This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/34352e3233302e33362e302f32332d3234203d3e20323636373133.roa
File: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (raw, json)
Hash identifier: p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=
Subject key identifier: 60:D7:EA:BC:96:F9:03:9A:81:10:A6:BA:78:26:5B:73:D1:F0:72:9C
Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Certificate serial: 508FAA93173900ADCAE1F941EC5201D3D0BECBAA
Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/34352e3233302e33362e302f32332d3234203d3e20323636373133.roa
Signing time: Tue 06 Jan 2026 19:13:19 +0000
ROA not before: Tue 06 Jan 2026 19:08:19 +0000
ROA not after: Tue 05 Jan 2027 19:13:19 +0000
asID: 266713
IP address blocks: 45.230.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 10:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:8f:aa:93:17:39:00:ad:ca:e1:f9:41:ec:52:01:d3:d0:be:cb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Validity
Not Before: Jan 6 19:08:19 2026 GMT
Not After : Jan 5 19:13:19 2027 GMT
Subject: CN=60D7EABC96F9039A8110A6BA78265B73D1F0729C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:d9:42:aa:cb:44:eb:ff:2a:a0:e5:cf:80:
e9:2e:23:b6:4d:63:0e:4b:65:75:7e:29:6d:98:df:
28:b6:3e:bf:34:94:d5:a2:6c:0c:73:0b:2d:29:6d:
9f:83:2e:48:61:19:22:7f:02:23:b6:29:0e:5f:5e:
76:56:43:a4:f4:f7:2e:37:02:a4:08:d7:05:08:ee:
40:82:02:cc:b4:23:44:bb:b8:06:5b:ed:63:38:95:
80:38:4a:eb:e4:8a:6f:1e:9f:26:fb:a2:4c:87:80:
a6:b0:3a:d7:55:68:9f:34:aa:a8:46:d9:51:53:26:
6a:93:a0:5d:ca:a6:be:fc:55:c2:12:f8:0a:8e:2a:
e9:e1:81:7c:36:6d:4e:59:6c:e6:f1:57:0d:5d:c4:
eb:9e:1f:46:81:38:9b:10:9f:e3:25:d9:f6:23:f9:
81:06:31:80:05:bc:7d:a2:6a:a5:78:c2:96:6e:03:
84:d8:a0:2e:6b:7b:b7:f6:68:d2:28:23:b1:c5:30:
30:72:27:ea:d2:47:9b:51:f3:09:34:0b:c0:4c:20:
bc:61:b0:25:01:bd:2e:19:f5:b0:0e:23:23:ab:cc:
ee:71:ef:a3:cc:98:da:9a:f1:17:6a:15:53:22:01:
23:4c:2b:ee:4b:d6:34:02:35:32:c3:70:75:58:72:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:EA:BC:96:F9:03:9A:81:10:A6:BA:78:26:5B:73:D1:F0:72:9C
X509v3 Authority Key Identifier:
keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/34352e3233302e33362e302f32332d3234203d3e20323636373133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.36.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:6f:04:e9:f4:72:58:ad:e8:f2:8c:e8:4a:68:75:3e:97:db:
c3:2c:c0:e9:19:bd:c5:2d:62:fe:f9:51:81:a9:b3:82:7f:59:
c2:5f:7c:ce:af:0d:26:70:e5:a1:7c:9b:44:69:e9:9a:d9:2b:
27:8d:10:9f:e5:05:0f:6e:70:52:bb:bd:15:7d:8c:10:cf:a9:
1a:da:c6:ce:0c:5d:01:a6:62:54:73:96:60:1d:f0:da:7e:72:
db:b9:cf:1d:92:37:fa:ce:02:61:15:d9:fd:fe:9d:fe:13:73:
d5:22:6f:b6:0f:76:ce:2f:2d:ee:e1:b4:74:70:65:62:fe:86:
41:fe:fb:80:b3:28:18:8b:e4:83:ea:1a:6c:9a:2f:85:8f:a0:
67:2d:b1:df:f3:e6:27:f3:71:9d:7c:11:c7:61:b2:cc:46:2e:
73:92:19:10:65:37:b9:e1:ab:c7:8f:12:b0:d8:4a:15:33:13:
3c:56:05:6a:f1:b3:37:06:75:f3:f1:72:1e:bb:ac:57:09:49:
44:d4:9f:28:a7:8f:3a:3e:9f:7a:3f:e6:d2:7b:8e:ee:ec:19:
44:d0:6a:e9:eb:26:77:71:a1:de:a7:85:da:26:8d:d5:cc:a7:
13:72:88:af:06:72:45:79:31:64:5b:99:ea:13:19:3d:36:24:
e6:5d:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:03:51 2026 by rpki-client