This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323032.roa
File: 34352e3233322e3131362e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier: Ble6nqVIjRz4t8rhuiu4qVtta9oE1ZSLcrQFB+sHE6A=
Subject key identifier: 2D:A7:70:D7:11:D3:15:18:C0:1D:74:39:00:1D:B3:2C:E1:14:E6:1A
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 66F9DE4BE7C5B636A16866CB1D6F2D776D8E2A9E
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323032.roa
Signing time: Tue 06 Jan 2026 19:30:38 +0000
ROA not before: Tue 06 Jan 2026 19:25:38 +0000
ROA not after: Tue 05 Jan 2027 19:30:38 +0000
asID: 202
IP address blocks: 45.232.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 10:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f9:de:4b:e7:c5:b6:36:a1:68:66:cb:1d:6f:2d:77:6d:8e:2a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Jan 6 19:25:38 2026 GMT
Not After : Jan 5 19:30:38 2027 GMT
Subject: CN=2DA770D711D31518C01D7439001DB32CE114E61A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:d4:d9:c8:22:94:d7:f5:96:00:c6:91:b8:
6b:fb:d2:3b:5e:9d:c5:bc:52:3b:35:64:c4:0e:fb:
8c:c8:e2:c7:1e:e2:75:10:63:64:28:4b:c4:a0:9c:
50:75:a5:a0:48:2e:60:1e:44:de:c4:37:3f:84:5f:
bf:0c:17:85:cf:ea:82:c9:8e:fd:52:c2:18:07:6e:
de:1a:74:c0:b5:87:58:e8:7b:e2:1b:46:e1:64:7f:
84:1b:82:25:39:25:10:14:05:27:87:9e:59:b1:6c:
47:33:18:c6:a7:72:82:65:d6:ad:95:e8:31:75:21:
f7:18:1a:02:ea:51:0e:09:85:58:db:41:a2:b0:f1:
a2:f3:1f:a9:3f:4f:8f:6a:0a:23:92:db:49:9a:61:
ed:d0:63:4d:d6:13:b5:91:09:8e:c4:3a:86:7a:ad:
85:5b:95:dd:bc:99:89:a6:a0:42:4d:4a:7d:ba:c7:
93:5b:6a:1a:61:6e:46:9f:78:9e:c0:46:8d:1b:6c:
33:1d:02:c2:86:cf:7a:13:1f:31:d9:0e:1d:54:24:
ac:d0:28:eb:6d:a9:6a:36:8f:8d:98:c3:0c:60:6d:
78:04:4e:9c:b7:32:90:a1:d0:0d:02:a0:81:d8:9b:
19:f6:ea:66:5d:fe:38:dc:a1:d4:b2:a5:ac:54:0d:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:70:D7:11:D3:15:18:C0:1D:74:39:00:1D:B3:2C:E1:14:E6:1A
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:45:16:03:ee:1d:fc:68:17:c0:ad:eb:3a:15:bf:1d:00:fd:
19:06:2e:96:0b:af:e7:5b:4a:78:96:e5:7b:9d:2a:9a:d9:67:
5a:47:8c:87:3c:97:49:3d:8e:48:72:86:2c:8e:e0:69:0e:d8:
12:23:c1:e3:8f:8a:c1:d1:94:24:a3:be:e2:b0:95:1e:d9:bc:
0e:36:0f:a6:04:26:d0:23:f5:cc:ee:c5:90:20:73:16:87:5c:
95:15:a8:f5:5c:a3:16:cc:23:bb:b8:c6:85:16:c0:6d:b1:df:
f5:d9:2a:42:20:2b:7b:d0:e2:50:36:05:82:85:95:48:04:f8:
af:3b:3a:23:39:1f:4c:7d:a3:35:ec:f4:d3:25:fe:91:0f:41:
78:b9:43:d1:a5:19:42:11:38:49:d6:ee:fc:21:41:f0:47:f3:
dc:0c:b0:47:80:ce:0e:dc:1e:3d:5e:e1:63:8f:80:5a:b9:d8:
03:12:1b:62:32:1b:3e:15:cd:7e:81:52:f8:78:29:3a:16:45:
82:1c:fc:43:10:7a:34:9e:2e:1f:7a:36:a0:e6:dd:9e:eb:b2:
23:72:b7:04:a8:48:de:19:0a:77:f0:c0:6c:36:a1:81:71:aa:
c3:b2:9b:27:48:32:04:c4:80:ac:a1:86:1f:dd:9d:fe:d3:95:
95:ab:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 14:40:04 2026 by rpki-client