This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203133343839.roa
File: 323830313a3163323a3a2f34342d3434203d3e203133343839.roa (raw, json)
Hash identifier: i300+FiRFGhFB4TGAEd2yWVtg6SPlx8ytL9pGDOzRGY=
Subject key identifier: 14:C4:72:31:D8:48:73:01:AB:2B:73:5E:C2:18:BA:77:86:8D:18:FD
Certificate issuer: /CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF
Certificate serial: 303D8C328FDFC26FB734EBA3880A79F6A20439F9
Authority key identifier: 1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203133343839.roa
Signing time: Tue 06 Jan 2026 19:30:45 +0000
ROA not before: Tue 06 Jan 2026 19:25:45 +0000
ROA not after: Tue 05 Jan 2027 19:30:45 +0000
asID: 13489
IP address blocks: 2801:1c2::/44 maxlen: 44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl
rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 12:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3d:8c:32:8f:df:c2:6f:b7:34:eb:a3:88:0a:79:f6:a2:04:39:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF
Validity
Not Before: Jan 6 19:25:45 2026 GMT
Not After : Jan 5 19:30:45 2027 GMT
Subject: CN=14C47231D8487301AB2B735EC218BA77868D18FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:55:00:e3:8f:60:94:cf:68:ff:99:c7:7f:
75:a1:be:d9:f1:ef:5f:9e:78:a7:eb:8f:fc:d6:62:
d8:a0:25:a8:20:4c:00:b4:1d:49:a0:95:74:75:00:
38:cb:29:5b:a3:7a:cf:99:3c:a5:50:2b:50:54:1a:
18:1d:6d:e5:f5:19:b1:81:7d:5a:4f:d9:79:c1:81:
8b:f3:a8:ae:82:7b:db:00:e8:2f:93:34:e2:29:a7:
02:47:e3:30:bf:07:3a:88:e4:8b:a4:57:20:64:1c:
a5:65:6c:b7:ac:6e:db:32:10:79:53:66:4b:eb:b5:
bc:b4:0c:bc:80:1d:e1:5b:0e:77:4b:ec:5e:50:4b:
9b:e3:b4:6b:bd:10:a2:24:63:7b:99:76:40:ef:a2:
cb:69:43:8f:b6:c6:83:b0:bc:c2:6c:92:5b:74:48:
ca:91:4b:36:e1:6f:da:c7:30:d0:d1:c3:d6:dc:63:
77:3d:92:b4:53:ce:e4:60:b6:40:ef:28:d9:22:5c:
5e:45:ba:1d:9b:20:6a:ac:39:a8:0f:ae:a3:02:20:
62:1b:26:6d:33:36:b4:54:b7:37:2f:d7:ff:11:c3:
b0:9e:3f:8c:5c:de:0e:86:e6:8b:86:3e:a3:f5:e1:
98:3f:42:21:64:89:a0:dd:e1:5e:88:c0:70:ba:87:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:72:31:D8:48:73:01:AB:2B:73:5E:C2:18:BA:77:86:8D:18:FD
X509v3 Authority Key Identifier:
keyid:1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1c2::/44
Signature Algorithm: sha256WithRSAEncryption
8f:db:f6:4f:82:67:ff:a9:23:2c:cd:45:bb:12:0f:d1:e6:ef:
a9:ae:06:25:b4:44:b4:30:2e:23:d0:5a:7b:8e:06:0d:e8:ba:
5d:df:3c:46:07:4e:02:c6:05:62:7c:d7:f0:52:e9:ef:49:c0:
44:37:c7:9d:f4:26:dd:a2:45:00:18:2b:e7:2e:a4:e2:bd:50:
11:04:ea:6d:b0:ca:a8:95:f9:4f:cc:a5:c3:4b:a4:94:9c:79:
56:a1:09:85:5a:b1:9e:0b:25:14:23:db:b7:01:a5:ea:df:94:
a1:bb:6b:38:07:c9:61:59:a0:3c:14:c0:0a:12:bc:0a:c1:4c:
4e:e1:e2:6b:dc:c7:85:5d:2f:57:68:e2:c1:25:ad:14:81:5a:
aa:29:41:74:0c:70:75:38:f9:1c:56:4f:c2:bb:c0:e4:49:1e:
b4:ad:bf:7e:35:28:3b:c6:9f:98:78:7f:2c:46:d7:ec:6d:b7:
32:b6:54:98:d8:ff:c4:aa:a5:84:37:a2:2e:24:69:fd:fc:36:
53:e4:5a:35:c2:8e:ae:b6:08:5e:81:c8:68:22:64:f9:ca:12:
ae:09:f1:87:64:84:cf:c7:5e:99:6f:66:9c:23:36:48:0b:18:
e6:75:18:f5:e4:5e:b5:98:e9:d0:f6:de:c8:8f:a3:8d:56:30:
86:40:ba:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 12:17:56 2026 by rpki-client