This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/323830313a31633a363030303a3a2f34382d3438203d3e203237393839.roa
File: 323830313a31633a363030303a3a2f34382d3438203d3e203237393839.roa (raw, json)
Hash identifier: 7VSGvv53e4ZwkRiydpytjjQhiz6SxxSuZFftT9jPXiA=
Subject key identifier: 7B:A3:44:80:6F:7D:6C:8C:AF:53:66:61:56:2A:44:A7:CD:DA:5A:14
Certificate issuer: /CN=D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D
Certificate serial: 083D2077AF18DFB850B4C4BBCF5E753A70905DA3
Authority key identifier: D2:FB:79:58:17:08:2A:32:A8:F3:E5:DA:E4:37:DE:6D:0C:A8:5E:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/323830313a31633a363030303a3a2f34382d3438203d3e203237393839.roa
Signing time: Tue 06 Jan 2026 19:41:17 +0000
ROA not before: Tue 06 Jan 2026 19:36:17 +0000
ROA not after: Tue 05 Jan 2027 19:41:17 +0000
asID: 27989
IP address blocks: 2801:1c:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl
rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Jan 2026 08:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3d:20:77:af:18:df:b8:50:b4:c4:bb:cf:5e:75:3a:70:90:5d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D
Validity
Not Before: Jan 6 19:36:17 2026 GMT
Not After : Jan 5 19:41:17 2027 GMT
Subject: CN=7BA344806F7D6C8CAF536661562A44A7CDDA5A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:5a:33:10:48:13:a2:b3:cc:c1:a0:fb:0d:
b5:8e:af:05:df:19:49:a2:1a:58:d3:35:27:a1:0e:
bb:e0:86:e1:da:1e:67:d2:5e:ef:44:e4:be:3f:d1:
d5:1c:c1:aa:23:57:d6:c5:90:8e:43:bf:13:da:ee:
f8:29:73:bb:81:a6:51:08:21:33:84:bb:d9:72:75:
87:5c:74:b7:52:0e:fd:75:bd:1f:c1:9c:bc:0b:1d:
1c:34:6b:76:da:c4:47:f3:65:bb:37:3d:67:1c:82:
06:d5:d6:b4:1e:96:b9:bf:92:86:3e:cd:13:4e:bc:
de:a7:d3:95:81:d3:d3:b6:24:24:13:05:4e:49:99:
7f:40:c4:26:d1:01:ca:a6:32:23:df:98:c9:db:ca:
11:90:d6:5a:63:99:36:62:de:fe:d7:4f:0a:b7:08:
8d:02:72:7f:aa:6e:29:65:30:8b:eb:1b:fa:67:2d:
90:d7:ef:a6:2a:f9:fd:b6:20:dd:23:ef:e1:86:c1:
d3:18:30:b1:7f:17:8a:f4:93:8d:51:4e:61:fb:d9:
63:68:f8:95:33:47:d0:fe:82:ba:00:65:c6:17:64:
9d:8e:5c:ca:c4:1b:57:a7:e0:4f:f7:cf:24:4a:29:
75:33:e9:d1:52:8b:a9:7a:15:0b:a8:23:1b:3e:49:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A3:44:80:6F:7D:6C:8C:AF:53:66:61:56:2A:44:A7:CD:DA:5A:14
X509v3 Authority Key Identifier:
keyid:D2:FB:79:58:17:08:2A:32:A8:F3:E5:DA:E4:37:DE:6D:0C:A8:5E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2FB795817082A32A8F3E5DAE437DE6D0CA85E1D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5388144CC1445D19AB568D3704F57C4106F4A596E0BD94D573BB0465BC96EA87/0/323830313a31633a363030303a3a2f34382d3438203d3e203237393839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1c:6000::/48
Signature Algorithm: sha256WithRSAEncryption
04:94:8a:67:4e:42:15:0f:7d:fa:4b:9f:f4:0b:aa:df:d7:b9:
ca:ff:92:f5:1b:bf:8e:d5:e8:2f:1a:6b:16:10:a1:e4:39:4f:
85:7b:58:01:0d:94:a0:c7:9b:ed:a7:1e:72:7d:2b:c3:9d:ae:
77:14:3c:ca:15:d2:26:b0:b7:3e:1c:7f:e8:48:77:e1:e2:bd:
c9:5a:23:2d:72:25:ae:6b:e0:60:25:24:cf:56:24:73:f2:db:
6b:53:69:c1:62:6f:3a:fe:a5:af:07:ad:da:89:9a:03:5e:50:
94:de:fb:e3:58:f3:aa:af:d5:7f:08:e6:15:61:13:66:7f:da:
63:74:84:72:b8:60:c3:96:b7:46:f6:3e:ed:17:f4:45:f1:bc:
90:0d:cc:13:cb:58:0a:5e:b2:d7:36:8b:0e:52:e0:da:58:3a:
31:d7:54:da:61:ba:92:98:b8:57:85:57:0d:88:db:f3:bf:26:
27:2e:94:de:6b:da:c8:4d:8c:b9:b3:62:80:5c:0e:7d:5c:86:
e0:b5:c3:7b:ee:96:42:a2:ba:50:4a:97:88:5b:c9:10:64:d1:
ee:d7:cb:67:0b:cb:0f:b9:99:58:25:96:20:94:55:3d:6e:9a:
da:4f:f2:22:3b:25:76:f3:19:57:ba:7b:0f:7f:09:d9:1e:25:
be:77:5a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:03:38 2026 by rpki-client