This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/34352e3137322e3137362e302f32332d3233203d3e20323637373931.roa
File: 34352e3137322e3137362e302f32332d3233203d3e20323637373931.roa (raw, json)
Hash identifier: 1wmudd/9/q7WuSn/BTuta1f7KXeDUb42HTwA06XBn88=
Subject key identifier: C2:76:3D:03:92:CC:43:A9:8D:5D:19:36:14:65:E1:83:EC:03:45:0D
Certificate issuer: /CN=353F7C9A66591AC01FC52C773EE1A04559086A6B
Certificate serial: 629FA78D5F7058C4D32B738688AD77E784347222
Authority key identifier: 35:3F:7C:9A:66:59:1A:C0:1F:C5:2C:77:3E:E1:A0:45:59:08:6A:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/34352e3137322e3137362e302f32332d3233203d3e20323637373931.roa
Signing time: Tue 06 Jan 2026 19:17:20 +0000
ROA not before: Tue 06 Jan 2026 19:12:20 +0000
ROA not after: Tue 05 Jan 2027 19:17:20 +0000
asID: 267791
IP address blocks: 45.172.176.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.crl
rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 06:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9f:a7:8d:5f:70:58:c4:d3:2b:73:86:88:ad:77:e7:84:34:72:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353F7C9A66591AC01FC52C773EE1A04559086A6B
Validity
Not Before: Jan 6 19:12:20 2026 GMT
Not After : Jan 5 19:17:20 2027 GMT
Subject: CN=C2763D0392CC43A98D5D19361465E183EC03450D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:ff:57:46:2b:f6:ad:54:b3:c1:aa:e4:38:
10:f4:7f:08:23:c5:75:1c:44:07:13:81:d1:c9:64:
3c:79:76:a4:06:21:09:3b:a4:3f:d6:0b:78:a5:20:
ec:70:cb:d7:f6:a5:58:fe:10:37:04:bc:83:9e:e2:
76:0f:83:49:e3:8c:8c:b3:ff:fa:3d:b8:e5:f1:af:
18:51:64:c9:7e:5b:ed:6a:a5:aa:15:76:ee:b5:23:
73:86:59:e7:16:df:ea:15:11:59:45:c4:c1:21:df:
dd:7b:a6:31:38:2c:1b:35:7d:7b:e2:a5:86:04:29:
e2:17:49:fd:1c:1f:39:4c:0f:34:a8:55:45:81:5b:
5d:ff:80:f1:a1:00:be:07:26:a3:9a:59:9d:77:b9:
9e:df:51:1e:58:47:11:5f:24:8c:7c:d0:fe:99:c2:
66:99:5e:ca:0f:86:03:19:11:c7:a6:58:1e:1c:45:
dd:bb:db:4a:2d:72:5b:62:a6:e2:8b:11:db:a5:89:
cf:01:ee:f8:e2:30:af:5e:1a:f7:2a:42:e4:ce:3f:
8f:f9:9f:6e:0e:18:03:68:88:1b:08:16:e9:f9:b5:
85:4a:f7:17:1c:cc:bd:7e:09:44:a4:fa:88:0d:e6:
27:8a:86:02:2f:ce:4e:46:86:09:56:ca:e0:65:d2:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:76:3D:03:92:CC:43:A9:8D:5D:19:36:14:65:E1:83:EC:03:45:0D
X509v3 Authority Key Identifier:
keyid:35:3F:7C:9A:66:59:1A:C0:1F:C5:2C:77:3E:E1:A0:45:59:08:6A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/34352e3137322e3137362e302f32332d3233203d3e20323637373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.176.0/23
Signature Algorithm: sha256WithRSAEncryption
34:d4:06:72:27:67:98:dd:22:24:c0:c7:bb:dc:72:18:74:42:
b3:57:76:8d:52:6e:af:90:2e:eb:29:24:73:9b:50:4d:ce:75:
8e:48:c6:03:0e:fc:e9:a4:0d:ee:4b:73:9c:75:32:75:ec:e0:
5a:29:39:98:5b:40:72:a5:62:ad:73:a8:9a:d4:c2:e1:8d:50:
0d:7c:a5:b2:af:18:c5:3b:52:a2:70:10:e7:64:96:7f:a5:78:
d0:1a:38:6e:86:56:b2:a5:81:7b:3c:20:52:87:ee:bc:70:f0:
ad:31:9e:b0:7e:6a:c2:da:55:01:33:d7:96:8c:00:23:77:93:
d5:84:17:cb:fe:29:d6:20:27:3a:03:c5:33:df:34:79:26:01:
3d:0e:40:ee:7b:4f:2b:61:76:1b:f4:35:17:40:09:be:c9:64:
00:94:d2:f9:5b:7c:cb:96:d9:46:d8:c2:82:4c:9e:cf:bb:28:
2f:11:a9:1c:92:cf:1b:c9:bc:9f:3a:cb:28:ab:95:44:de:4c:
b2:ed:bb:77:7d:02:bc:17:78:5a:f6:c5:c2:79:33:3e:e5:7e:
dd:c7:5a:fd:55:44:50:17:3b:8f:38:16:d1:85:ce:12:e3:94:
37:c5:09:f4:75:be:a8:42:95:77:04:1b:c7:a0:79:2d:54:2d:
69:5d:d0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:22 2026 by rpki-client