This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203237393437.roa
File: 34352e3233382e3231362e302f32322d3234203d3e203237393437.roa (raw, json)
Hash identifier: 2QMKHcccyFpvAv4mbZnjniE1jFOmx1VJTHcDcbAtj4w=
Subject key identifier: 3B:72:9B:21:FF:11:65:BC:54:7A:D5:CD:31:4E:21:32:6B:5C:87:64
Certificate issuer: /CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
Certificate serial: 3FB8833136CD107614A9E2BDF6EF4A8BA5EA4E24
Authority key identifier: 46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203237393437.roa
Signing time: Tue 06 Jan 2026 19:33:16 +0000
ROA not before: Tue 06 Jan 2026 19:28:16 +0000
ROA not after: Tue 05 Jan 2027 19:33:16 +0000
asID: 27947
IP address blocks: 45.238.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl
rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Jan 2026 00:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b8:83:31:36:cd:10:76:14:a9:e2:bd:f6:ef:4a:8b:a5:ea:4e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
Validity
Not Before: Jan 6 19:28:16 2026 GMT
Not After : Jan 5 19:33:16 2027 GMT
Subject: CN=3B729B21FF1165BC547AD5CD314E21326B5C8764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d1:84:54:18:c2:23:fe:94:ff:60:b8:48:a9:
62:6a:a7:fd:a8:3e:a0:60:67:e0:ec:5f:f4:13:b2:
37:ba:30:be:25:6a:57:9a:59:eb:1a:06:c3:25:e3:
e9:e2:71:e8:f0:80:08:e1:be:37:61:cb:66:b1:4e:
78:b2:15:8f:60:15:30:30:85:0d:22:5c:6b:11:de:
f4:ac:85:8f:e3:6f:30:8d:36:68:8f:f6:64:2d:35:
d3:bc:ad:15:a2:ec:d7:f8:63:ba:6d:50:01:f9:1c:
54:d1:b0:46:e2:f4:f1:42:ad:6a:b2:d0:e0:70:22:
aa:a2:6d:80:59:6d:8a:1e:59:34:bc:2a:d2:bc:77:
1b:52:77:77:7f:00:83:14:b9:cf:76:d9:48:66:30:
76:c2:ba:54:2a:c2:e1:d5:00:ec:09:f9:05:23:49:
e3:89:25:bd:1d:98:a1:ed:ef:30:9e:24:bc:d6:27:
29:d3:9e:62:16:3c:36:83:59:23:e3:8d:2d:5a:36:
0a:6c:cd:0d:af:8c:a4:b0:3a:89:78:fe:99:1d:fe:
31:99:2f:4a:c5:03:f1:d0:2f:b5:56:bd:c8:e5:61:
59:dc:16:0c:a4:a7:79:2d:26:0a:ae:84:5b:ba:af:
17:cc:3c:72:35:fd:6f:d8:d5:51:6e:14:96:79:ae:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:72:9B:21:FF:11:65:BC:54:7A:D5:CD:31:4E:21:32:6B:5C:87:64
X509v3 Authority Key Identifier:
keyid:46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.216.0/22
Signature Algorithm: sha256WithRSAEncryption
74:ce:f1:78:61:62:92:e1:ad:51:af:8f:94:07:5d:f9:5e:f8:
bb:d0:5a:e2:db:78:6c:89:67:52:a1:9e:eb:2f:e7:7a:a6:80:
ec:7e:3d:6c:a8:e2:55:1a:70:08:d0:73:dd:61:ce:be:57:b6:
e8:42:98:21:ed:d6:b3:22:b5:e0:cc:a6:8b:32:3c:1a:54:64:
a9:b7:c3:cb:4d:6c:5a:d8:77:14:0e:1d:ef:07:94:e5:6b:19:
b5:6c:cf:56:34:8f:95:1e:70:1b:0d:3f:18:36:1b:e3:6b:84:
03:89:50:7d:bc:4a:92:7c:50:c1:7f:3e:e0:8a:16:40:09:14:
f7:b4:06:1f:28:e3:07:8d:4e:34:cd:d5:0e:12:5d:9c:c0:20:
5c:6e:14:1a:e9:9d:62:53:34:e4:60:df:0b:8f:30:a8:1a:4f:
60:9c:96:b6:4b:09:26:00:1b:9e:75:43:5a:27:16:e9:2e:60:
82:ff:c0:be:55:78:bd:96:1e:04:6f:26:bf:3c:09:cb:2c:76:
3c:24:04:05:5b:7f:78:51:f2:9f:b0:cc:17:b8:a5:fa:7e:79:
e8:39:c2:ef:de:e5:c0:54:a9:e2:07:e0:2c:28:25:89:c4:60:
ad:a6:95:57:7d:d6:c0:f2:9b:7a:31:dc:74:13:10:23:75:b6:
55:3f:b0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:26:59 2026 by rpki-client