This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa
File: 323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier: /TWHYacLQ2VcHMhBLiriVERdLXzF8txlA1CLYUcai7c=
Subject key identifier: 06:6C:79:3C:54:AE:C6:02:9F:3B:15:4E:41:60:4F:43:AA:02:AC:5A
Certificate issuer: /CN=DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8
Certificate serial: 1E2FD3C7E254E96BF556B6D37C57F1AFA2351CFF
Authority key identifier: DE:8A:21:D3:81:A2:A8:57:4B:0F:6A:2D:86:54:9E:47:F4:FB:87:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa
Signing time: Thu 06 Nov 2025 21:55:00 +0000
ROA not before: Thu 06 Nov 2025 21:50:00 +0000
ROA not after: Thu 05 Nov 2026 21:55:00 +0000
asID: 27951
IP address blocks: 2801:1e:f800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl
rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2f:d3:c7:e2:54:e9:6b:f5:56:b6:d3:7c:57:f1:af:a2:35:1c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8
Validity
Not Before: Nov 6 21:50:00 2025 GMT
Not After : Nov 5 21:55:00 2026 GMT
Subject: CN=066C793C54AEC6029F3B154E41604F43AA02AC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:a6:5b:3f:14:50:94:a1:78:aa:65:26:88:
f2:e6:51:09:a2:57:87:31:31:87:4d:ae:77:89:b7:
cc:6c:f4:ca:1b:ce:7b:ab:9c:f4:ef:9f:78:17:32:
25:ae:e6:15:36:95:8d:f2:0d:e9:4c:71:55:93:59:
9a:85:cc:09:44:4e:78:d7:53:0f:85:24:f2:bf:69:
e4:ab:db:38:cc:43:d7:5c:25:b8:76:44:de:c6:d9:
c7:00:01:63:56:b6:07:b5:ce:38:20:01:5f:90:f4:
77:a6:f0:76:3f:5f:0e:a4:ba:ed:8a:5d:4a:e9:57:
c9:4c:7a:73:fd:e9:89:c9:1f:90:77:2f:a4:da:0a:
10:e3:cc:25:d9:0e:09:38:0a:e8:ad:23:ba:c6:8b:
2f:b6:ac:24:b5:a5:78:91:99:db:57:18:2d:c4:72:
89:75:90:39:ab:58:5a:86:e0:69:94:80:98:7c:65:
68:15:dd:5d:d6:cf:8a:b5:05:3e:c3:72:63:f5:32:
de:91:c9:0f:e9:00:ca:1d:e9:f2:2e:b5:8f:f1:e2:
7e:46:a7:dc:7e:18:41:82:0e:42:21:98:59:3b:4f:
73:d0:f7:c0:46:99:b5:11:17:1d:b2:a9:19:8b:89:
b9:15:6d:db:66:72:96:30:03:57:4b:e4:da:9d:f5:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:79:3C:54:AE:C6:02:9F:3B:15:4E:41:60:4F:43:AA:02:AC:5A
X509v3 Authority Key Identifier:
keyid:DE:8A:21:D3:81:A2:A8:57:4B:0F:6A:2D:86:54:9E:47:F4:FB:87:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8A21D381A2A8574B0F6A2D86549E47F4FB87D8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D60D87ACD7CC1D8FF8A571EC35C811508EDBA500A97039C81F52EC1EF73DE51B/0/323830313a31653a663830303a3a2f34382d3438203d3e203237393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:f800::/48
Signature Algorithm: sha256WithRSAEncryption
50:95:f7:76:0c:ad:f3:ed:18:0e:71:75:fb:73:4f:98:1a:c5:
e1:53:0d:3e:65:61:33:8e:54:12:94:01:35:a5:c4:55:86:c2:
c0:64:d5:af:e0:c1:15:fb:ac:9e:d1:03:81:ac:a4:a3:a8:33:
5f:fa:5b:22:5d:79:fc:f2:1a:f8:61:d5:6e:ca:ff:30:27:38:
34:f4:be:f4:36:1e:eb:ff:ec:d7:52:3a:16:88:08:9d:7b:ce:
27:4a:39:c8:56:f6:1a:b2:77:ad:69:f3:34:1c:c5:01:ef:eb:
db:bf:b2:d3:0d:57:8c:17:8c:79:86:88:2a:94:b5:1b:f8:31:
02:76:83:4d:51:8e:c8:65:17:21:4d:2c:5e:47:cf:eb:f3:5d:
89:70:12:74:7f:f1:a7:4b:72:f6:83:9e:c7:aa:b1:10:a2:e1:
7d:f0:63:70:6c:18:21:d3:f6:c3:fe:3c:44:69:05:e3:85:5c:
1e:b5:5c:2f:92:15:b4:c9:01:64:b7:d6:66:d1:df:5e:f5:ae:
b2:f3:1a:a9:2a:b6:e2:08:d3:ad:e1:db:df:39:7a:92:16:5e:
de:32:ca:98:b5:cb:6c:11:8c:9b:7a:9c:64:45:9c:52:e9:51:
7c:5f:50:a2:33:51:ab:cf:2a:ed:8f:7f:c5:dc:2c:32:4f:5c:
ff:1d:ab:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 12:26:00 2025 by rpki-client