This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/323830303a313030303a3a2f32342d3438203d3e2038303438.roa
File: 323830303a313030303a3a2f32342d3438203d3e2038303438.roa (raw, json)
Hash identifier: 7rIOUDCd89P9yNtxhC9waRfV0zzJI/odro6rB/LE58s=
Subject key identifier: 27:E0:8E:F1:B6:71:0B:1A:EF:E1:B3:5D:FA:89:BE:AE:03:89:BA:11
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 2E0F16238F3D4E838D961CA0D99E2FC9DF7EE33E
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/323830303a313030303a3a2f32342d3438203d3e2038303438.roa
Signing time: Tue 27 Jan 2026 12:27:40 +0000
ROA not before: Tue 27 Jan 2026 12:22:40 +0000
ROA not after: Tue 26 Jan 2027 12:27:40 +0000
asID: 8048
IP address blocks: 2800:1000::/24 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:0f:16:23:8f:3d:4e:83:8d:96:1c:a0:d9:9e:2f:c9:df:7e:e3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Jan 27 12:22:40 2026 GMT
Not After : Jan 26 12:27:40 2027 GMT
Subject: CN=27E08EF1B6710B1AEFE1B35DFA89BEAE0389BA11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:4e:fa:c2:8d:0a:c6:86:72:98:5c:b8:f5:
37:b8:07:f7:5d:7b:4f:0c:5e:b9:35:90:3d:a1:94:
76:5e:cb:d0:7c:8c:ee:1b:51:5b:88:e1:49:4b:7a:
0f:d0:7f:3d:a4:bd:42:f5:71:ac:4e:f3:96:45:6b:
97:5f:c1:76:53:f6:d6:bf:18:7a:19:c0:0e:f8:de:
70:f1:65:24:ce:a7:be:a3:50:61:de:7c:54:90:3e:
83:c6:e0:06:8a:55:a2:15:97:c4:c8:b8:ef:04:37:
29:54:e3:87:f9:53:d7:6b:6d:6b:5f:b9:ac:97:42:
a9:2b:f3:de:e9:c0:d6:ec:ef:1e:03:7c:83:e3:e4:
2d:c3:31:15:cf:ed:79:19:30:9c:ed:46:cb:40:37:
d5:cb:06:f5:0b:9e:1a:11:7d:fe:cf:31:ed:ee:a4:
7b:e9:bc:91:69:64:34:a1:0a:57:7e:d1:df:d5:dc:
a4:3d:05:70:33:fb:60:33:e4:e6:80:22:f0:08:cb:
bc:3d:10:ff:9d:4b:d7:cb:b7:59:9d:1e:d7:64:c4:
4c:b4:63:64:d0:21:55:f4:2e:b2:24:38:32:8b:17:
14:2f:71:cc:a2:31:88:fd:0a:68:21:c3:08:c3:cd:
1a:a4:2a:15:9b:c0:55:e7:a3:c1:0b:fe:0f:d6:59:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:8E:F1:B6:71:0B:1A:EF:E1:B3:5D:FA:89:BE:AE:03:89:BA:11
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/323830303a313030303a3a2f32342d3438203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:1000::/24
Signature Algorithm: sha256WithRSAEncryption
6d:7c:66:ee:0e:7d:3e:d1:d2:33:22:7d:c5:5f:68:3e:b8:5d:
59:1a:77:a3:2b:c0:3a:22:06:83:f8:3d:7b:b1:e1:35:13:28:
60:04:0d:28:94:5c:ca:18:e8:d4:2c:e7:a6:54:e2:a6:42:41:
de:dc:3c:25:a1:30:ca:bb:97:4d:e7:01:a5:43:1c:ed:98:f7:
de:29:ff:fe:aa:64:c3:a5:fe:4c:0a:f6:ad:76:27:13:0e:10:
c5:27:c4:54:02:dd:b6:c2:43:d0:48:78:dc:1b:f5:94:7e:8e:
2d:d5:6e:ef:33:14:9f:14:79:ce:28:84:9b:bf:05:37:9f:ac:
38:cb:dd:82:cf:53:df:f9:52:a6:5e:f2:23:48:5f:b5:37:d3:
8c:a6:83:c8:40:45:5e:63:3d:35:59:ea:3a:a3:5c:34:9b:b0:
bb:20:91:4e:1d:82:f1:06:e3:9e:84:68:c6:d8:ad:5e:18:02:
c7:e7:c4:f3:a6:45:e5:90:49:51:28:49:ba:54:d0:c7:fc:7b:
ed:de:29:ff:ad:0f:dc:fb:a7:72:ee:e3:1c:f1:a8:5c:4d:b6:
64:d5:bb:e1:e0:bf:bb:a0:f7:84:06:23:2a:63:ef:5f:17:3c:
2f:66:8a:62:65:5f:f6:c8:86:ac:25:ce:01:c5:66:0e:59:95:
31:1d:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:17:17 2026 by rpki-client