This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138372e302f32342d3234203d3e20323639383734.roa
File: 34352e3138392e3138372e302f32342d3234203d3e20323639383734.roa (raw, json)
Hash identifier: dwfUFfxjG1Zu6hagp4SuXUZMOK+/tLOaNfK4+Sq9f+4=
Subject key identifier: 2D:5F:A5:3F:F3:BB:B3:B4:9D:7C:C9:3C:28:F1:D7:76:C1:40:F8:E3
Certificate issuer: /CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
Certificate serial: 7CCF052F5C87F5977EEA8BBFBEAE37FD0A4BEE57
Authority key identifier: A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138372e302f32342d3234203d3e20323639383734.roa
Signing time: Tue 06 Jan 2026 19:02:39 +0000
ROA not before: Tue 06 Jan 2026 18:57:39 +0000
ROA not after: Tue 05 Jan 2027 19:02:39 +0000
asID: 269874
IP address blocks: 45.189.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl
rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 19:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:cf:05:2f:5c:87:f5:97:7e:ea:8b:bf:be:ae:37:fd:0a:4b:ee:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
Validity
Not Before: Jan 6 18:57:39 2026 GMT
Not After : Jan 5 19:02:39 2027 GMT
Subject: CN=2D5FA53FF3BBB3B49D7CC93C28F1D776C140F8E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:4f:5d:44:d5:00:7a:02:af:b9:68:ac:e1:
e7:cd:d0:b5:7a:66:66:41:81:ca:5c:0e:90:29:27:
86:bc:18:63:89:49:f0:9e:51:20:c9:3d:de:95:1a:
1e:52:56:1f:7f:70:dd:1f:e2:79:13:ab:ee:3b:9d:
5d:45:3b:5a:0b:b3:4f:16:8b:b1:f3:76:75:28:e1:
d3:43:b1:7d:4f:d7:42:f7:4d:d8:1f:92:cb:b1:1c:
e2:8e:ad:6a:76:ac:93:c4:c4:4a:c8:33:6c:53:74:
1c:fd:2b:e3:2f:fa:4a:ca:f9:9b:36:75:f6:57:eb:
67:de:37:3c:1d:b1:48:87:7c:38:db:01:74:46:58:
4d:30:db:75:e9:cc:b1:ef:8f:a5:ff:dc:c0:97:54:
0c:d2:1e:21:46:cf:3b:7e:e3:ac:95:63:f8:89:ed:
10:d1:31:5f:64:24:93:36:2b:8a:45:e5:f3:e7:14:
77:cc:b0:cc:7e:3a:ac:3d:05:a9:91:27:a8:05:6a:
9f:ad:93:31:f9:5a:2d:c5:c2:48:05:0e:bf:ad:78:
2f:bc:38:55:74:a9:4f:49:e3:a7:30:d5:97:1b:de:
cf:b0:54:ee:b6:e4:c4:a8:b9:d6:d2:2f:49:9a:e7:
16:5d:42:14:aa:32:b6:57:88:19:3d:c0:b5:9e:47:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5F:A5:3F:F3:BB:B3:B4:9D:7C:C9:3C:28:F1:D7:76:C1:40:F8:E3
X509v3 Authority Key Identifier:
keyid:A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138372e302f32342d3234203d3e20323639383734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:36:bc:5d:a5:4a:06:1f:23:9c:d4:87:89:80:a2:43:64:01:
62:bb:d0:f1:1a:f3:af:f8:e3:7f:91:4b:ae:2d:ab:8f:41:d9:
f7:1b:60:d7:ef:f1:93:48:7e:28:5a:3a:36:fe:88:32:a8:36:
ee:f3:56:89:ca:4e:0a:0d:86:d1:93:9c:1a:14:77:b0:3f:ef:
c8:eb:53:58:fc:7e:b0:d6:45:f2:2c:ee:fa:2a:67:ae:49:2b:
e9:16:be:2d:05:ae:30:af:4a:46:32:39:ad:0b:b9:a7:ce:8d:
cd:be:24:c0:4f:52:04:89:9e:51:69:d1:10:39:f7:24:8e:84:
f9:52:54:b5:da:b2:a7:fd:4e:ab:1d:b5:c2:0a:12:c5:20:74:
48:06:12:9c:65:85:81:2d:ba:8f:c1:d7:b5:89:e2:b6:d4:b6:
1e:43:f2:07:50:81:bd:7f:c0:f9:cd:19:e9:d8:78:2a:40:79:
c1:14:e8:37:42:dd:94:1e:0f:5d:b1:03:20:a6:c1:78:d2:07:
35:42:fc:f7:67:64:37:b2:25:85:a7:a8:c5:8c:34:9b:3c:79:
58:a2:0b:ad:2d:da:90:af:41:da:7d:1e:eb:de:c1:16:22:57:
68:95:f8:cc:5c:6f:17:5e:be:db:c5:b2:4f:bc:53:13:1c:bd:
a4:34:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:42 2026 by rpki-client