This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa
File: 34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa (raw, json)
Hash identifier: k7ajaWe9qeLhXjRxeiG8qdk6Wu+YuDEZnN3REBOH0Fw=
Subject key identifier: A8:D0:AD:52:39:8F:37:6C:68:75:5D:04:7F:38:14:A7:67:F7:03:F4
Certificate issuer: /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial: 0303803A77CC01602FD5D4F0321F4A191941228A
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa
Signing time: Tue 06 Jan 2026 19:33:21 +0000
ROA not before: Tue 06 Jan 2026 19:28:21 +0000
ROA not after: Tue 05 Jan 2027 19:33:21 +0000
asID: 269858
IP address blocks: 45.189.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:03:80:3a:77:cc:01:60:2f:d5:d4:f0:32:1f:4a:19:19:41:22:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Validity
Not Before: Jan 6 19:28:21 2026 GMT
Not After : Jan 5 19:33:21 2027 GMT
Subject: CN=A8D0AD52398F376C68755D047F3814A767F703F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:20:22:3a:58:1d:3a:aa:75:65:21:f8:29:
c7:e1:7f:39:55:2b:c1:3d:70:a6:6c:d9:96:9a:bd:
ba:44:8d:13:d9:66:f4:fc:2d:0d:92:dc:33:72:e5:
b6:0b:2d:b9:35:a4:15:e3:9c:6b:b4:9a:4b:2a:d5:
0e:a3:6f:b1:ae:54:f6:fb:e2:8e:cb:89:1f:e2:2e:
d5:8d:90:4d:fa:79:01:3c:43:b7:6d:c9:9d:00:5a:
44:39:13:68:b8:49:17:3b:1e:0a:55:e1:b2:41:5c:
db:4a:a8:f4:57:b7:f9:f8:8f:b2:3a:a5:d5:6f:3c:
8e:e7:51:8d:42:30:6c:3f:b2:56:40:2b:52:52:21:
5d:33:98:24:2b:87:4c:20:cf:2b:0d:c5:6b:f6:50:
04:6b:72:1a:98:f6:a7:67:56:e6:59:7d:83:81:ab:
76:73:da:7e:12:e3:30:a4:35:99:7c:a2:b9:39:66:
7f:eb:08:7c:6d:4d:a6:66:5a:e2:92:f1:f4:fe:fb:
d1:92:0f:6b:40:18:c2:d9:4a:00:9f:74:a6:f0:b6:
39:d3:2c:f9:b1:58:7c:2e:df:17:64:f8:59:3b:8d:
57:ad:d5:e9:a9:c0:20:03:a1:50:48:04:93:94:ab:
04:5e:68:ab:5f:09:3a:16:a8:ed:f2:80:1e:43:33:
33:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:AD:52:39:8F:37:6C:68:75:5D:04:7F:38:14:A7:67:F7:03:F4
X509v3 Authority Key Identifier:
keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.196.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d7:3a:5d:64:02:35:47:15:3b:54:32:27:2f:34:c7:d0:40:
22:86:80:ae:13:76:1e:32:fa:29:f6:04:d2:b0:ae:23:b1:83:
ad:75:65:2e:78:b2:26:fb:29:59:11:13:4b:58:45:90:92:3c:
81:fb:82:38:48:20:79:f5:6d:f2:34:21:48:c2:da:f6:0b:3e:
9c:4e:2f:aa:a9:8f:d0:31:31:42:00:36:a9:aa:e8:1d:f2:52:
b2:a0:87:3d:4d:03:24:1a:f0:83:d3:54:4d:25:43:85:c7:e9:
42:ce:43:e0:6b:a4:6c:2c:0d:58:99:fc:fa:98:02:5e:8c:40:
7c:48:67:59:e6:80:21:c7:60:07:fc:0b:ba:67:9b:ad:ad:44:
f3:ee:10:06:d3:e5:1c:be:59:69:aa:90:79:0a:6e:52:5e:c1:
db:6e:ab:0d:c6:d7:f1:5b:29:d9:33:f3:e3:2f:99:90:55:90:
06:98:f7:a6:96:df:60:d5:78:bf:47:13:47:11:6e:8a:75:f8:
71:ac:64:dd:a9:bc:3f:1e:32:99:69:23:98:e2:b0:68:d8:41:
e4:8e:5d:06:cc:4e:ad:94:10:47:f7:c7:ea:2a:94:40:e9:08:
a7:ad:86:a4:5c:95:7b:12:43:11:bf:2e:85:a9:03:10:15:ec:
32:6f:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:28:49 2026 by rpki-client