This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235342e302f32332d3234203d3e20323732303735.roa
File: 34352e37312e3235342e302f32332d3234203d3e20323732303735.roa (raw, json)
Hash identifier: NoPn8oxHRC13pvhUV2RRKTYgmrF3I0FnTJ+mD4EWFM0=
Subject key identifier: 70:65:B5:3B:84:75:0B:F4:D9:E0:13:58:71:F1:F5:32:BB:54:B7:13
Certificate issuer: /CN=896E033E875BDBE6F2217610A8C83D959EB2168F
Certificate serial: 4277E23050130FE1A34E83FBB6A2C04E58DA5EE7
Authority key identifier: 89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235342e302f32332d3234203d3e20323732303735.roa
Signing time: Tue 06 Jan 2026 19:13:24 +0000
ROA not before: Tue 06 Jan 2026 19:08:24 +0000
ROA not after: Tue 05 Jan 2027 19:13:24 +0000
asID: 272075
IP address blocks: 45.71.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.crl
rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 15:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:77:e2:30:50:13:0f:e1:a3:4e:83:fb:b6:a2:c0:4e:58:da:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896E033E875BDBE6F2217610A8C83D959EB2168F
Validity
Not Before: Jan 6 19:08:24 2026 GMT
Not After : Jan 5 19:13:24 2027 GMT
Subject: CN=7065B53B84750BF4D9E0135871F1F532BB54B713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:42:2c:75:63:94:43:f0:0c:11:a0:a0:f9:
b7:fd:24:2c:59:0c:b4:41:42:02:f6:67:5b:29:c8:
d0:23:a4:2b:e2:77:a2:8a:a9:e7:08:70:68:2d:09:
be:80:c9:1e:b3:b4:55:c2:69:3d:38:2e:c7:9d:7a:
a6:f8:4e:49:26:2d:1c:47:67:bc:6c:49:f2:34:5e:
95:2a:43:34:f4:9f:4d:21:11:c9:a9:6e:5f:b2:20:
56:4c:33:c7:10:70:d6:a8:f5:ea:52:f0:39:0b:12:
1e:55:15:99:75:ff:70:3a:77:c5:d3:b8:33:b3:3e:
03:0e:63:ed:9a:27:7a:4e:e1:81:a2:ff:51:10:44:
c0:cc:40:60:12:86:30:32:d1:93:6f:56:73:48:8a:
11:6c:c3:13:62:24:cd:b4:cb:75:68:9a:32:5a:cd:
88:6c:4f:7f:18:80:96:bc:c3:5e:52:a9:fa:36:e8:
6e:b7:c4:5a:7b:93:a3:42:7a:93:4c:12:53:1f:e3:
e7:23:9e:be:34:42:7c:e5:de:53:48:67:c9:69:4d:
fb:ea:a9:49:42:bb:f5:14:00:12:fd:d0:3e:c0:79:
6d:f7:fd:62:dd:4b:df:8c:53:d2:ad:2f:53:d6:e1:
e4:f8:44:13:53:23:d7:ad:50:62:26:6f:81:94:62:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:65:B5:3B:84:75:0B:F4:D9:E0:13:58:71:F1:F5:32:BB:54:B7:13
X509v3 Authority Key Identifier:
keyid:89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235342e302f32332d3234203d3e20323732303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.254.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:9c:39:7c:0a:cd:04:7b:f3:5d:50:a1:7e:4d:7f:55:20:77:
f9:d3:b6:39:80:47:b7:ff:3b:ab:76:a5:28:43:a8:17:9b:5a:
42:3c:ec:0d:81:22:15:03:8b:e9:d4:ae:86:a1:63:ec:03:c1:
6f:77:dd:0c:35:a6:62:4d:c8:17:44:65:4b:a5:8d:b3:a5:7a:
5f:59:53:aa:f1:3c:8e:0a:37:c7:18:d6:9c:ca:f9:8f:f9:36:
9a:cd:0f:fc:10:5c:98:3d:69:b1:38:a9:83:8b:3e:eb:d2:8e:
a8:93:33:8d:39:8a:3f:77:54:9d:87:c6:44:06:45:ca:44:a4:
6d:af:90:1c:b1:04:aa:1f:18:55:6b:01:1d:ed:f8:b4:5d:9b:
4b:b0:d8:9d:06:92:2a:9a:3f:d7:94:44:be:1e:87:28:49:63:
54:0a:fc:1b:5b:b8:a1:df:9a:72:51:63:a4:27:8c:3a:5f:af:
f9:99:d2:7c:c8:e5:2f:7b:67:a1:1a:60:d2:27:63:a4:09:1e:
b0:db:fe:8f:41:a5:d7:da:67:f1:88:e8:57:b0:c8:e8:00:74:
c2:96:b7:b1:43:eb:b3:f2:51:b3:fc:7e:40:1b:e9:58:b5:30:
bd:57:2c:86:93:e7:98:9e:20:8a:fa:0a:b6:c4:19:47:f2:38:
a2:5f:88:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:25:48 2026 by rpki-client