This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa
File: 323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa (raw, json)
Hash identifier: CgkXU1Xie+wX9sp79m+CuybfhqLztJlTWoEFB7HSDrk=
Subject key identifier: 7E:0D:AA:62:3C:32:3C:FB:5B:90:54:FE:1F:64:4B:8C:E5:FE:60:59
Certificate issuer: /CN=728EC5445CEE97191BF04E1B6FE632CB14937698
Certificate serial: 5DA024FD6C35D130F8D3C9E0447B1552D2D8D2CF
Authority key identifier: 72:8E:C5:44:5C:EE:97:19:1B:F0:4E:1B:6F:E6:32:CB:14:93:76:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa
Signing time: Tue 06 Jan 2026 19:39:14 +0000
ROA not before: Tue 06 Jan 2026 19:34:14 +0000
ROA not after: Tue 05 Jan 2027 19:39:14 +0000
asID: 3549
IP address blocks: 2801:15c:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.crl
rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Jan 2026 21:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a0:24:fd:6c:35:d1:30:f8:d3:c9:e0:44:7b:15:52:d2:d8:d2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728EC5445CEE97191BF04E1B6FE632CB14937698
Validity
Not Before: Jan 6 19:34:14 2026 GMT
Not After : Jan 5 19:39:14 2027 GMT
Subject: CN=7E0DAA623C323CFB5B9054FE1F644B8CE5FE6059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:91:1c:d0:9e:46:5e:99:68:28:c4:00:d0:
f2:9e:1a:b1:a8:7e:47:3e:0e:40:18:a0:76:1f:ce:
9b:23:78:4c:a9:4f:38:6a:f5:0c:8a:80:5a:35:16:
ff:09:96:ac:29:d3:de:f9:6f:2b:00:43:c9:38:20:
2a:7f:3f:79:dc:de:f4:68:a9:62:a0:9b:54:63:ab:
04:8f:72:0c:42:d8:8c:40:6c:26:05:3e:88:d0:32:
44:55:be:95:7e:0b:24:5d:51:9e:c5:b7:3e:2c:97:
12:1b:95:c9:db:e7:20:f8:d0:6e:3a:11:d1:01:f2:
8a:2e:08:f6:31:5c:ea:f8:03:67:86:2c:89:70:6b:
80:f6:39:08:78:66:f1:d7:d9:cd:93:36:f6:03:a8:
bf:62:d0:2f:87:c4:bb:56:40:77:5b:69:52:25:75:
68:4a:ab:8a:70:a4:a6:6f:70:c6:6e:34:17:2b:98:
68:23:6b:d7:cf:9b:de:bc:99:e3:e4:d8:e9:2b:2f:
56:b3:33:bd:2b:1a:c9:90:35:8a:43:58:b9:47:fc:
69:19:97:be:af:fc:26:9c:90:18:f8:7d:9a:87:83:
94:46:a4:59:7e:f7:9e:d8:d9:aa:fe:91:8f:88:89:
c5:8d:c7:3f:15:0c:ad:10:93:92:b5:1a:93:d9:8e:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0D:AA:62:3C:32:3C:FB:5B:90:54:FE:1F:64:4B:8C:E5:FE:60:59
X509v3 Authority Key Identifier:
keyid:72:8E:C5:44:5C:EE:97:19:1B:F0:4E:1B:6F:E6:32:CB:14:93:76:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/728EC5445CEE97191BF04E1B6FE632CB14937698.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EC5445CEE97191BF04E1B6FE632CB14937698.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD04EE5C1D5E5284F12004A3B9C51557A34C5449DA5AC6AC6EA3D3614F7AE71/0/323830313a3135633a323a3a2f34382d3438203d3e2033353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:15c:2::/48
Signature Algorithm: sha256WithRSAEncryption
67:a8:e1:45:83:80:19:f4:d0:73:06:6f:a7:6c:22:b0:9b:91:
ab:9d:82:d5:7f:e6:64:11:e8:03:ab:50:a1:c6:39:0f:e2:b9:
2b:e0:7e:06:20:87:99:81:fb:0a:11:56:d8:b9:56:2e:11:e1:
fe:43:b9:3f:5b:5c:fd:3b:1a:5a:4c:86:1d:20:24:b7:c2:e7:
ce:e4:c4:39:09:cc:9c:e6:ce:26:b0:3a:4c:48:9b:48:2e:0c:
51:4f:50:ec:54:d1:37:d8:5d:1b:ef:1a:56:31:4a:5c:77:d1:
55:d6:01:e9:dd:8a:e3:8b:1b:61:d9:b6:9f:e6:24:3c:7a:db:
28:11:40:04:4c:e4:1d:4e:c7:48:02:89:21:63:c5:72:2e:6e:
1a:43:93:b4:28:cf:af:41:68:83:f6:a4:05:b2:23:e7:08:c2:
75:da:25:f1:dc:7f:8c:64:08:bc:9b:6d:58:6e:17:ed:51:10:
35:a3:4a:d8:d3:50:62:ae:fc:c6:63:b5:fc:d0:94:9b:45:54:
53:05:c8:d1:f6:77:d0:f5:4e:41:ff:c7:d5:bf:e1:85:68:4e:
c2:c2:c3:be:1e:bc:a0:7e:4c:1d:ef:59:ff:88:f0:b3:65:50:
fe:be:a8:7b:8f:af:a0:dd:4f:94:7b:80:e1:03:a5:f5:1c:58:
d4:74:e2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 21:09:33 2026 by rpki-client