This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/323830303a3334303a3a2f33322d3438203d3e2035363932.roa
File: 323830303a3334303a3a2f33322d3438203d3e2035363932.roa (raw, json)
Hash identifier: nmFbX4Z3ct/u5IPnFpCRtUCMmVXqOGAb/ej68ICi2gU=
Subject key identifier: F7:54:BC:A6:8E:BB:3C:81:CF:06:F5:9C:44:C0:5F:3F:C6:F5:ED:78
Certificate issuer: /CN=7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD
Certificate serial: 54496D4F51009A23E09597EF95CEDCA9BC433258
Authority key identifier: 7B:F5:5E:4B:2D:02:8A:40:96:F4:6A:4E:B8:26:03:99:DE:E1:E8:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/323830303a3334303a3a2f33322d3438203d3e2035363932.roa
Signing time: Tue 06 Jan 2026 20:57:10 +0000
ROA not before: Tue 06 Jan 2026 20:52:10 +0000
ROA not after: Tue 05 Jan 2027 20:57:10 +0000
asID: 5692
IP address blocks: 2800:340::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.crl
rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 14 Feb 2026 12:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:49:6d:4f:51:00:9a:23:e0:95:97:ef:95:ce:dc:a9:bc:43:32:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD
Validity
Not Before: Jan 6 20:52:10 2026 GMT
Not After : Jan 5 20:57:10 2027 GMT
Subject: CN=F754BCA68EBB3C81CF06F59C44C05F3FC6F5ED78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:66:b9:3a:9e:5d:3d:0d:2e:19:b3:c0:d3:
e8:c7:83:73:bb:e1:76:e7:b9:34:04:58:e6:88:56:
3f:2a:ee:ed:31:ab:18:92:75:45:87:9f:c6:8a:d0:
2b:6c:2a:00:7a:fd:9b:0a:79:e3:5e:c4:0f:65:01:
a4:8f:79:db:78:50:7e:bb:96:f2:ad:4f:62:53:ac:
9f:8d:52:74:83:e0:1e:83:df:bc:3e:80:63:08:6a:
87:32:ea:30:03:a4:bc:1f:6d:76:cf:1c:c0:74:f3:
2b:53:a3:4c:45:35:11:31:6c:ad:a0:be:85:a8:19:
47:b2:01:2c:8d:0d:29:0f:b3:32:46:82:9b:68:96:
25:e5:fb:42:98:05:90:d3:64:a2:b6:bd:e8:36:74:
2f:65:2d:75:a3:0b:c6:5c:26:7c:a3:8f:33:de:c5:
32:5c:4b:6f:f6:53:c9:a1:86:85:93:c6:46:ad:87:
a7:d7:34:f6:53:07:aa:85:96:f5:3a:17:c1:f7:d3:
3a:a2:b5:60:51:c9:07:06:b4:5e:12:12:33:96:8b:
81:59:da:2b:7c:73:94:82:4c:9d:56:5b:76:b7:85:
63:e7:c1:bf:6c:40:ed:63:c4:86:db:17:9b:46:0c:
8b:89:98:9c:ad:91:65:aa:d3:5b:ee:9c:7a:2e:ea:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:BC:A6:8E:BB:3C:81:CF:06:F5:9C:44:C0:5F:3F:C6:F5:ED:78
X509v3 Authority Key Identifier:
keyid:7B:F5:5E:4B:2D:02:8A:40:96:F4:6A:4E:B8:26:03:99:DE:E1:E8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/323830303a3334303a3a2f33322d3438203d3e2035363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:340::/32
Signature Algorithm: sha256WithRSAEncryption
16:20:8e:19:9d:d3:1f:7e:30:39:39:84:31:62:64:c9:31:74:
34:e9:43:c0:d9:e0:a6:47:a3:a6:83:0d:4d:80:b0:65:e1:50:
ae:a2:4b:0f:1f:bd:52:cd:27:84:e9:89:0e:db:83:fa:72:40:
f4:90:a7:35:3c:ea:62:76:6c:b2:be:53:80:64:95:02:3b:36:
6a:f1:58:3d:59:3b:01:27:8c:36:17:b6:cb:ae:1a:33:8a:7e:
ef:83:1a:1f:0e:ed:72:89:c0:51:b9:03:46:45:96:6f:80:e1:
57:d6:30:cd:9f:a9:e6:bc:6e:35:0a:ab:25:5a:06:5a:a6:fe:
0a:66:f5:b7:6b:70:1d:71:78:eb:ac:73:a0:95:56:7b:c3:bb:
a9:18:21:21:56:dc:ea:bc:45:c2:b6:96:2a:b7:ae:91:da:33:
7f:28:31:d0:7b:56:1f:72:b5:d7:6e:ad:53:46:3c:dd:ef:6b:
3e:d5:f5:1b:47:7d:7c:d0:05:93:8d:65:9c:1d:17:ac:9f:e2:
1f:68:35:f6:23:04:8d:66:bb:ad:65:00:b0:1f:2b:a5:e1:f3:
27:ce:b2:0d:88:a8:05:11:8b:2b:30:69:5a:48:18:5b:c6:e7:
b6:c7:ae:59:ee:ba:6d:b5:68:c5:4f:15:6a:05:37:35:d0:d6:
f1:3c:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:29:57 2026 by rpki-client