This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/34352e3233392e3132382e302f32322d3234203d3e20323636383633.roa
File: 34352e3233392e3132382e302f32322d3234203d3e20323636383633.roa (raw, json)
Hash identifier: DHBvn2anvRfHw1DKDJU8rUm0jlSHj3T/BaDJrAXHbpQ=
Subject key identifier: DF:E5:A6:8E:91:20:A1:5A:B8:8B:C3:FA:0F:8B:97:F9:C0:A8:B9:EF
Certificate issuer: /CN=DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07
Certificate serial: 22E1CF24CCE9FC9D820A254BED3D13C4F8072594
Authority key identifier: DF:7C:CE:89:EE:1A:19:AE:75:BC:29:23:6E:F6:D7:40:9E:BD:4D:07
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/34352e3233392e3132382e302f32322d3234203d3e20323636383633.roa
Signing time: Tue 06 Jan 2026 18:58:29 +0000
ROA not before: Tue 06 Jan 2026 18:53:29 +0000
ROA not after: Tue 05 Jan 2027 18:58:29 +0000
asID: 266863
IP address blocks: 45.239.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.crl
rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 13:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e1:cf:24:cc:e9:fc:9d:82:0a:25:4b:ed:3d:13:c4:f8:07:25:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07
Validity
Not Before: Jan 6 18:53:29 2026 GMT
Not After : Jan 5 18:58:29 2027 GMT
Subject: CN=DFE5A68E9120A15AB88BC3FA0F8B97F9C0A8B9EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:6b:0a:4e:b6:f1:f4:bc:39:be:fd:fd:23:
44:0b:03:70:25:8e:81:97:1a:ed:91:da:49:f6:22:
00:11:47:f4:6c:9e:85:41:bb:9e:9b:4a:22:4c:62:
33:89:e0:f3:37:b9:da:ac:36:5d:90:1f:93:36:c8:
69:0d:ce:99:20:b8:e2:e0:7e:c1:f3:e7:29:06:44:
0b:0a:c2:0b:9e:9a:f3:b6:38:eb:5b:12:14:30:7c:
c8:98:f0:ac:30:d2:d8:68:e4:a6:90:01:bf:1d:4f:
7f:bd:46:94:dd:b1:35:fd:0f:03:44:88:5d:c5:ea:
46:cc:a0:c7:54:c6:a2:92:04:47:05:d9:bb:21:ea:
63:7d:93:50:76:c6:a7:70:da:40:24:c8:94:43:02:
ca:91:d1:3d:75:93:77:d3:9d:91:22:e7:07:3a:e0:
e6:6e:6e:92:ab:c7:25:92:fd:17:27:97:c1:43:77:
52:ad:d6:8f:ef:c5:c9:fb:a2:d3:7a:ce:2b:c8:4c:
5d:fe:13:2e:c1:e0:51:0e:cb:82:18:62:10:ea:8b:
c4:a9:92:e1:7c:ad:db:43:41:10:5c:44:7f:22:53:
a7:03:70:65:ae:4c:28:fe:e7:c3:40:cb:a6:ab:24:
36:81:48:4a:79:93:b7:64:9d:df:ab:06:12:eb:c6:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E5:A6:8E:91:20:A1:5A:B8:8B:C3:FA:0F:8B:97:F9:C0:A8:B9:EF
X509v3 Authority Key Identifier:
keyid:DF:7C:CE:89:EE:1A:19:AE:75:BC:29:23:6E:F6:D7:40:9E:BD:4D:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/34352e3233392e3132382e302f32322d3234203d3e20323636383633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.128.0/22
Signature Algorithm: sha256WithRSAEncryption
60:25:f6:6d:79:48:51:af:39:c1:95:d8:95:7f:35:b5:bf:ad:
3f:5c:2d:47:e7:8e:43:79:d4:ec:f5:bd:6a:f3:c4:68:71:11:
42:b5:9e:81:83:cd:b9:23:7c:82:4f:5a:9c:81:14:72:39:0d:
a2:59:94:b2:c3:4e:98:87:f0:b2:f9:90:9f:22:30:a1:70:1c:
cc:74:5b:10:e3:67:8a:69:19:61:fb:35:ae:85:42:b1:d8:1f:
93:5f:13:94:33:32:3c:35:c9:eb:26:97:59:52:d0:6d:54:05:
81:49:49:a1:9e:bc:d9:e2:df:8c:ac:9c:a3:e4:ca:94:74:23:
5e:82:ff:b1:88:41:58:b8:ae:3d:7c:da:62:29:d9:5e:f0:5f:
f9:c8:49:f7:1c:97:5b:f2:4c:c4:61:42:3e:20:c1:e5:b8:df:
8b:4d:92:26:22:3f:3e:16:94:ce:78:08:ae:bf:f6:da:b5:dd:
85:c9:b8:e1:88:15:de:6a:a4:b9:ef:38:32:df:f9:df:d1:cc:
52:84:08:d8:f6:6e:70:2a:4f:22:44:91:41:41:c6:f3:68:d3:
e8:e6:89:b8:97:d3:18:e4:60:79:72:d4:47:49:8b:a0:cf:05:
87:fa:bf:a1:d1:e2:bd:4a:d6:b8:2b:cd:91:41:d1:fe:1e:f0:
92:2d:07:57
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIuHPJMzp/J2CCiVL7T0TxPgHJZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY3Q0NFODlFRTFBMTlBRTc1QkMyOTIzNkVGNkQ3NDA5
RUJENEQwNzAeFw0yNjAxMDYxODUzMjlaFw0yNzAxMDUxODU4MjlaMDMxMTAvBgNV
BAMTKERGRTVBNjhFOTEyMEExNUFCODhCQzNGQTBGOEI5N0Y5QzBBOEI5RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7msKTrbx9Lw5vv39I0QLA3Al
joGXGu2R2kn2IgARR/RsnoVBu56bSiJMYjOJ4PM3udqsNl2QH5M2yGkNzpkguOLg
fsHz5ykGRAsKwguemvO2OOtbEhQwfMiY8Kww0tho5KaQAb8dT3+9RpTdsTX9DwNE
iF3F6kbMoMdUxqKSBEcF2bsh6mN9k1B2xqdw2kAkyJRDAsqR0T11k3fTnZEi5wc6
4OZubpKrxyWS/Rcnl8FDd1Kt1o/vxcn7otN6zivITF3+Ey7B4FEOy4IYYhDqi8Sp
kuF8rdtDQRBcRH8iU6cDcGWuTCj+58NAy6arJDaBSEp5k7dknd+rBhLrxjLbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3+WmjpEgoVq4i8P6D4uX+cCoue8wHwYDVR0j
BBgwFoAU33zOie4aGa51vCkjbvbXQJ69TQcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMzQ1Qzc2NkYyOEFFRkJDQ0M0QzMxMDdBMjIxN0E4MTk3
NjRBN0UwRUU4QTQzRTY4QUUzQTE4MUREOTY3MTNELzAvREY3Q0NFODlFRTFBMTlB
RTc1QkMyOTIzNkVGNkQ3NDA5RUJENEQwNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjdDQ0U4OUVFMUExOUFFNzVC
QzI5MjM2RUY2RDc0MDlFQkQ0RDA3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjM0NUM3NjZGMjhBRUZCQ0NDNEMzMTA3QTIyMTdBODE5NzY0QTdFMEVF
OEE0M0U2OEFFM0ExODFERDk2NzEzRC8wLzM0MzUyZTMyMzMzOTJlMzEzMjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLe+A
MA0GCSqGSIb3DQEBCwUAA4IBAQBgJfZteUhRrznBldiVfzW1v60/XC1H545DedTs
9b1q88RocRFCtZ6Bg825I3yCT1qcgRRyOQ2iWZSyw06Yh/Cy+ZCfIjChcBzMdFsQ
42eKaRlh+zWuhUKx2B+TXxOUMzI8NcnrJpdZUtBtVAWBSUmhnrzZ4t+MrJyj5MqU
dCNegv+xiEFYuK49fNpiKdle8F/5yEn3HJdb8kzEYUI+IMHluN+LTZImIj8+FpTO
eAiuv/batd2FybjhiBXeaqS57zgy3/nf0cxShAjY9m5wKk8iRJFBQcbzaNPo5om4
l9MY5GB5ctRHSYugzwWH+r+h0eK9Sta4K82RQdH+HvCSLQdX
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:08 2026 by rpki-client