This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a3a2f34342d3434203d3e20323732393039.roa
File: 323830313a3161393a3a2f34342d3434203d3e20323732393039.roa (raw, json)
Hash identifier: U7oUDHyTDhblaUmWMfDj+2/IieGmVN6mcBA3MkQDeO4=
Subject key identifier: DF:6C:40:F7:05:3A:DA:1F:B2:F9:9F:17:21:4E:87:92:3D:09:31:71
Certificate issuer: /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Certificate serial: 4418A0CFD4E70F30ABE726E28413857E68E3C1DA
Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a3a2f34342d3434203d3e20323732393039.roa
Signing time: Tue 06 Jan 2026 19:34:21 +0000
ROA not before: Tue 06 Jan 2026 19:29:21 +0000
ROA not after: Tue 05 Jan 2027 19:34:21 +0000
asID: 272909
IP address blocks: 2801:1a9::/44 maxlen: 44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl
rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:18:a0:cf:d4:e7:0f:30:ab:e7:26:e2:84:13:85:7e:68:e3:c1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Validity
Not Before: Jan 6 19:29:21 2026 GMT
Not After : Jan 5 19:34:21 2027 GMT
Subject: CN=DF6C40F7053ADA1FB2F99F17214E87923D093171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:8d:9b:82:4c:31:7c:70:9d:b4:54:af:19:
96:a7:7a:17:09:85:7a:e1:fb:be:97:32:dc:ec:6f:
b8:40:c4:d5:f5:30:6a:42:ce:a2:ae:57:b2:19:f2:
45:ac:df:57:28:cf:5e:c1:11:3d:30:05:99:23:8a:
8c:f2:c9:df:29:63:72:e9:91:07:39:92:eb:aa:73:
cf:fc:e7:89:5f:e6:6e:69:75:0b:e8:17:73:11:50:
01:06:9b:03:46:41:14:5e:b5:5d:bc:ed:d0:b6:39:
66:38:ef:ed:cf:47:a3:30:64:5d:4b:e5:be:79:46:
1b:83:47:b6:c7:43:ee:60:37:69:df:8d:76:2c:9b:
12:be:00:7e:9b:16:35:98:28:41:e8:75:54:1b:c7:
52:05:2c:9d:5d:f2:e6:fa:4c:09:16:70:4f:e3:6d:
9c:6b:fd:04:39:e8:6e:81:d3:d8:b7:0f:1f:48:19:
c4:6b:33:02:7f:15:18:5a:55:20:5e:58:31:2f:a3:
8b:bb:9a:af:aa:ce:a3:0e:dc:82:0c:15:eb:a7:06:
45:4d:24:ac:14:6a:bf:b5:33:07:1a:c1:80:44:09:
68:5b:ac:fe:f8:67:86:09:2b:e4:df:51:3a:aa:3d:
7f:03:9e:15:65:2a:6b:a1:3f:2f:4f:cb:97:3d:35:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6C:40:F7:05:3A:DA:1F:B2:F9:9F:17:21:4E:87:92:3D:09:31:71
X509v3 Authority Key Identifier:
keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a3a2f34342d3434203d3e20323732393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a9::/44
Signature Algorithm: sha256WithRSAEncryption
74:f7:df:25:4e:88:d6:33:7a:3f:41:bb:ca:90:85:39:4f:e2:
5c:bc:49:66:ab:78:c1:94:da:c5:18:01:ec:ca:a5:ca:fc:86:
a5:54:ba:96:c4:20:4f:a9:37:44:65:b3:c9:ce:fd:e1:1f:5d:
a2:40:a6:02:0a:88:bb:cc:58:e0:99:f8:f1:0a:18:61:5d:91:
63:68:11:23:ac:a3:7f:fb:6b:39:92:fd:58:76:ae:eb:20:22:
f0:9a:f6:e5:6e:74:e8:5c:97:d7:00:c8:82:84:39:be:f2:90:
51:5f:43:5f:cf:93:1e:c8:e0:ba:58:45:42:bd:5d:3c:5b:9f:
85:31:5e:9c:9f:f2:4e:af:37:6a:2c:90:42:5e:79:69:3b:d1:
bd:76:d0:4e:43:7f:1a:6c:7f:e1:d3:d1:e6:c0:2c:85:fe:67:
f5:f3:41:a5:88:5d:22:e7:d7:16:c1:a5:be:82:94:47:fd:0a:
c0:56:c4:82:57:39:0e:64:88:12:d5:4b:8b:df:67:63:ee:0c:
f6:c5:eb:2b:69:d5:0e:e2:e9:2a:3f:ec:0f:39:11:b6:33:64:
45:49:91:c0:4b:28:82:8d:44:d7:df:a5:d0:9e:e3:c3:2a:b5:
f1:69:6d:67:0c:ca:c1:e4:3e:6b:82:e7:b9:7b:a6:41:ac:f3:
8c:30:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:07:56 2026 by rpki-client