This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323033.roa
File: 323030313a313333303a3a2f32392d3634203d3e20323033.roa (raw, json)
Hash identifier: k8Tm89v62AU74K+XRZaz5llD1CPNzYXwMpWhMDQ/+s0=
Subject key identifier: 36:22:C7:EE:01:2C:F1:A5:53:6E:61:A8:8A:88:7F:32:16:24:90:A3
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 3ADE732E5404C2D3B49AB35EE1B3F00885ADE932
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323033.roa
Signing time: Tue 06 Jan 2026 19:30:33 +0000
ROA not before: Tue 06 Jan 2026 19:25:33 +0000
ROA not after: Tue 05 Jan 2027 19:30:33 +0000
asID: 203
IP address blocks: 2001:1330::/29 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Jan 2026 09:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:de:73:2e:54:04:c2:d3:b4:9a:b3:5e:e1:b3:f0:08:85:ad:e9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Jan 6 19:25:33 2026 GMT
Not After : Jan 5 19:30:33 2027 GMT
Subject: CN=3622C7EE012CF1A5536E61A88A887F32162490A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:a6:b4:07:a8:70:17:b2:69:1e:6a:31:a1:
cd:26:9c:a4:ea:fe:82:db:df:55:46:51:f9:5c:b5:
4b:ed:7b:75:d8:97:25:bc:11:55:bd:d5:41:e2:1b:
fb:fd:9d:02:5c:ab:19:4c:6e:f0:d8:94:87:28:79:
32:df:cc:63:0a:7f:41:0f:df:45:81:04:17:48:bc:
c8:69:fe:78:37:d2:dd:6e:87:f3:1a:73:ca:54:bd:
93:0c:08:c7:ff:6a:21:b6:69:5d:31:ac:8d:8d:a4:
29:ab:18:16:d0:1c:97:32:56:cc:8a:85:99:8a:5c:
8f:1f:60:5d:d8:fc:01:88:86:da:f4:9d:d1:4c:7e:
be:49:9e:79:13:be:73:67:fb:14:a2:0f:8c:fc:ba:
98:2a:b5:d2:df:02:2a:b2:d7:b6:0a:14:a6:97:ad:
fc:c9:3a:49:ef:ec:e4:54:8d:00:44:8c:e9:eb:c3:
f4:64:f5:fc:eb:89:a9:19:5b:14:3b:d8:95:9f:a0:
08:d9:8b:07:73:89:3d:33:51:80:ce:74:b1:68:34:
49:75:6f:43:b4:52:b1:97:82:92:dc:f2:f3:01:6e:
31:18:f5:cb:98:a9:d0:a1:36:e8:e8:45:b2:29:a1:
6c:02:cc:76:0f:79:d6:ba:14:4d:cd:f8:9e:0b:23:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:22:C7:EE:01:2C:F1:A5:53:6E:61:A8:8A:88:7F:32:16:24:90:A3
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1330::/29
Signature Algorithm: sha256WithRSAEncryption
76:5d:59:26:1b:34:de:ea:f5:a6:4c:90:e1:98:7a:3f:e5:41:
49:6b:63:79:56:0c:57:19:43:ab:4d:9c:d3:68:ae:c6:dc:1b:
fe:f3:05:b0:a4:2a:46:cd:71:67:2a:3c:36:de:15:68:29:0e:
8c:06:34:01:59:76:04:d9:da:3b:20:e0:72:dd:ed:e1:e0:5f:
a7:19:97:be:d1:aa:44:e6:82:6a:59:bb:89:70:4f:02:af:fe:
35:bb:f8:14:ca:e8:f8:82:a2:08:e5:c7:ef:09:9b:a8:e4:e3:
22:87:c8:62:db:0c:a9:7d:d3:e7:08:52:a1:0c:62:15:2f:7b:
b2:30:10:13:7d:e0:b9:b2:29:c5:8b:ca:70:af:36:f2:8a:78:
22:42:04:53:9b:f9:cb:b9:55:0b:6a:c5:e8:94:02:08:fd:22:
24:71:1c:38:70:41:3e:a4:ba:bc:69:e4:bc:70:ad:2e:4e:c9:
3c:d6:d2:52:dc:a7:2a:7c:76:13:ca:eb:54:ab:62:9d:88:53:
a1:82:62:95:99:fb:78:d2:03:27:25:91:c8:34:f3:9d:9e:14:
fd:98:e0:ad:84:31:7a:df:76:e1:dc:7d:fb:6d:b0:b2:0d:83:
b2:82:f7:04:32:5a:b7:40:bd:2f:c4:cf:7f:b2:1f:d4:07:e9:
6d:2d:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 09:55:27 2026 by rpki-client