This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A9E1452F2239A1EBB61B6CCA67DEBAEEBCD37C28F2055926AC43AA3650125C0/0/323830313a31663a663030303a3a2f34382d3438203d3e203139343239.roa
File: 323830313a31663a663030303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier: SdYq8bBB3B2cOr3xDqzeMh8+36ISyC4LLhL4RVRvzfg=
Subject key identifier: 33:AE:D5:AB:E0:2C:FA:8C:49:D5:B5:D4:D9:8E:BB:C4:53:6F:40:47
Certificate issuer: /CN=FD7E0F655D53A6BF39D6163629378E139709A28B
Certificate serial: 408652AB5629A504B839CC09D4DD830F093BB9AC
Authority key identifier: FD:7E:0F:65:5D:53:A6:BF:39:D6:16:36:29:37:8E:13:97:09:A2:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD7E0F655D53A6BF39D6163629378E139709A28B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7A9E1452F2239A1EBB61B6CCA67DEBAEEBCD37C28F2055926AC43AA3650125C0/0/323830313a31663a663030303a3a2f34382d3438203d3e203139343239.roa
Signing time: Tue 06 Jan 2026 19:16:52 +0000
ROA not before: Tue 06 Jan 2026 19:11:52 +0000
ROA not after: Tue 05 Jan 2027 19:16:52 +0000
asID: 19429
IP address blocks: 2801:1f:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7A9E1452F2239A1EBB61B6CCA67DEBAEEBCD37C28F2055926AC43AA3650125C0/0/FD7E0F655D53A6BF39D6163629378E139709A28B.crl
rsync://repository.lacnic.net/rpki/lacnic/7A9E1452F2239A1EBB61B6CCA67DEBAEEBCD37C28F2055926AC43AA3650125C0/0/FD7E0F655D53A6BF39D6163629378E139709A28B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD7E0F655D53A6BF39D6163629378E139709A28B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Jan 2026 00:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:86:52:ab:56:29:a5:04:b8:39:cc:09:d4:dd:83:0f:09:3b:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD7E0F655D53A6BF39D6163629378E139709A28B
Validity
Not Before: Jan 6 19:11:52 2026 GMT
Not After : Jan 5 19:16:52 2027 GMT
Subject: CN=33AED5ABE02CFA8C49D5B5D4D98EBBC4536F4047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:43:ef:d5:45:ae:7d:60:ad:0f:fe:14:91:
eb:b4:4b:b7:da:fe:4c:40:08:64:dc:03:61:e5:e3:
a5:45:6b:cc:67:48:95:21:82:3a:00:51:f8:06:36:
ed:b8:35:93:a5:2d:63:40:13:33:cb:89:a5:99:a3:
08:87:d5:57:26:26:56:0b:d8:20:2b:1c:c8:a6:d1:
b0:78:37:99:d3:63:4b:99:e2:79:0d:05:85:1f:40:
58:fd:fc:70:91:16:a7:95:97:fe:82:f3:b0:36:db:
ad:d3:95:94:7d:19:94:ce:db:a3:b7:b4:6d:fd:93:
b6:ad:3f:57:e6:73:09:6e:f1:d4:39:9a:56:b0:22:
4b:b8:c7:8a:35:27:ed:94:20:c7:9f:25:17:11:38:
d9:42:1f:a5:1b:91:62:c1:d9:e6:1f:09:d6:5f:5b:
a4:b4:8a:67:c3:b1:27:ef:4f:45:c8:a2:da:21:7a:
46:f0:7f:40:2d:24:f9:9c:8a:15:e2:52:ff:42:7a:
40:13:1d:b1:4d:c8:06:8d:e8:27:45:ce:b5:26:c3:
5f:b5:d8:97:5d:b0:ba:b1:1c:75:74:0a:f5:1f:95:
f5:0e:1b:9f:04:91:9a:17:a4:d7:83:8a:42:b7:f4:
fa:f2:f9:39:eb:dd:81:89:50:4f:5a:c7:bc:13:27:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:D5:AB:E0:2C:FA:8C:49:D5:B5:D4:D9:8E:BB:C4:53:6F:40:47
X509v3 Authority Key Identifier:
keyid:FD:7E:0F:65:5D:53:A6:BF:39:D6:16:36:29:37:8E:13:97:09:A2:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7A9E1452F2239A1EBB61B6CCA67DEBAEEBCD37C28F2055926AC43AA3650125C0/0/FD7E0F655D53A6BF39D6163629378E139709A28B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD7E0F655D53A6BF39D6163629378E139709A28B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A9E1452F2239A1EBB61B6CCA67DEBAEEBCD37C28F2055926AC43AA3650125C0/0/323830313a31663a663030303a3a2f34382d3438203d3e203139343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1f:f000::/48
Signature Algorithm: sha256WithRSAEncryption
a9:2d:86:b5:09:c0:e8:48:a9:b8:c2:f9:59:3c:cd:84:2a:1a:
19:1f:23:1a:e6:0e:6e:f2:d3:86:4d:41:f1:1e:89:85:97:c9:
56:67:99:1b:b2:b1:2a:f9:c7:6f:a8:5c:d2:dc:ea:c2:17:b2:
10:37:0e:b1:08:47:16:78:3c:57:b0:75:18:f9:b8:ce:c5:4e:
33:00:ba:8b:b2:85:46:54:26:29:9d:eb:0a:a9:7d:00:2c:87:
e3:e0:ae:c3:17:95:66:fe:aa:77:19:1b:0d:98:bf:65:0d:55:
7f:38:ae:2f:44:04:57:78:55:fa:33:c2:b1:7a:24:84:f8:8a:
8a:d2:ad:87:30:ea:f0:be:6c:5c:10:e4:09:45:71:5b:b1:f6:
0a:31:b7:35:1b:3b:3e:8d:d2:c7:b7:1f:68:9c:bd:43:58:2d:
4d:b9:06:dc:7c:49:4a:93:21:f2:9b:9d:4a:52:03:8a:7e:24:
37:34:ed:51:25:be:9b:3e:15:89:ba:6f:bd:eb:f3:13:8e:fb:
c9:fe:03:f8:49:69:9c:f6:75:5e:a5:cc:b0:07:8f:b3:37:2b:
e2:bd:58:27:6b:13:31:c0:b0:95:6d:4b:49:c5:82:c3:4e:1a:
67:7f:bc:5e:b5:bf:a3:09:03:6a:df:78:0b:d0:37:11:15:ae:
7b:4c:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 16:46:03 2026 by rpki-client