This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa
File: 34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa (raw, json)
Hash identifier: 32A7nuOHVY8R5ErBGxs4cPtIeAlPqzOhiQ3720myIsc=
Subject key identifier: E9:AF:3B:D8:22:DF:6F:4C:CE:E0:70:61:29:A4:EE:CF:20:2D:4C:87
Certificate issuer: /CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96
Certificate serial: 6F7C7AA6B0073597CE46760FFA666BAC7C95F7D9
Authority key identifier: AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa
Signing time: Thu 22 Jan 2026 14:26:46 +0000
ROA not before: Thu 22 Jan 2026 14:21:46 +0000
ROA not after: Thu 21 Jan 2027 14:26:46 +0000
asID: 269786
IP address blocks: 45.188.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.crl
rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:7c:7a:a6:b0:07:35:97:ce:46:76:0f:fa:66:6b:ac:7c:95:f7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96
Validity
Not Before: Jan 22 14:21:46 2026 GMT
Not After : Jan 21 14:26:46 2027 GMT
Subject: CN=E9AF3BD822DF6F4CCEE0706129A4EECF202D4C87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:45:41:02:99:3e:d9:f7:21:d8:14:cb:97:c3:
a2:1e:0b:d9:fd:19:07:10:19:66:47:74:79:c5:c8:
e7:63:17:d2:c2:9c:38:2a:cc:fe:f5:70:36:b7:38:
cc:e2:97:2d:9d:f3:1b:26:96:70:c2:81:33:b4:5c:
77:2a:6d:c8:bc:a8:9f:1a:13:c7:76:db:15:8b:ae:
be:2b:58:f2:7f:2f:aa:5a:1a:20:5a:f4:bd:37:ad:
70:14:5c:42:0b:9b:ee:49:19:b4:18:4c:b7:8e:2e:
06:94:d4:8d:71:71:02:39:8f:a1:e1:84:10:3b:17:
c7:4a:a6:4e:71:cc:1d:45:4c:ec:f9:7f:55:37:dd:
6a:f3:b5:d0:09:34:a2:99:c9:0e:44:85:61:74:8f:
23:0d:8a:43:44:18:7e:4d:91:d6:47:7c:4d:61:a1:
45:2a:86:95:d3:82:52:12:10:33:0d:99:bc:f3:0d:
51:11:40:3b:2f:5e:e2:2f:a3:12:60:25:0d:e0:cf:
d9:66:59:94:c0:01:f4:de:95:45:12:02:42:f1:55:
a2:93:62:c5:5a:a0:47:46:d9:79:55:35:42:2d:1f:
90:25:8b:3f:c4:be:ca:72:0e:c5:6a:9e:34:a1:0b:
e1:ea:60:55:6c:50:73:53:01:57:ca:a3:c0:26:29:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:3B:D8:22:DF:6F:4C:CE:E0:70:61:29:A4:EE:CF:20:2D:4C:87
X509v3 Authority Key Identifier:
keyid:AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.208.0/23
Signature Algorithm: sha256WithRSAEncryption
14:ab:d0:8a:bf:e7:51:a5:c7:88:74:2f:02:a9:c9:fa:5f:79:
86:9a:f0:c0:ee:8e:ee:f9:1f:3d:6a:21:6a:5e:f4:0f:dc:5b:
ff:42:93:45:3c:40:b3:13:b4:5e:20:e0:33:db:07:69:08:28:
0a:21:69:d4:32:98:87:c5:2e:ea:5d:92:17:4b:c9:32:e6:34:
07:7a:7d:ac:38:e6:a0:ff:6b:b1:91:33:9f:e2:8e:73:f7:d6:
55:16:6d:85:f9:20:77:07:63:65:fc:c1:3f:10:76:ed:a2:79:
cd:be:8c:cf:27:9e:af:51:26:33:20:23:a0:e7:65:83:e9:15:
f6:fc:29:45:0f:bc:5b:68:51:49:73:70:9a:1a:05:5d:a0:0e:
63:c5:d5:0c:a4:10:d4:57:d1:d5:2b:b8:09:20:0c:ad:b9:24:
8f:72:04:4e:d1:19:a7:64:81:4f:34:32:8a:17:8c:70:b2:cc:
15:fe:04:0b:8f:82:de:ea:f7:cf:17:2d:c5:fe:5f:6b:97:5c:
bb:26:ca:f5:4b:dd:3b:b9:7e:99:1b:0c:07:25:93:07:c2:15:
98:0b:df:9d:e2:3d:b4:6b:28:39:43:d7:3b:45:87:88:d9:09:
da:ae:85:48:dc:97:ed:cd:a7:29:2e:4b:22:e4:68:5a:5b:28:
26:e9:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:58 2026 by rpki-client