This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137322e302f32322d3234203d3e20323639383630.roa
File: 34352e3138392e3137322e302f32322d3234203d3e20323639383630.roa (raw, json)
Hash identifier: Hazhi5CDZUFOGQ93iiDrM3cdlzgYKEkVcPvrnvi701U=
Subject key identifier: F2:07:A5:3F:52:33:39:C2:2D:CB:15:CE:EB:9D:07:40:0E:29:70:91
Certificate issuer: /CN=2A7D6F434E1C14422868C8C6E751B64D72719220
Certificate serial: 6622317208B358F5F6BABAEA27BFE020ADF6C0E9
Authority key identifier: 2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137322e302f32322d3234203d3e20323639383630.roa
Signing time: Tue 06 Jan 2026 19:04:43 +0000
ROA not before: Tue 06 Jan 2026 18:59:43 +0000
ROA not after: Tue 05 Jan 2027 19:04:43 +0000
asID: 269860
IP address blocks: 45.189.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl
rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:22:31:72:08:b3:58:f5:f6:ba:ba:ea:27:bf:e0:20:ad:f6:c0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A7D6F434E1C14422868C8C6E751B64D72719220
Validity
Not Before: Jan 6 18:59:43 2026 GMT
Not After : Jan 5 19:04:43 2027 GMT
Subject: CN=F207A53F523339C22DCB15CEEB9D07400E297091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:33:e8:76:b9:d5:47:a8:59:12:ec:69:ab:
3f:8c:e5:6d:45:48:f4:27:cc:8c:59:81:2a:68:ed:
84:9d:8f:8c:eb:93:af:ea:5a:11:e9:7a:1d:5f:57:
4f:79:39:18:10:13:92:d9:5f:c6:43:f7:fa:8a:de:
9d:8a:6f:98:cd:ab:45:78:0a:d1:7e:64:03:a1:53:
71:f7:0c:a1:2c:1b:f9:92:7f:1c:8e:c0:16:59:c4:
23:f0:29:a4:12:38:5b:44:99:a1:f0:2d:48:ba:2b:
8e:81:a7:f6:a9:e8:b2:c7:9e:7a:62:70:72:7d:75:
5c:6c:7c:c9:e0:fc:40:fb:d2:26:e1:6d:09:31:d3:
70:6e:f1:50:23:ea:78:e3:26:57:d1:dd:76:d6:b1:
f1:c9:20:54:86:3c:01:e8:95:3d:58:29:a8:ba:d3:
84:a9:9f:03:af:02:99:ec:d6:ac:af:cf:ca:ca:20:
45:e0:bc:ca:9f:c1:22:9c:9e:f2:2a:67:20:b1:26:
3b:bc:9b:b1:1e:62:bf:d7:b6:26:45:70:8f:d4:c3:
fb:08:0a:0f:68:16:1f:42:fc:e1:3d:47:3e:85:0f:
95:93:71:11:a5:9f:26:07:d0:3e:ad:91:3f:d2:9d:
24:9d:22:c4:51:e3:61:5e:8b:57:b8:0f:41:30:a4:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:07:A5:3F:52:33:39:C2:2D:CB:15:CE:EB:9D:07:40:0E:29:70:91
X509v3 Authority Key Identifier:
keyid:2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137322e302f32322d3234203d3e20323639383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.172.0/22
Signature Algorithm: sha256WithRSAEncryption
81:01:24:81:07:59:18:b5:88:fc:73:d3:d8:e5:16:c2:ac:96:
ff:9b:ff:84:22:79:fb:fe:41:78:a0:25:55:0a:27:12:66:3d:
f1:e8:28:d0:1c:93:ac:00:e5:62:bc:67:ea:d5:2f:de:9c:ce:
f9:05:99:8e:02:1e:d4:ff:8e:18:f8:45:bb:06:ee:c8:fe:0b:
b7:25:ed:85:aa:e0:ab:fe:72:50:a7:59:ee:d2:8d:90:13:22:
ea:d2:93:12:ab:5a:b6:67:57:98:4b:94:1a:7b:21:24:db:06:
e8:9e:ff:e3:10:d1:cd:a9:6d:1e:8b:42:af:80:55:25:10:a3:
16:cb:0f:c5:c1:44:43:eb:1c:d6:6e:9f:fb:79:e3:35:3c:95:
4e:c3:52:75:c3:2f:aa:ba:16:d1:ae:3e:a6:ac:f7:dc:95:ab:
5a:3c:35:52:36:72:6a:d6:c6:a0:53:83:f0:c3:be:d2:4a:68:
61:e9:00:25:15:5d:1d:33:1d:0d:89:bd:f1:69:ce:d6:41:c3:
d2:25:61:7d:73:6e:35:5d:d1:ae:5e:ef:25:93:90:67:46:43:
9a:14:fb:da:e5:95:b5:7c:31:a3:00:94:9d:18:9a:22:42:8c:
27:44:d3:98:b3:06:65:45:fd:0a:b3:e9:76:fd:22:0b:47:8b:
27:ed:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:08 2026 by rpki-client