This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/34352e3137322e3231392e302f32342d3234203d3e203236353631.roa
File: 34352e3137322e3231392e302f32342d3234203d3e203236353631.roa (raw, json)
Hash identifier: B1W0KfqPGW+w1rUhbFYNXM6O0Kwbdcq2UdHxf2zHJRc=
Subject key identifier: 92:10:56:29:91:D2:80:F2:07:1F:7D:8E:F1:C4:49:D0:BE:C8:61:8A
Certificate issuer: /CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
Certificate serial: 21DF8FEC8FFD5189F1489388EFAE97A322E93345
Authority key identifier: 29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/34352e3137322e3231392e302f32342d3234203d3e203236353631.roa
Signing time: Tue 23 Dec 2025 13:20:00 +0000
ROA not before: Tue 23 Dec 2025 13:15:00 +0000
ROA not after: Tue 22 Dec 2026 13:20:00 +0000
asID: 26561
IP address blocks: 45.172.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl
rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 05:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:df:8f:ec:8f:fd:51:89:f1:48:93:88:ef:ae:97:a3:22:e9:33:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
Validity
Not Before: Dec 23 13:15:00 2025 GMT
Not After : Dec 22 13:20:00 2026 GMT
Subject: CN=9210562991D280F2071F7D8EF1C449D0BEC8618A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:22:50:67:79:4e:d5:57:ae:ef:2d:4d:84:
e9:9f:85:fc:c4:27:95:03:c0:9f:f3:df:f7:76:b4:
84:6c:4b:f4:8b:e1:5a:0e:7d:59:ba:1f:db:ae:bc:
49:b7:4f:b0:d8:06:3e:8d:72:7d:91:4a:82:4d:61:
4e:b9:5e:1e:df:51:9e:53:79:e5:45:6c:7b:c8:78:
2c:9e:48:aa:33:a3:5a:12:f8:29:03:ca:2b:7b:9f:
64:ec:bc:3e:a3:01:ce:5e:8d:35:3c:2a:ab:30:d2:
af:df:6e:fd:00:1f:91:9d:50:07:8e:9e:c7:0e:70:
ef:21:31:1f:15:26:ea:99:cb:c5:5b:02:6b:08:8f:
e0:50:a4:5a:ea:71:6b:18:09:17:20:79:f0:e6:3c:
5d:ab:44:38:bc:a3:c3:13:8a:81:fd:88:08:b8:d7:
af:65:e7:e2:2e:c3:3e:a0:06:21:e6:e8:3a:c8:40:
34:40:25:5b:c0:4b:41:1d:39:b6:86:5e:d7:e9:ca:
1b:78:f7:97:97:82:4d:15:27:c6:56:71:5d:24:f7:
69:46:e8:45:84:5e:e4:63:0c:de:3a:65:01:d5:e7:
85:e8:7d:87:d7:b7:58:a0:35:8d:c0:d1:71:e1:ad:
08:47:56:89:6d:50:73:89:c6:53:2d:af:29:41:c0:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:10:56:29:91:D2:80:F2:07:1F:7D:8E:F1:C4:49:D0:BE:C8:61:8A
X509v3 Authority Key Identifier:
keyid:29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/34352e3137322e3231392e302f32342d3234203d3e203236353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:27:b5:08:a4:e9:11:7f:a8:50:38:c0:6b:97:e2:1e:28:e5:
8e:0b:ec:92:9b:dc:9f:66:e0:1a:37:f4:c0:e3:5a:0b:90:94:
07:db:5b:3d:13:75:64:57:0b:14:0f:aa:e2:ec:fb:e4:01:8b:
5e:a8:96:04:34:a9:c2:08:51:fb:fb:90:4e:04:61:8e:12:31:
77:4f:14:b3:09:c8:46:f3:60:e0:96:fe:c7:d6:a0:64:5b:15:
e5:65:d2:fc:10:41:ad:12:cf:27:8e:3b:66:ab:5d:6f:87:6c:
77:77:de:86:ae:fa:e1:e3:17:80:68:a8:a2:39:f8:80:53:d7:
0e:e2:aa:b4:4b:a8:e1:d4:16:e8:83:a2:87:ca:70:ff:6e:5e:
a0:65:04:56:54:90:aa:fa:ac:99:c3:7a:ed:4f:fb:a6:4d:45:
cb:1b:e5:bb:9d:7f:78:e5:f8:44:90:b6:a0:14:5c:9f:7b:12:
72:d2:78:11:05:73:84:95:df:b1:02:ad:2b:f1:03:77:9e:0c:
36:02:63:90:9e:16:bc:76:0f:ea:f7:cf:4c:0a:84:eb:80:54:
b7:80:12:55:f7:67:1f:ee:b3:a9:9b:73:ba:24:34:31:c0:72:
31:37:1a:ea:ea:ff:6c:83:ce:1a:9f:c1:14:31:7b:a6:99:1b:
f9:63:c2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:15:17 2025 by rpki-client