This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3a2f33362d3438203d3e203134303830.roa
File: 323830303a3830303a3a2f33362d3438203d3e203134303830.roa (raw, json)
Hash identifier: kwh3J+K0BDIkMnoCb/0S86rYu5YPbsaSFVNYbthniO8=
Subject key identifier: CC:93:87:D6:89:94:27:B5:2B:C7:AA:BA:67:C3:81:1E:D4:2F:2F:0F
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 31934CC0E0D9C79435474A9FB13BB6F973EF1A1C
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3a2f33362d3438203d3e203134303830.roa
Signing time: Tue 06 Jan 2026 19:02:59 +0000
ROA not before: Tue 06 Jan 2026 18:57:59 +0000
ROA not after: Tue 05 Jan 2027 19:02:59 +0000
asID: 14080
IP address blocks: 2800:800::/36 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Jan 2026 09:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:93:4c:c0:e0:d9:c7:94:35:47:4a:9f:b1:3b:b6:f9:73:ef:1a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Jan 6 18:57:59 2026 GMT
Not After : Jan 5 19:02:59 2027 GMT
Subject: CN=CC9387D6899427B52BC7AABA67C3811ED42F2F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:8d:05:75:c4:06:de:13:f9:de:c8:a7:fe:
cc:e3:cd:9b:8b:89:60:84:98:0e:3a:54:6d:22:1c:
82:cd:65:5f:b5:5e:18:28:28:08:eb:c8:6d:16:f8:
a8:19:62:b7:1d:af:83:a8:25:e8:d7:5a:f9:9f:08:
2e:0a:f3:69:79:07:7c:ba:60:c8:2d:5e:64:ec:7c:
32:2c:6d:a1:a1:d0:94:99:90:41:14:f2:ea:a8:d1:
d6:49:90:c1:e6:1d:bc:17:0e:29:19:56:34:64:bc:
2e:68:93:eb:7e:d3:27:7d:e5:04:46:da:72:3b:d1:
ba:26:99:c3:22:4f:50:7b:ad:5b:85:51:3a:81:23:
aa:f3:d6:18:18:c2:c6:c3:4a:73:de:ed:60:80:68:
03:0f:c1:43:c2:d6:70:c8:bf:e4:20:d9:6c:04:f4:
86:be:8b:d6:00:1d:a0:97:ba:00:4f:be:de:fa:9e:
3b:2a:ff:a9:e2:64:f9:4d:d4:47:35:93:42:46:df:
73:ee:39:e0:bf:90:04:b9:17:1d:74:e9:52:9f:cf:
8f:b6:be:2e:c6:a5:0e:51:18:b1:5f:35:b9:0a:47:
78:67:f5:12:e2:74:2b:80:82:e0:39:10:93:8e:f4:
8e:3a:5f:b1:b9:61:ee:e6:bb:5f:61:7d:b6:fc:ae:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:93:87:D6:89:94:27:B5:2B:C7:AA:BA:67:C3:81:1E:D4:2F:2F:0F
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3a2f33362d3438203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:800::/36
Signature Algorithm: sha256WithRSAEncryption
af:c4:ba:7e:5a:92:16:35:66:31:3b:45:02:f3:ab:76:fb:9a:
70:46:a6:ce:e5:bb:59:cd:c2:ae:70:fa:c9:4a:c4:d9:57:60:
e1:14:cd:4c:81:ea:87:97:2a:43:3d:5f:7b:e6:cf:f8:cd:c0:
13:5c:f8:5f:83:e6:45:3c:0c:3a:60:18:3a:57:fb:3c:c0:af:
45:a2:c9:a8:1e:70:09:41:05:e6:4a:2f:64:05:c5:e4:03:39:
33:3b:21:c6:85:7f:66:fc:83:81:44:99:7f:64:08:a1:53:9b:
f4:87:20:de:fd:a6:1a:6d:b5:5f:38:6d:a4:17:01:f8:60:58:
b8:f9:55:e5:2e:44:e6:0b:0f:ab:23:55:0f:75:00:a1:0a:14:
dd:bb:11:77:1c:c4:30:e9:32:b1:42:3a:cf:91:07:d7:a8:1a:
a5:fc:0e:a5:2a:36:11:59:ed:a5:a6:90:72:bd:4f:ea:44:cb:
59:c3:34:15:19:3d:f8:95:08:ce:ef:15:18:98:ae:37:3f:6b:
67:2c:a7:40:c2:63:e9:99:b4:8e:a0:15:fb:05:5a:44:4c:25:
94:33:77:74:7f:ae:df:62:17:e7:f4:4e:76:db:57:33:45:79:
bf:a5:74:90:66:30:c0:b1:57:cb:19:41:62:bf:8a:17:d1:7c:
32:88:a5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 15 17:43:45 2026 by rpki-client