This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3235203d3e20323636363832.roa
File: 34352e3232382e37362e302f32322d3235203d3e20323636363832.roa (raw, json)
Hash identifier: 8d844V7hlqgHVpfkLOupzGPT2pBVcmBmlUToxMnZCK4=
Subject key identifier: 24:CC:3B:E8:49:B2:7A:39:6C:C2:84:34:F0:7E:66:AD:A3:52:4A:D4
Certificate issuer: /CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Certificate serial: 01ED71961F6480EB058D20C741A6A18E3A2E096D
Authority key identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3235203d3e20323636363832.roa
Signing time: Tue 06 Jan 2026 19:09:04 +0000
ROA not before: Tue 06 Jan 2026 19:04:04 +0000
ROA not after: Tue 05 Jan 2027 19:09:04 +0000
asID: 266682
IP address blocks: 45.228.76.0/22 maxlen: 25
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl
rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ed:71:96:1f:64:80:eb:05:8d:20:c7:41:a6:a1:8e:3a:2e:09:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Validity
Not Before: Jan 6 19:04:04 2026 GMT
Not After : Jan 5 19:09:04 2027 GMT
Subject: CN=24CC3BE849B27A396CC28434F07E66ADA3524AD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:18:20:2c:b2:52:3d:34:ea:c8:63:31:e1:
ea:85:dc:e4:eb:18:a4:61:64:73:a3:da:00:17:2d:
b6:93:8c:2f:ef:7a:61:5b:fa:29:03:00:5e:a0:aa:
7a:59:12:a3:44:cd:06:3a:9a:e9:6a:3c:c4:1c:b4:
3b:e9:10:99:09:cd:92:69:59:b2:28:31:c8:66:71:
ef:80:72:f2:85:63:e6:7d:7c:fe:ac:a2:b0:b5:bb:
7a:62:2c:a0:fb:89:0a:f7:ff:5f:27:ad:cc:44:2a:
03:39:75:b2:26:84:64:e2:31:6a:ad:34:e8:58:30:
63:ed:70:a0:81:a3:84:b7:1a:69:95:bc:1b:dc:31:
3f:a9:db:cb:a4:27:70:5c:db:e5:ca:89:75:73:9c:
01:96:87:ba:57:ff:11:53:ef:d9:48:df:55:d3:85:
74:dc:e6:75:45:18:e0:9a:37:13:bf:5c:58:05:d9:
34:c5:74:10:fa:5e:dd:fe:ab:36:e0:39:79:6c:ea:
6e:cb:c5:6c:55:f4:69:56:7e:8e:af:98:3a:42:7f:
70:12:68:48:4d:e0:a5:0d:2e:7d:a8:3a:0e:dc:92:
a9:59:dc:db:ba:74:92:68:4c:f1:99:2c:83:c4:fe:
6d:64:a4:dd:c0:0a:07:23:50:2a:1a:52:e7:25:39:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:3B:E8:49:B2:7A:39:6C:C2:84:34:F0:7E:66:AD:A3:52:4A:D4
X509v3 Authority Key Identifier:
keyid:53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3235203d3e20323636363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.76.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:b5:ba:20:36:3b:92:c8:b1:0b:63:1e:2c:9a:1a:07:e8:c4:
47:0e:7f:59:24:7d:16:f1:08:a3:14:d6:fe:cc:b0:73:9a:e1:
ba:ea:4c:3f:7c:a7:6e:ef:cf:09:84:ad:d2:be:93:5b:cd:11:
01:7d:24:6b:57:d8:36:56:4b:43:9f:e8:b9:15:ca:c9:5c:55:
33:28:e1:dd:90:06:43:e1:39:21:9d:55:1d:a7:6d:1e:1e:79:
9b:c5:f9:ce:19:93:5b:8c:ff:05:03:df:bc:e6:66:ca:85:49:
fb:84:64:6f:ba:48:90:9e:83:be:1d:de:54:04:7d:88:39:42:
bd:83:bc:83:5c:ab:f8:46:2b:bc:87:af:c7:8e:33:71:55:be:
f0:c4:0d:27:c6:9b:c0:1e:07:f1:fd:80:fd:fa:c8:29:00:d4:
59:fd:fa:69:2b:34:7c:b5:21:3e:4b:e1:11:93:e8:e0:19:08:
f1:0e:cd:4b:5c:f8:da:e9:ca:34:61:8f:29:05:46:83:ae:97:
4b:73:1f:a5:e6:ec:aa:4c:a8:84:dd:99:bd:78:5a:bb:ae:be:
0f:62:72:92:9e:c6:14:0d:60:a5:c2:ec:58:34:41:ab:b3:be:
88:8c:1c:8b:d9:a8:34:08:ff:69:a7:d4:d2:83:8c:47:04:44:
fd:33:de:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:38:02 2026 by rpki-client