This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3234203d3e20323637383233.roa
File: 34352e3137322e3232322e302f32332d3234203d3e20323637383233.roa (raw, json)
Hash identifier: uD8TRGWpt98/uaxMchXF30A7CI8WJJlP/Vg7s1W0PyM=
Subject key identifier: 30:09:B6:E6:6A:23:1D:A8:59:7C:FA:2C:B2:33:87:8F:D9:1A:C9:E7
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 7C22B4652D157FC22A8AA15869A46B43ABF30727
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3234203d3e20323637383233.roa
Signing time: Tue 06 Jan 2026 19:17:50 +0000
ROA not before: Tue 06 Jan 2026 19:12:50 +0000
ROA not after: Tue 05 Jan 2027 19:17:50 +0000
asID: 267823
IP address blocks: 45.172.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:22:b4:65:2d:15:7f:c2:2a:8a:a1:58:69:a4:6b:43:ab:f3:07:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Jan 6 19:12:50 2026 GMT
Not After : Jan 5 19:17:50 2027 GMT
Subject: CN=3009B6E66A231DA8597CFA2CB233878FD91AC9E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:b8:26:fe:26:20:d9:51:b4:b8:fe:88:28:
24:8f:fa:87:3e:f2:fd:01:ba:e1:ad:24:72:a6:4f:
50:20:ac:30:f9:e2:4c:b2:49:06:70:93:a8:83:c6:
4b:63:4f:fa:49:d4:3c:9e:49:68:dc:d3:6d:d0:6b:
79:3a:31:91:9d:2a:c2:5e:16:e6:ea:fa:4a:b3:9e:
e0:05:e1:c7:df:fb:d6:47:ba:6f:00:02:d6:e6:23:
36:09:d3:b3:a0:72:1c:f1:93:10:21:03:b6:e3:48:
e4:4a:8e:11:53:fc:87:6e:f3:f2:f0:ed:95:61:82:
d5:d3:9e:01:3a:2f:6f:90:c9:09:bd:ed:63:d4:8f:
de:59:77:cf:2a:a9:ca:e0:3c:83:93:82:74:59:4b:
8a:0e:e4:24:96:54:41:dc:d1:45:a4:90:b3:b0:17:
93:09:b8:38:3d:a1:9f:f9:2c:a7:f5:c0:dd:49:18:
9c:d3:e3:82:75:de:aa:5f:84:1e:1c:ec:0f:32:81:
aa:6d:81:83:a3:e1:fc:22:15:40:d3:14:9f:9b:9b:
1c:49:ef:1c:4d:82:36:64:9a:e0:1e:25:84:87:18:
ac:ee:c2:89:3d:f0:a3:5b:b7:2e:91:64:9e:48:c5:
4a:66:f8:06:b8:4e:9e:80:b9:0b:f8:41:50:06:46:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:09:B6:E6:6A:23:1D:A8:59:7C:FA:2C:B2:33:87:8F:D9:1A:C9:E7
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3234203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.222.0/23
Signature Algorithm: sha256WithRSAEncryption
27:99:4a:9f:48:53:a1:b2:87:32:61:b5:92:c5:6e:7a:03:22:
e4:24:65:b8:cb:e4:df:54:6f:6b:ec:ba:ee:e7:9f:d8:c6:ca:
6f:de:24:a1:44:5e:37:18:21:4d:d0:36:29:19:6f:8c:14:a2:
08:0e:92:6a:10:78:91:98:5c:08:b0:85:ef:c6:6d:df:2f:a9:
92:3a:31:de:7e:90:8c:59:66:88:22:2b:2b:c0:67:59:1d:f2:
bb:55:3b:43:c7:73:7d:59:af:b2:57:1a:e3:24:61:81:34:54:
b7:8f:53:d5:9c:1b:56:d4:ac:fe:5d:23:ee:0e:f3:a8:50:81:
6c:72:d8:51:d8:d0:c9:97:45:60:13:ca:f6:df:dc:42:2d:55:
e5:6e:41:44:06:2d:f9:f3:36:4d:70:2f:73:38:0c:4d:2d:31:
07:f6:7c:70:9d:5a:a3:a4:5f:16:32:ed:f8:3f:a5:d5:b5:0d:
0f:6a:a9:ba:8e:5a:0a:c4:26:ff:e0:47:fb:06:70:b6:c4:23:
02:5f:11:6e:a6:7b:48:b5:c0:c1:a1:17:13:2d:ab:89:1a:29:
56:13:88:d8:94:f2:e3:a1:9c:4a:e6:17:45:ad:57:ec:01:d3:
27:ad:95:62:bc:f3:5b:ae:59:35:fd:56:09:81:a8:46:41:b6:
08:11:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:03:49 2026 by rpki-client