This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
File: 34352e3233362e33322e302f32322d3232203d3e20323636373931.roa (raw, json)
Hash identifier: Unfkm+6sSRP41zw0gF2Yw3da3T6/66fdqoiIioNcbfU=
Subject key identifier: 34:66:67:C6:8D:96:0A:2E:64:C9:32:8E:5E:E0:82:3F:1C:30:CA:14
Certificate issuer: /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial: 56FFBD03BF6D6D5F8147B56101F2DC2297594B47
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
Signing time: Tue 06 Jan 2026 19:25:34 +0000
ROA not before: Tue 06 Jan 2026 19:20:34 +0000
ROA not after: Tue 05 Jan 2027 19:25:34 +0000
asID: 266791
IP address blocks: 45.236.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 12:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ff:bd:03:bf:6d:6d:5f:81:47:b5:61:01:f2:dc:22:97:59:4b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Validity
Not Before: Jan 6 19:20:34 2026 GMT
Not After : Jan 5 19:25:34 2027 GMT
Subject: CN=346667C68D960A2E64C9328E5EE0823F1C30CA14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:30:32:8c:04:6e:71:ac:bd:cf:07:cf:38:
29:94:0f:b3:a9:bb:4e:9d:00:ef:3f:13:f0:34:35:
c0:78:cf:b5:54:7a:3b:28:79:50:48:24:c8:c3:51:
39:3f:9f:09:6e:42:68:1b:11:a1:fc:b9:ea:26:19:
a4:f8:48:e4:14:6d:2c:db:c0:e3:ad:11:ea:a3:ce:
1e:c0:28:28:ab:74:d4:55:1e:66:a4:97:8c:39:e8:
6f:ca:d5:91:9d:01:94:1a:d3:a2:81:2c:9c:19:23:
4b:fc:29:19:c8:bc:26:1a:e0:80:ae:c6:cf:f7:4e:
58:3a:0f:04:11:e5:24:5e:42:db:d9:88:d1:68:69:
3d:5e:d9:e4:21:33:ab:0d:b2:9c:78:92:d1:8b:27:
93:67:b2:37:98:a8:61:9e:48:a4:42:c4:e9:7a:52:
07:ff:f2:c9:32:ce:05:64:aa:50:90:ed:28:eb:25:
66:d0:d0:52:bc:fd:c8:ff:e3:0e:66:a3:9e:5f:04:
e5:83:08:c5:92:c4:cc:1b:f7:e6:58:69:4f:5c:15:
85:5d:c1:b8:79:c8:29:54:d2:a6:d9:c2:c5:3e:90:
52:bf:20:1d:d6:86:49:3c:c3:45:de:a2:b9:ab:a0:
89:da:ea:8e:b5:9e:48:bf:f7:69:fc:b2:0a:f7:27:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:66:67:C6:8D:96:0A:2E:64:C9:32:8E:5E:E0:82:3F:1C:30:CA:14
X509v3 Authority Key Identifier:
keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
36:78:6d:cd:65:51:46:83:a4:1a:90:8e:85:83:56:f2:0f:87:
31:76:a2:97:e6:60:ed:ab:26:83:a5:1e:d3:5f:5f:49:57:d2:
22:18:1b:43:47:f8:19:e0:e7:f6:1f:18:b2:b1:2b:7e:e3:22:
54:15:fb:39:2b:ad:08:d7:79:db:c7:6a:87:50:c6:4f:d7:28:
53:bd:6c:67:a4:bc:cd:30:48:8e:95:7b:80:f6:03:f0:53:cb:
10:d4:cb:7a:93:0f:01:71:34:8f:6c:3e:1f:4b:27:c7:61:70:
c9:db:29:8b:d9:28:0a:87:56:68:c6:3b:d8:cc:a8:13:37:b6:
fa:94:40:14:26:5e:b7:d3:0c:e0:7a:10:c5:a2:b4:7d:33:fd:
e0:d1:b5:2e:71:61:5b:d2:2c:6d:e1:79:23:27:ee:df:76:82:
7f:69:94:14:6f:a9:38:0d:bf:d9:45:e9:79:d6:8e:65:09:69:
8a:13:81:2d:b9:c8:6b:c2:1f:55:b6:0a:15:08:ed:0f:a6:81:
92:28:7a:41:9d:19:dd:6b:d8:f1:12:99:aa:62:29:cb:dc:7f:
8b:ee:64:f8:7d:93:5b:d5:ee:dd:4f:94:e4:90:cc:ee:1c:29:
d5:fd:2a:11:bb:b9:12:8a:b2:51:96:ed:5d:89:38:71:e0:e1:
1f:8c:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:45 2026 by rpki-client