This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/34352e3232342e39382e302f32342d3234203d3e203237393437.roa
File: 34352e3232342e39382e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier: lHkM1tCtccjEIA7rCUm6qynGilC5EVcNujhdiJ5buPs=
Subject key identifier: F6:75:D1:90:32:90:0F:CC:D4:F5:63:A2:7F:B4:0B:59:21:74:F5:61
Certificate issuer: /CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Certificate serial: 413EFC1515E58CEABD4D98DED1E1EFCA36CE4C69
Authority key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/34352e3232342e39382e302f32342d3234203d3e203237393437.roa
Signing time: Tue 06 Jan 2026 19:04:01 +0000
ROA not before: Tue 06 Jan 2026 18:59:01 +0000
ROA not after: Tue 05 Jan 2027 19:04:01 +0000
asID: 27947
IP address blocks: 45.224.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 00:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3e:fc:15:15:e5:8c:ea:bd:4d:98:de:d1:e1:ef:ca:36:ce:4c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Validity
Not Before: Jan 6 18:59:01 2026 GMT
Not After : Jan 5 19:04:01 2027 GMT
Subject: CN=F675D19032900FCCD4F563A27FB40B592174F561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:11:3c:80:3e:e1:61:50:cd:0b:18:06:b9:
c5:87:40:bf:04:02:b3:3b:df:78:10:7f:9e:0a:d8:
61:14:f2:2f:2d:80:fe:d5:8d:5b:c3:40:1c:a5:7c:
5b:71:d3:97:da:92:e4:4a:bc:db:c7:23:d3:d2:7c:
ce:a0:7f:1b:c7:2c:94:85:d5:10:35:38:20:19:62:
38:47:6a:f7:ff:d9:4a:89:ca:cc:2e:5a:33:28:88:
d4:c0:ae:a2:ec:53:bd:19:82:7c:21:a8:da:d9:31:
fc:c0:71:f2:6d:80:55:06:7b:55:bd:0a:84:23:cb:
68:cd:cc:03:07:2c:b8:03:34:62:20:6b:1c:92:e0:
a9:3a:1b:1a:a7:bb:82:ff:83:70:e3:4a:87:d5:10:
43:94:29:e4:98:75:7d:70:0d:4d:bd:6f:fc:52:6a:
85:14:b6:59:eb:d1:b4:54:8d:84:a4:7e:39:bd:c6:
d4:99:12:0e:dd:69:f5:41:5e:a6:40:7c:af:45:1f:
ae:e7:12:41:d8:ba:3b:2b:e6:2c:d9:48:f7:07:a9:
27:43:17:9b:89:f1:2b:e9:93:63:c6:65:ff:38:17:
27:70:ae:c1:78:72:a2:3f:7e:cd:7b:b0:f6:b4:28:
69:df:85:19:a6:d7:b2:3f:a8:0e:69:31:73:e8:ce:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:75:D1:90:32:90:0F:CC:D4:F5:63:A2:7F:B4:0B:59:21:74:F5:61
X509v3 Authority Key Identifier:
keyid:87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/34352e3232342e39382e302f32342d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:39:6a:40:43:02:6d:48:7f:1b:0a:7a:68:fc:32:3f:49:24:
cf:39:81:db:ec:d1:73:61:d7:4a:49:21:cc:cf:4f:f7:41:bb:
da:dd:e7:f9:0d:9f:a2:77:65:5f:2c:b6:57:23:46:45:b0:e6:
69:10:89:3e:d5:7d:14:60:57:87:b0:f2:38:61:1e:08:37:3a:
7a:de:54:7e:93:74:00:4c:ea:4b:25:81:4f:3a:e7:a9:c2:58:
6f:67:17:f8:e3:3d:2b:b0:15:da:5c:ab:eb:07:5a:3b:b1:7e:
73:60:1d:b2:90:17:68:3a:0f:89:83:4a:6d:52:a3:36:15:8e:
02:1f:fa:08:2e:6d:d9:29:68:12:3f:65:79:7b:19:c0:78:ca:
77:3c:72:46:a9:cd:ea:02:fc:e1:e4:2b:3f:ae:dd:b7:60:c2:
4f:15:a7:2c:1f:a2:72:b6:69:7e:9c:d4:83:c6:81:c1:7a:41:
2a:86:01:c6:83:6e:87:0b:2f:04:bd:e5:19:11:48:c7:8d:df:
7c:0a:8d:1c:d3:06:39:94:49:d8:a2:fc:53:3b:7d:6c:a3:32:
c1:51:ae:40:80:60:64:db:94:a4:61:f6:4c:a7:6c:b2:c5:ce:
f2:a4:ba:34:e9:72:3d:4c:f2:f8:2c:c5:81:16:21:dd:a8:43:
a1:93:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 14:57:53 2026 by rpki-client