This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/323830313a3137323a3a2f34382d3438203d3e203134303830.roa
File: 323830313a3137323a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier: 3iHCqauAeMjtJGWiZakwgham8iFO0SSJiD+UMe5IIR0=
Subject key identifier: C0:36:ED:C5:E6:C4:27:F2:13:7F:AF:2C:86:D0:95:F0:AD:26:FC:2B
Certificate issuer: /CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
Certificate serial: 788C7128D1EBF9DCFE7872B5E5A9B5033A73981B
Authority key identifier: C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/323830313a3137323a3a2f34382d3438203d3e203134303830.roa
Signing time: Tue 06 Jan 2026 19:26:50 +0000
ROA not before: Tue 06 Jan 2026 19:21:50 +0000
ROA not after: Tue 05 Jan 2027 19:26:50 +0000
asID: 14080
IP address blocks: 2801:172::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl
rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8c:71:28:d1:eb:f9:dc:fe:78:72:b5:e5:a9:b5:03:3a:73:98:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
Validity
Not Before: Jan 6 19:21:50 2026 GMT
Not After : Jan 5 19:26:50 2027 GMT
Subject: CN=C036EDC5E6C427F2137FAF2C86D095F0AD26FC2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:d6:38:04:ba:86:b9:95:a0:7b:56:35:6a:
b4:77:0f:7f:7f:45:af:a9:ee:36:16:4a:aa:15:a7:
74:2f:c2:08:a1:8f:c3:53:86:08:2d:8b:de:4c:a8:
a4:a4:3d:19:c3:dc:cb:87:ea:54:7b:fe:77:e6:92:
4d:7e:88:7e:bf:c9:57:ea:78:3c:58:7f:b6:5a:57:
63:da:85:39:5f:1d:4b:ee:44:ed:91:0d:da:08:42:
2e:06:7f:9b:65:88:77:da:5a:80:8c:12:92:f3:75:
86:6a:ef:aa:5b:c0:19:71:1a:c4:bb:6b:bf:2d:91:
86:1f:d9:15:6d:4e:0a:54:a0:54:4c:c8:cb:b7:37:
ce:67:49:33:8a:25:74:98:a4:f8:e7:28:b4:dc:bc:
44:6f:f5:6b:93:3b:dc:9f:44:0d:29:fa:45:b9:59:
bb:ea:05:94:9b:32:09:d2:48:1b:b2:a8:4d:8d:70:
cf:9f:c7:25:5a:1b:c6:7b:a4:bf:b7:ff:c7:1b:1e:
60:e7:e9:0d:cf:5a:29:bf:d1:90:c7:be:5d:af:84:
95:cc:be:8a:c8:ec:48:cd:96:b0:1b:58:e7:30:43:
33:77:05:62:c4:df:64:48:79:28:40:31:ff:96:1f:
df:70:7b:10:7a:e4:1c:10:97:86:ea:28:88:9f:6c:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:ED:C5:E6:C4:27:F2:13:7F:AF:2C:86:D0:95:F0:AD:26:FC:2B
X509v3 Authority Key Identifier:
keyid:C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/323830313a3137323a3a2f34382d3438203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:172::/48
Signature Algorithm: sha256WithRSAEncryption
09:87:a4:66:df:60:cf:b8:7d:07:1e:91:f1:d4:83:5c:f5:ca:
28:1b:91:8a:d6:02:ae:5e:69:23:96:49:9c:df:51:d1:a4:2e:
f3:eb:c5:5f:73:6b:ee:43:52:28:39:3a:aa:94:99:47:b3:21:
63:d5:9d:ef:5e:48:bc:3c:eb:32:dd:89:08:c8:27:4b:45:9b:
00:d7:64:4e:97:02:07:39:d3:9a:42:06:85:89:a8:95:35:2d:
42:ff:bb:b7:29:1f:db:c7:7f:24:03:ab:34:75:f6:9f:9b:79:
9a:d1:45:27:92:ed:f8:79:ce:49:d0:70:ab:4e:32:0d:be:ee:
06:1d:9d:a3:8c:10:b6:d8:11:27:58:2f:39:d0:b8:65:3a:cb:
d2:f5:1d:eb:51:3a:89:a2:f4:c4:5b:31:6e:38:59:a1:78:24:
5c:b0:04:63:9e:dd:49:ae:a9:ce:22:90:28:6f:c3:fc:b4:99:
75:38:6b:79:59:ac:d7:df:a4:b1:2b:d0:b4:b8:65:80:34:5d:
82:4e:a8:f6:80:70:7a:34:47:e3:8a:71:cb:b8:cc:40:67:4d:
ac:88:f9:93:68:fb:6c:53:47:b7:4c:5d:04:16:a6:93:8e:34:
da:67:00:83:a1:01:2c:6d:10:f6:e9:5b:aa:aa:47:74:78:55:
7c:dc:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:37 2026 by rpki-client