This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3232203d3e203237393437.roa
File: 34352e3233352e3134302e302f32322d3232203d3e203237393437.roa (raw, json)
Hash identifier: hSXrak61eOnvWe4/dTI/sigMEYqze/yqEOz3lWoaqkM=
Subject key identifier: CA:EB:B1:9B:A5:20:01:C6:62:13:FA:14:36:A5:E0:B0:C0:8F:FB:83
Certificate issuer: /CN=851D006BBDF702AC914FD79F2055A11E9699775D
Certificate serial: 4BF7BC3DB968F14909AEAA4EAD79EBD6CC44D388
Authority key identifier: 85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3232203d3e203237393437.roa
Signing time: Tue 06 Jan 2026 19:03:25 +0000
ROA not before: Tue 06 Jan 2026 18:58:25 +0000
ROA not after: Tue 05 Jan 2027 19:03:25 +0000
asID: 27947
IP address blocks: 45.235.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl
rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Jan 2026 09:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f7:bc:3d:b9:68:f1:49:09:ae:aa:4e:ad:79:eb:d6:cc:44:d3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851D006BBDF702AC914FD79F2055A11E9699775D
Validity
Not Before: Jan 6 18:58:25 2026 GMT
Not After : Jan 5 19:03:25 2027 GMT
Subject: CN=CAEBB19BA52001C66213FA1436A5E0B0C08FFB83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:68:48:c4:8b:dc:02:71:f9:54:fb:55:b2:
64:28:09:20:18:6b:74:77:f0:3e:60:1d:1e:dc:ff:
ce:82:20:dd:0f:4e:ff:40:3a:39:3c:a0:13:20:b0:
b7:cd:bf:12:93:66:a4:f5:c6:be:7a:cb:70:a8:08:
7f:4a:2e:04:57:d8:c2:e3:9d:62:b4:98:d9:35:04:
87:ad:11:8c:5f:ec:85:14:dc:c3:31:9b:b9:ec:b3:
39:2e:f1:4c:12:94:56:be:3e:c2:8d:74:06:2a:04:
d6:92:ab:a4:03:00:49:4e:0e:84:6f:2b:e7:76:dd:
4a:13:47:b2:bd:ac:3f:49:f0:2a:21:a9:e1:54:e0:
4a:43:8b:0d:1f:c7:15:23:49:fb:3b:bc:02:6a:93:
53:e6:2f:bb:c9:12:f4:29:6e:ec:b2:24:f9:bb:93:
b7:7b:05:9c:d4:81:18:d3:ef:f5:e3:ce:94:1b:92:
9d:3b:9d:d3:33:e1:f1:f4:d6:64:33:80:f9:b6:9c:
ab:3c:4f:1b:12:cb:19:e2:71:48:fa:04:48:e3:80:
96:a6:f8:09:9a:8b:4c:51:e6:5b:f1:93:35:de:c5:
20:08:5e:4d:a9:fe:f4:63:f2:6e:74:97:85:08:b8:
bc:8e:65:94:cb:e3:6c:8d:e4:61:d2:b6:c8:5a:9b:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EB:B1:9B:A5:20:01:C6:62:13:FA:14:36:A5:E0:B0:C0:8F:FB:83
X509v3 Authority Key Identifier:
keyid:85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3232203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:8a:27:eb:10:86:e2:d5:80:27:a4:c3:2f:a2:a1:92:15:8d:
f7:ff:39:ab:d8:09:98:c3:b6:e7:87:a4:91:a0:0e:90:9d:3e:
77:32:59:3c:9f:94:b5:a4:a3:35:41:a6:95:d6:83:3f:f1:43:
02:9a:b4:f6:51:3c:a5:1b:07:3d:76:13:07:23:75:7f:10:57:
38:43:a1:a6:fb:01:ee:63:89:62:c2:fb:bf:0c:85:f7:de:a8:
0f:e9:65:79:f8:99:e9:e1:da:bb:89:18:f4:84:66:39:32:d6:
55:90:2b:9f:6d:20:15:ec:47:74:94:9b:e3:c0:82:f3:a1:d1:
f2:86:d2:05:c0:da:8c:04:50:12:e8:bf:73:45:75:fc:9c:e8:
1e:b3:62:de:ac:0d:87:e1:29:f4:93:fc:77:3f:52:1e:37:22:
06:e1:4a:67:f3:8b:9d:d5:2e:17:68:be:3f:18:20:c7:72:b7:
b9:c7:9f:8a:d5:1a:b7:f6:00:aa:37:eb:be:dd:95:0e:bd:a3:
f5:32:4a:90:3b:6e:7c:cf:0d:13:26:53:95:29:7a:83:5d:a2:
d4:99:8e:ac:85:aa:44:e7:28:b2:b5:14:b6:59:f4:47:1b:b0:
55:1e:74:18:20:70:22:11:e0:35:bc:a8:22:64:95:a1:80:a3:
62:9b:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:49:06 2026 by rpki-client