This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa
File: 323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier: AX8EwPb6R2FcPu+xRJujYG9reKcQQpGgNH0qyIuRfr4=
Subject key identifier: E8:B4:FF:E2:89:3C:9A:C7:37:04:13:EB:5E:48:CB:20:44:A5:50:D3
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 2883F401C9D966F89223712C9FEDC16C6C330BF5
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa
Signing time: Tue 06 Jan 2026 20:55:29 +0000
ROA not before: Tue 06 Jan 2026 20:50:29 +0000
ROA not after: Tue 05 Jan 2027 20:55:29 +0000
asID: 262191
IP address blocks: 2800:b70:1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 10:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:83:f4:01:c9:d9:66:f8:92:23:71:2c:9f:ed:c1:6c:6c:33:0b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Jan 6 20:50:29 2026 GMT
Not After : Jan 5 20:55:29 2027 GMT
Subject: CN=E8B4FFE2893C9AC7370413EB5E48CB2044A550D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:d6:67:2c:91:cc:29:bb:5a:ed:dd:c8:b9:
c0:1d:95:12:ae:e5:df:33:3c:0a:25:38:c4:72:96:
ee:13:39:b9:0c:e9:68:f9:a2:7b:2f:bd:76:2a:37:
58:9c:e2:17:2b:93:36:ba:55:f1:cc:49:25:86:9f:
46:01:9f:8d:64:b4:50:ab:9e:59:26:f1:7c:81:18:
af:8a:9c:a1:5e:86:c4:af:0d:6e:65:d4:ff:9e:f9:
47:86:3d:cf:33:1a:2e:db:77:d4:16:f8:0d:91:cd:
76:12:dc:09:35:72:c8:60:1d:60:3b:9f:d2:09:86:
05:37:48:a3:23:0f:f5:29:18:bc:6a:4f:20:38:f5:
79:d6:3f:26:6e:76:25:55:9e:ad:51:76:d5:b4:1d:
1b:c3:e5:2f:25:ec:e2:de:c0:19:58:8e:9f:06:bc:
b2:de:2d:41:b5:f8:c7:97:f8:fb:76:85:0e:b2:a0:
f7:2d:7d:b7:e3:f0:61:2c:36:cf:98:4f:1a:29:44:
86:d6:03:eb:78:14:a9:ac:ff:20:0d:85:55:bf:7d:
36:35:71:13:9d:b1:1c:de:b6:77:58:2b:25:9f:9b:
4a:ca:42:95:95:1c:c1:9f:18:31:9e:76:7a:7a:10:
11:85:e5:e1:a1:d1:2c:47:03:cb:42:fd:17:5e:52:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:FF:E2:89:3C:9A:C7:37:04:13:EB:5E:48:CB:20:44:A5:50:D3
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b70:1f::/48
Signature Algorithm: sha256WithRSAEncryption
80:e6:09:68:c8:5c:c5:0b:df:64:5a:0e:9b:72:97:00:f3:1f:
de:cc:0f:45:32:13:72:08:be:8c:f3:0c:22:5c:a8:6c:21:31:
18:92:13:b7:6d:ed:20:5d:0a:8d:36:f0:6c:43:c0:1c:f3:3d:
0d:d6:58:55:68:c4:f8:a5:0f:87:ed:7a:d4:76:3e:82:35:06:
ea:a3:e6:82:5a:63:0f:fa:02:c0:63:04:c4:ae:c3:33:b5:1a:
7a:77:23:69:d2:fa:ff:c1:65:c1:e2:29:16:fd:4a:5b:f0:99:
29:d3:30:31:97:84:29:e5:d4:4b:59:a9:c0:46:ff:a9:a9:df:
e6:1e:bf:71:8b:35:52:c9:c3:7f:23:00:e2:25:e9:7b:72:87:
8d:2f:8f:9b:d8:b5:d0:bd:5b:21:28:cd:71:e3:53:df:68:ff:
6a:6d:5a:81:c6:43:85:96:2c:6a:c2:59:2c:89:68:5c:9a:dc:
eb:f5:1c:3c:58:23:24:20:47:52:30:0d:c7:5b:c9:0a:4a:7b:
97:11:94:3d:59:81:d7:3b:c8:91:e6:5d:c9:69:cc:37:fb:2e:
96:1c:f9:27:25:c3:bb:4a:a9:1d:1b:1b:c4:c7:ae:41:c8:6f:
fa:a1:67:ed:e6:7c:ce:93:f6:f6:8e:44:06:3b:3d:c9:8a:a0:
ca:d6:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 02:24:06 2026 by rpki-client