This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135332e302f32342d3234203d3e20323636383434.roa
File: 34352e3233382e3135332e302f32342d3234203d3e20323636383434.roa (raw, json)
Hash identifier: 7AmZMJHOId7auHc6vtXFaYWORJN4yesmSxHsw4gDA3o=
Subject key identifier: 1A:3B:8B:E3:D6:C5:21:D3:B6:B2:92:00:BB:71:29:7B:A1:E7:94:97
Certificate issuer: /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial: 0AB1679E0A75DF903E6A861DEC356559BE405236
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135332e302f32342d3234203d3e20323636383434.roa
Signing time: Tue 06 Jan 2026 19:44:11 +0000
ROA not before: Tue 06 Jan 2026 19:39:11 +0000
ROA not after: Tue 05 Jan 2027 19:44:11 +0000
asID: 266844
IP address blocks: 45.238.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b1:67:9e:0a:75:df:90:3e:6a:86:1d:ec:35:65:59:be:40:52:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Validity
Not Before: Jan 6 19:39:11 2026 GMT
Not After : Jan 5 19:44:11 2027 GMT
Subject: CN=1A3B8BE3D6C521D3B6B29200BB71297BA1E79497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:c4:04:7f:b8:8a:e8:45:77:e1:bb:43:eb:
2d:4b:08:b9:93:08:5c:54:4a:75:7d:f3:6c:3c:b7:
cc:84:8a:02:6c:c5:59:ea:4d:33:e9:d2:6d:ff:cc:
1b:5d:31:59:42:3c:be:bb:03:3f:37:a3:de:ed:8c:
ad:42:5f:a6:05:91:10:3a:52:64:94:db:15:01:43:
fe:05:d0:3a:2c:fd:a5:29:5a:d5:77:e9:df:08:04:
02:57:a2:ed:cc:7e:7d:a6:26:fb:ed:c2:86:8c:65:
75:5f:69:1e:c1:64:c0:e4:8b:1c:99:7c:f5:f1:a0:
40:58:e9:b4:7e:bc:25:70:09:fd:d7:b9:a8:62:ed:
25:99:e8:55:9a:ac:4c:50:58:e8:04:38:95:8f:01:
83:59:7f:ee:e0:a5:dc:22:0a:97:0a:03:60:e1:43:
d4:cd:59:ac:e6:05:24:ad:da:87:b5:ef:a0:8e:8b:
20:75:13:63:77:b9:56:18:25:e2:02:88:84:ee:b6:
c9:c1:76:41:38:ff:57:ed:be:2b:94:fb:cd:82:63:
f0:d4:a9:81:eb:db:dd:26:a1:99:f5:a1:dc:f0:3b:
da:c0:ba:e8:d4:9a:0b:1b:a9:b5:e5:b0:d3:86:a6:
3d:8f:e4:2d:82:80:aa:f6:52:df:20:7b:a9:cc:b4:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:8B:E3:D6:C5:21:D3:B6:B2:92:00:BB:71:29:7B:A1:E7:94:97
X509v3 Authority Key Identifier:
keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135332e302f32342d3234203d3e20323636383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.153.0/24
Signature Algorithm: sha256WithRSAEncryption
40:44:79:f5:27:3a:c2:ab:14:07:0e:1d:eb:70:20:6f:a8:5f:
8b:4e:e0:18:8e:05:14:b5:03:40:09:c2:12:60:77:c7:e8:05:
41:64:dd:bc:6f:95:7b:c4:89:79:01:42:a5:57:a7:92:8c:af:
90:e8:2b:e5:59:8d:ce:70:38:b9:d3:76:95:af:68:77:62:ea:
e3:c3:c5:39:5a:c8:f0:25:b7:7d:98:56:11:fc:b8:6a:03:4c:
0f:ae:f1:41:27:e1:c7:83:88:bd:e8:b7:d7:c6:e5:88:26:58:
cd:02:7e:40:9b:e4:ba:5a:6a:ec:2d:db:b9:1d:04:98:31:68:
0d:55:66:3c:e3:23:0e:59:62:91:66:f6:cc:b1:b5:fe:11:d4:
bd:b0:9d:a1:f0:26:4c:79:b9:db:e1:29:73:46:18:d7:43:46:
c8:30:77:4b:b7:ec:ad:5e:06:61:34:4d:f7:c1:fd:2a:a9:b4:
7f:c1:bd:3c:f9:20:3e:01:92:85:90:fa:9a:00:51:cf:39:e6:
57:4b:62:bf:3b:66:92:2e:c1:d9:9d:29:01:0f:72:a1:ac:8a:
96:b6:05:d9:01:bf:e8:75:3e:6d:d4:61:d2:e6:9e:47:5e:81:
cd:a6:e2:ad:01:21:be:6f:2f:72:03:b2:c5:47:52:d9:da:52:
4f:b3:c5:5f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCrFnngp135A+aoYd7DVlWb5AUjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA3MDM3NDgzNEIzMEU0RTFFQUMyRjMzN0Q3MTM4RUUw
NkY2QUI3QTAeFw0yNjAxMDYxOTM5MTFaFw0yNzAxMDUxOTQ0MTFaMDMxMTAvBgNV
BAMTKDFBM0I4QkUzRDZDNTIxRDNCNkIyOTIwMEJCNzEyOTdCQTFFNzk0OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTmsQEf7iK6EV34btD6y1LCLmT
CFxUSnV982w8t8yEigJsxVnqTTPp0m3/zBtdMVlCPL67Az83o97tjK1CX6YFkRA6
UmSU2xUBQ/4F0Dos/aUpWtV36d8IBAJXou3Mfn2mJvvtwoaMZXVfaR7BZMDkixyZ
fPXxoEBY6bR+vCVwCf3Xuahi7SWZ6FWarExQWOgEOJWPAYNZf+7gpdwiCpcKA2Dh
Q9TNWazmBSSt2oe176COiyB1E2N3uVYYJeICiITutsnBdkE4/1ftviuU+82CY/DU
qYHr290moZn1odzwO9rAuujUmgsbqbXlsNOGpj2P5C2CgKr2Ut8ge6nMtL2tAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGjuL49bFIdO2spIAu3Epe6HnlJcwHwYDVR0j
BBgwFoAUoHA3SDSzDk4erC8zfXE47gb2q3owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMzk1RTNERUU1M0FFNDhGOTY3QkY5OTM2OTA0Nzk1MDQ3
NDc0MTM5RjdFN0Q0MTQ5QkZFMjU5N0NBRTNENzE4LzAvQTA3MDM3NDgzNEIzMEU0
RTFFQUMyRjMzN0Q3MTM4RUUwNkY2QUI3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMDcwMzc0ODM0QjMwRTRFMUVB
QzJGMzM3RDcxMzhFRTA2RjZBQjdBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDM5NUUzREVFNTNBRTQ4Rjk2N0JGOTkzNjkwNDc5NTA0NzQ3NDEzOUY3
RTdENDE0OUJGRTI1OTdDQUUzRDcxOC8wLzM0MzUyZTMyMzMzODJlMzEzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe6Z
MA0GCSqGSIb3DQEBCwUAA4IBAQBARHn1JzrCqxQHDh3rcCBvqF+LTuAYjgUUtQNA
CcISYHfH6AVBZN28b5V7xIl5AUKlV6eSjK+Q6CvlWY3OcDi503aVr2h3Yurjw8U5
WsjwJbd9mFYR/LhqA0wPrvFBJ+HHg4i96LfXxuWIJljNAn5Am+S6WmrsLdu5HQSY
MWgNVWY84yMOWWKRZvbMsbX+EdS9sJ2h8CZMebnb4SlzRhjXQ0bIMHdLt+ytXgZh
NE33wf0qqbR/wb08+SA+AZKFkPqaAFHPOeZXS2K/O2aSLsHZnSkBD3KhrIqWtgXZ
Ab/odT5t1GHS5p5HXoHNpuKtASG+by9yA7LFR1LZ2lJPs8Vf
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:14 2026 by rpki-client