This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32332d3233203d3e20323636383434.roa
File: 34352e3233382e3135322e302f32332d3233203d3e20323636383434.roa (raw, json)
Hash identifier: HsSGxYT6pCf8D444lVWqM22W+WzkMplaFaHmQ65Et1Q=
Subject key identifier: 28:2E:A0:AE:92:03:87:C4:2F:28:D5:F7:00:88:F0:AB:1D:58:28:24
Certificate issuer: /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial: 45E5DB7D650E948D34981FE6C0DCD06D6467FA86
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32332d3233203d3e20323636383434.roa
Signing time: Tue 06 Jan 2026 19:44:12 +0000
ROA not before: Tue 06 Jan 2026 19:39:12 +0000
ROA not after: Tue 05 Jan 2027 19:44:12 +0000
asID: 266844
IP address blocks: 45.238.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e5:db:7d:65:0e:94:8d:34:98:1f:e6:c0:dc:d0:6d:64:67:fa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Validity
Not Before: Jan 6 19:39:12 2026 GMT
Not After : Jan 5 19:44:12 2027 GMT
Subject: CN=282EA0AE920387C42F28D5F70088F0AB1D582824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:f8:73:68:02:47:f0:7d:0e:1d:a5:23:11:
52:a8:ad:96:6d:6a:38:1d:90:59:bd:11:e8:62:f7:
5b:8b:1f:b0:01:a6:68:60:b6:b0:d5:bb:b8:5d:b0:
1e:6f:98:3d:7f:d9:0b:f4:19:c4:12:d5:a6:5c:62:
08:a7:ee:69:18:bb:72:4c:5d:9e:58:54:0e:79:76:
3d:5b:95:cb:d5:cc:16:6a:9d:0f:78:c4:2f:8f:dc:
9c:86:95:95:99:69:9a:a2:47:2d:2c:13:9d:84:e6:
95:ce:80:0a:d3:c7:c1:b8:0a:4a:3e:66:69:91:05:
d7:eb:70:29:48:42:25:46:7f:28:03:09:06:11:43:
5b:ae:fa:bb:bc:38:c4:0a:89:3f:2d:ea:1b:27:6c:
e9:47:ad:24:56:b0:22:37:80:aa:0a:76:ef:42:41:
4f:aa:7e:4f:4f:1d:ca:e4:87:84:2c:8b:23:92:78:
47:24:69:07:d9:a4:55:8c:44:53:0b:65:50:3c:2f:
ba:73:2d:3a:e4:4f:af:66:ad:04:8a:e3:a5:c5:54:
ec:19:de:dd:f3:74:17:df:8b:77:a7:9c:95:e6:28:
b8:22:96:77:d8:86:fb:f6:94:f0:fd:1e:19:ba:bd:
5b:46:15:b4:8d:33:ad:23:06:3c:60:1f:5f:44:a9:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:A0:AE:92:03:87:C4:2F:28:D5:F7:00:88:F0:AB:1D:58:28:24
X509v3 Authority Key Identifier:
keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32332d3233203d3e20323636383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.152.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:9e:c0:8c:67:e6:81:31:88:1d:97:a6:61:c7:84:fb:4e:7c:
f4:2f:39:59:98:1b:64:d7:78:de:71:91:c7:d1:75:32:61:2e:
f1:32:e6:75:32:0b:eb:59:7e:04:40:6d:45:ab:7d:8a:15:f4:
2d:4e:c4:2f:c9:c7:19:ce:ce:3d:96:96:c2:09:31:9d:31:59:
ad:98:bb:5a:c4:85:12:5b:7e:51:db:23:c1:4b:db:df:f7:03:
30:5d:8c:29:0d:ea:04:c0:18:c0:b6:80:af:fb:ad:bb:15:1b:
0a:16:f9:28:6d:53:f3:03:20:e1:5b:5f:1f:99:3e:21:4a:22:
dc:49:94:42:83:f2:1d:36:71:a3:61:6b:50:73:fd:dd:76:aa:
cf:77:42:d4:35:58:85:43:0b:04:e4:f8:97:1e:b5:8d:9c:4b:
e6:44:76:af:52:4c:59:61:87:6f:ad:d2:6e:fa:cb:c2:24:09:
bd:45:23:c8:28:39:df:58:30:c8:55:1e:be:c7:11:a0:ff:95:
9a:ec:48:42:ac:da:14:14:fa:3e:6e:77:dd:bf:68:62:16:07:
3f:35:98:34:c3:82:c5:e6:fc:88:1b:b1:14:ed:33:d7:68:10:
1c:49:ef:cc:ec:47:8d:1f:ca:80:ac:62:f1:ca:a7:94:c6:8f:
2f:ad:17:10
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUReXbfWUOlI00mB/mwNzQbWRn+oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA3MDM3NDgzNEIzMEU0RTFFQUMyRjMzN0Q3MTM4RUUw
NkY2QUI3QTAeFw0yNjAxMDYxOTM5MTJaFw0yNzAxMDUxOTQ0MTJaMDMxMTAvBgNV
BAMTKDI4MkVBMEFFOTIwMzg3QzQyRjI4RDVGNzAwODhGMEFCMUQ1ODI4MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpPhzaAJH8H0OHaUjEVKorZZt
ajgdkFm9Eehi91uLH7ABpmhgtrDVu7hdsB5vmD1/2Qv0GcQS1aZcYgin7mkYu3JM
XZ5YVA55dj1blcvVzBZqnQ94xC+P3JyGlZWZaZqiRy0sE52E5pXOgArTx8G4Cko+
ZmmRBdfrcClIQiVGfygDCQYRQ1uu+ru8OMQKiT8t6hsnbOlHrSRWsCI3gKoKdu9C
QU+qfk9PHcrkh4QsiyOSeEckaQfZpFWMRFMLZVA8L7pzLTrkT69mrQSK46XFVOwZ
3t3zdBffi3ennJXmKLgilnfYhvv2lPD9Hhm6vVtGFbSNM60jBjxgH19EqRkRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKC6grpIDh8QvKNX3AIjwqx1YKCQwHwYDVR0j
BBgwFoAUoHA3SDSzDk4erC8zfXE47gb2q3owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMzk1RTNERUU1M0FFNDhGOTY3QkY5OTM2OTA0Nzk1MDQ3
NDc0MTM5RjdFN0Q0MTQ5QkZFMjU5N0NBRTNENzE4LzAvQTA3MDM3NDgzNEIzMEU0
RTFFQUMyRjMzN0Q3MTM4RUUwNkY2QUI3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMDcwMzc0ODM0QjMwRTRFMUVB
QzJGMzM3RDcxMzhFRTA2RjZBQjdBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDM5NUUzREVFNTNBRTQ4Rjk2N0JGOTkzNjkwNDc5NTA0NzQ3NDEzOUY3
RTdENDE0OUJGRTI1OTdDQUUzRDcxOC8wLzM0MzUyZTMyMzMzODJlMzEzNTMyMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2MzgzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLe6Y
MA0GCSqGSIb3DQEBCwUAA4IBAQDRnsCMZ+aBMYgdl6Zhx4T7Tnz0LzlZmBtk13je
cZHH0XUyYS7xMuZ1MgvrWX4EQG1Fq32KFfQtTsQvyccZzs49lpbCCTGdMVmtmLta
xIUSW35R2yPBS9vf9wMwXYwpDeoEwBjAtoCv+627FRsKFvkobVPzAyDhW18fmT4h
SiLcSZRCg/IdNnGjYWtQc/3ddqrPd0LUNViFQwsE5PiXHrWNnEvmRHavUkxZYYdv
rdJu+svCJAm9RSPIKDnfWDDIVR6+xxGg/5Wa7EhCrNoUFPo+bnfdv2hiFgc/NZg0
w4LF5vyIG7EU7TPXaBAcSe/M7EeNH8qArGLxyqeUxo8vrRcQ
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:06 2026 by rpki-client