15:33:07:6b:ae:4f:14:62:24:b8:0a:c8:27:
65:be:00:05:bd:98:cf:da:4b:b2:1b:86:03:d6:cc:
79:92:61:b7:b1:d5:89:5a:1d:29:c5:c9:5d:87:ef:
d4:28:f2:f8:8f:02:7b:df:74:d2:06:f9:ee:f6:c4:
cb:62:5a:8e:8f:66:37:8c:b7:b6:22:cf:5d:54:cd:
eb:11:15:89:f7:c9:af:b0:86:b5:4f:3d:81:32:9f:
44:c5:b0:86:61:39:d5:9e:d8:c6:d1:79:05:12:68:
71:ca:6f:a5:2b:d2:8f:b9:e6:23:e0:32:60:09:ce:
68:a0:9a:dd:3e:36:1a:e2:c2:f2:cc:5d:43:05:8d:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:67:91:81:F1:40:1B:6D:2C:8B:40:01:65:EF:86:6A:46:F7:71:9D
X509v3 Authority Key Identifier:
keyid:57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.228.0/22
Signature Algorithm: sha256WithRSAEncryption
ea:27:24:fe:67:d6:6e:df:1a:dd:17:18:87:e3:50:14:9d:75:
cb:e7:b5:f0:1a:fa:b1:44:fd:79:0e:05:be:6a:86:79:e4:43:
8c:5d:1f:59:2a:94:73:bd:f4:aa:99:a8:99:a7:15:8f:5c:b2:
98:60:b4:15:97:81:51:be:e4:e4:3c:85:6f:cc:dd:0b:76:b2:
97:c7:9d:74:6a:27:e6:45:9f:9d:40:2a:82:2c:2e:d9:43:50:
d4:09:8a:11:7f:df:b1:f0:49:39:af:b5:93:ea:56:21:4a:b1:
f1:de:f0:d8:92:f7:fa:5f:ff:41:94:41:3c:40:41:32:94:e8:
bd:aa:b1:4f:83:93:ad:75:66:b6:9b:c6:32:f6:dd:05:a6:08:
06:20:63:fd:76:ba:7b:05:32:33:4f:cb:21:3c:93:b5:2f:de:
65:07:5c:12:1c:c4:f2:21:20:06:ce:95:28:c3:d5:d7:46:29:
d5:34:82:e5:e0:fb:bc:5a:f3:2b:36:7c:4f:ba:91:85:44:cc:
2d:b5:a2:0f:ab:9d:c5:a0:4e:cc:03:fd:e0:a8:39:14:bd:cc:
dd:38:13:b4:5e:0d:e1:db:48:c7:5e:bb:72:7f:0f:31:ce:6d:
41:df:fa:47:ce:53:38:b3:75:8e:ea:b4:f2:0e:26:b3:5f:70:
e7:81:e0:44
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUXLLML0xrabXCwDWZ0ofKAtkKSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCMjBEM0VDMjE5NjFBNjUwNURDQTBBRDBCMzNEQzMz
QzVDQ0Q0MTAeFw0yNjAxMDYyMDUxMjBaFw0yNzAxMDUyMDU2MjBaMDMxMTAvBgNV
BAMTKDlCNjc5MTgxRjE0MDFCNkQyQzhCNDAwMTY1RUY4NjZBNDZGNzcxOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRX7yAISFwVVzKcgqA435QUnm
0HGZANad0vRNLOGtwAmILhOo+AYiPrS4FuO9YkX2A/GZuC6Gjk6LIcsTvi8xLSPO
uVgoPjqv35o2Gr4DIn2h2uj/9RHll6Da+el2p9uogmxWMzs7H96nV1eAVYOZqIGl
EDVcbUhLFTMHa65PFGIkuArIJ2W+AAW9mM/aS7IbhgPWzHmSYbex1YlaHSnFyV2H
79Qo8viPAnvfdNIG+e72xMtiWo6PZjeMt7Yiz11UzesRFYn3ya+whrVPPYEyn0TF
sIZhOdWe2MbReQUSaHHKb6Ur0o+55iPgMmAJzmigmt0+NhriwvLMXUMFjf15AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUm2eRgfFAG20si0ABZe+Gakb3cZ0wHwYDVR0j
BBgwFoAUV7INPsIZYaZQXcoK0LM9wzxczUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMzgyNUE3QUVCQkQ3OEUxMzQ4QzNDMDdCQkJBM0QxREJF
MDQwQjE1NDlCMkI3MTEzOUU2QjgxMDhCOUYyMzgyLzAvNTdCMjBEM0VDMjE5NjFB
NjUwNURDQTBBRDBCMzNEQzMzQzVDQ0Q0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81N0IyMEQzRUMyMTk2MUE2NTA1
RENBMEFEMEIzM0RDMzNDNUNDRDQxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDM4MjVBN0FFQkJENzhFMTM0OEMzQzA3QkJCQTNEMURCRTA0MEIxNTQ5
QjJCNzExMzlFNkI4MTA4QjlGMjM4Mi8wLzM0MzUyZTMxMzczNDJlMzIzMjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzUzMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLa7k
MA0GCSqGSIb3DQEBCwUAA4IBAQDqJyT+Z9Zu3xrdFxiH41AUnXXL57XwGvqxRP15
DgW+aoZ55EOMXR9ZKpRzvfSqmaiZpxWPXLKYYLQVl4FRvuTkPIVvzN0LdrKXx510
aifmRZ+dQCqCLC7ZQ1DUCYoRf9+x8Ek5r7WT6lYhSrHx3vDYkvf6X/9BlEE8QEEy
lOi9qrFPg5OtdWa2m8Yy9t0FpggGIGP9drp7BTIzT8shPJO1L95lB1wSHMTyISAG
zpUow9XXRinVNILl4Pu8WvMrNnxPupGFRMwttaIPq53FoE7MA/3gqDkUvczdOBO0
Xg3h20jHXrtyfw8xzm1B3/pHzlM4s3WO6rTyDiazX3DngeBE
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:43 2026 by rpki-client