This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa
File: 34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa (raw, json)
Hash identifier: 0bUC3ySC4jCELAl7tmSMZ40weK3hv4Gzxv3ntwNuM+s=
Subject key identifier: 54:D4:4B:81:FA:4E:7E:2C:34:A1:6D:52:03:D2:4A:5A:A0:3E:4E:7B
Certificate issuer: /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336
Certificate serial: 1A622771CE023D48CE868453D6AA10EBC25E027D
Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa
Signing time: Tue 06 Jan 2026 19:34:01 +0000
ROA not before: Tue 06 Jan 2026 19:29:01 +0000
ROA not after: Tue 05 Jan 2027 19:34:01 +0000
asID: 267705
IP address blocks: 45.164.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl
rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:62:27:71:ce:02:3d:48:ce:86:84:53:d6:aa:10:eb:c2:5e:02:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336
Validity
Not Before: Jan 6 19:29:01 2026 GMT
Not After : Jan 5 19:34:01 2027 GMT
Subject: CN=54D44B81FA4E7E2C34A16D5203D24A5AA03E4E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:94:08:88:78:49:a4:62:67:a5:4c:87:fc:f1:
d5:cb:78:33:ec:08:d2:cf:29:a7:02:be:19:07:e3:
b8:44:cc:5e:1a:00:da:3c:53:7c:42:82:8e:7b:04:
bb:34:b0:57:48:e3:4a:c3:ea:5c:21:cd:0b:75:9d:
82:fb:34:1b:3f:00:cf:61:ee:e0:17:22:4d:bc:da:
5c:88:30:9a:1d:63:c1:10:fc:28:7c:ac:bf:c8:fe:
7b:f5:7f:a7:4a:3a:19:cf:3e:38:13:bc:04:8a:d2:
db:f0:78:22:87:d5:23:51:a0:fa:58:0b:b0:11:57:
19:d7:a7:5e:11:9c:9f:14:f6:1a:ae:28:ad:62:aa:
65:ac:4e:0f:1f:60:c4:29:c2:2b:b8:6a:25:52:61:
2b:e8:d1:1d:a5:dd:3b:e1:f2:6b:55:92:5a:16:e9:
94:98:63:87:31:d4:b1:8b:4f:dc:fc:92:ee:dc:a2:
f1:45:5b:8e:40:62:bd:0c:67:cb:9a:28:14:80:5f:
73:ca:82:91:d5:2c:95:c5:17:c7:35:c6:42:f1:91:
70:e2:2d:81:62:c4:25:18:75:a8:95:9b:77:46:e8:
af:0e:4b:8b:ca:3f:d1:ff:de:54:7b:ec:f4:6c:97:
12:16:52:b8:e5:b8:ae:2a:a9:ad:d3:5e:7e:69:d2:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D4:4B:81:FA:4E:7E:2C:34:A1:6D:52:03:D2:4A:5A:A0:3E:4E:7B
X509v3 Authority Key Identifier:
keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.172.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:0e:dd:5d:5f:a5:58:cf:f0:d9:d6:00:ff:7c:b7:98:2c:24:
fc:15:d7:78:59:4e:b0:a6:4a:60:23:fe:9a:f5:99:0e:74:3e:
20:05:0d:ef:81:df:4c:aa:c8:ea:95:a1:ee:c9:d3:d2:76:74:
34:98:bd:4f:a6:b9:25:e5:37:02:f4:51:6a:0b:b8:32:06:4a:
b7:e1:04:60:ab:c5:91:27:b3:d3:ba:68:3d:e8:82:ff:7d:d7:
7e:f1:fb:ed:be:69:65:e9:88:7a:82:f6:4d:c1:6d:f3:e4:6e:
47:c3:4d:6c:93:47:d8:fd:d9:aa:e5:0c:49:52:25:81:e4:cd:
a9:36:1f:fd:9e:62:e8:cd:4d:16:76:2d:d9:db:53:a0:32:d2:
18:e1:23:b7:96:a2:f3:8e:80:dc:04:e4:70:ce:55:55:a4:81:
8a:d6:ec:53:32:63:92:40:74:90:9d:f5:7e:79:c9:f0:5d:f3:
d6:2f:ee:bb:6d:a4:26:7d:05:7f:d2:91:34:29:14:3f:7d:3b:
da:fe:99:57:57:8a:bb:78:b8:3e:d4:8e:00:e8:f4:af:db:ba:
fb:3f:0e:1b:e6:8e:b7:99:ab:19:ab:c2:28:63:c0:4d:79:89:
70:9a:3b:ce:bc:5c:5d:31:25:3f:6e:85:98:c8:bb:c6:20:f0:
21:64:94:40
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGmIncc4CPUjOhoRT1qoQ68JeAn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBGRjI5NUI5MzlBRDcyNTg5Q0UyNEI3RTRFRDQxRkM1
QzU2QTMzNjAeFw0yNjAxMDYxOTI5MDFaFw0yNzAxMDUxOTM0MDFaMDMxMTAvBgNV
BAMTKDU0RDQ0QjgxRkE0RTdFMkMzNEExNkQ1MjAzRDI0QTVBQTAzRTRFN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqlAiIeEmkYmelTIf88dXLeDPs
CNLPKacCvhkH47hEzF4aANo8U3xCgo57BLs0sFdI40rD6lwhzQt1nYL7NBs/AM9h
7uAXIk282lyIMJodY8EQ/Ch8rL/I/nv1f6dKOhnPPjgTvASK0tvweCKH1SNRoPpY
C7ARVxnXp14RnJ8U9hquKK1iqmWsTg8fYMQpwiu4aiVSYSvo0R2l3Tvh8mtVkloW
6ZSYY4cx1LGLT9z8ku7covFFW45AYr0MZ8uaKBSAX3PKgpHVLJXFF8c1xkLxkXDi
LYFixCUYdaiVm3dG6K8OS4vKP9H/3lR77PRslxIWUrjluK4qqa3TXn5p0mh3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUVNRLgfpOfiw0oW1SA9JKWqA+TnswHwYDVR0j
BBgwFoAUAP8pW5Oa1yWJziS35O1B/FxWozYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQzM1RTlERjJDOUU3QUNEQzU3MzNDNkFEOUQ0QUZENDA3
OEVFNURFQTU1RjlFNjIwQjU0QjRDNTAxQTIxRkNCLzAvMDBGRjI5NUI5MzlBRDcy
NTg5Q0UyNEI3RTRFRDQxRkM1QzU2QTMzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEZGMjk1QjkzOUFENzI1ODlD
RTI0QjdFNEVENDFGQzVDNTZBMzM2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkMzNUU5REYyQzlFN0FDREM1NzMzQzZBRDlENEFGRDQwNzhFRTVERUE1
NUY5RTYyMEI1NEI0QzUwMUEyMUZDQi8wLzM0MzUyZTMxMzYzNDJlMzEzNzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzczMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLaSs
MA0GCSqGSIb3DQEBCwUAA4IBAQDSDt1dX6VYz/DZ1gD/fLeYLCT8Fdd4WU6wpkpg
I/6a9ZkOdD4gBQ3vgd9MqsjqlaHuydPSdnQ0mL1Pprkl5TcC9FFqC7gyBkq34QRg
q8WRJ7PTumg96IL/fdd+8fvtvmll6Yh6gvZNwW3z5G5Hw01sk0fY/dmq5QxJUiWB
5M2pNh/9nmLozU0Wdi3Z21OgMtIY4SO3lqLzjoDcBORwzlVVpIGK1uxTMmOSQHSQ
nfV+ecnwXfPWL+67baQmfQV/0pE0KRQ/fTva/plXV4q7eLg+1I4A6PSv27r7Pw4b
5o63masZq8IoY8BNeYlwmjvOvFxdMSU/boWYyLvGIPAhZJRA
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:25:25 2026 by rpki-client