This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/323830313a3135383a3a2f33362d3336203d3e203532333336.roa
File: 323830313a3135383a3a2f33362d3336203d3e203532333336.roa (raw, json)
Hash identifier: aHZfKCIihs+JmMgMJax2nsSP5Ti+p9MJaYCe9ws/qMs=
Subject key identifier: F6:2C:2F:A0:6A:34:3E:76:C7:11:E3:8B:8C:12:4F:58:35:FA:4F:20
Certificate issuer: /CN=2FCA9EF36FD988A173F6DE2A363AB29540E686A6
Certificate serial: 1AEA548BA665908AF071BA2056FD9C7053ED11F8
Authority key identifier: 2F:CA:9E:F3:6F:D9:88:A1:73:F6:DE:2A:36:3A:B2:95:40:E6:86:A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/323830313a3135383a3a2f33362d3336203d3e203532333336.roa
Signing time: Tue 06 Jan 2026 20:54:11 +0000
ROA not before: Tue 06 Jan 2026 20:49:11 +0000
ROA not after: Tue 05 Jan 2027 20:54:11 +0000
asID: 52336
IP address blocks: 2801:158::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.crl
rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ea:54:8b:a6:65:90:8a:f0:71:ba:20:56:fd:9c:70:53:ed:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FCA9EF36FD988A173F6DE2A363AB29540E686A6
Validity
Not Before: Jan 6 20:49:11 2026 GMT
Not After : Jan 5 20:54:11 2027 GMT
Subject: CN=F62C2FA06A343E76C711E38B8C124F5835FA4F20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:77:00:4d:a0:b3:6e:02:ae:97:0a:e6:5a:
ac:ba:85:f4:07:dd:87:27:60:6f:04:cf:75:72:52:
02:4a:ef:b0:37:1a:fb:03:b9:36:18:b5:b9:01:ea:
7a:4e:0e:48:47:2f:bd:e2:b5:43:9b:8d:c0:93:25:
86:9a:1d:76:90:eb:ce:7e:ef:ed:20:e4:20:9a:d2:
ab:e0:19:7b:4d:4e:c6:b4:57:7b:63:c5:06:13:52:
d8:fe:b0:d8:d7:14:f4:60:ae:e8:21:42:f4:8e:db:
7d:56:f4:e2:31:6a:89:75:ab:72:9f:e0:64:bd:17:
81:b7:ee:df:9f:8f:1a:f1:e9:f5:b2:53:bc:59:41:
7c:1f:36:21:5b:3d:83:c4:22:ed:cd:aa:3b:a1:22:
cb:2c:98:cd:87:4c:a3:97:eb:48:e7:10:bc:9f:d1:
e0:8c:8d:c3:58:b7:2d:f4:a6:49:97:f7:76:1f:de:
51:8f:03:08:40:a8:96:36:4c:05:74:52:b9:2c:d7:
0b:5a:23:b0:7a:b9:35:a0:b8:ed:92:9e:28:28:bf:
5f:8a:26:f0:d9:f8:bd:80:4c:c0:43:65:85:8a:57:
c4:ca:10:03:d3:20:23:81:76:1c:13:95:38:6f:92:
7e:87:09:a8:ef:2b:97:c3:4f:78:fd:b2:48:61:23:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2C:2F:A0:6A:34:3E:76:C7:11:E3:8B:8C:12:4F:58:35:FA:4F:20
X509v3 Authority Key Identifier:
keyid:2F:CA:9E:F3:6F:D9:88:A1:73:F6:DE:2A:36:3A:B2:95:40:E6:86:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/323830313a3135383a3a2f33362d3336203d3e203532333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:158::/36
Signature Algorithm: sha256WithRSAEncryption
5b:a8:b3:38:78:2d:e6:91:b0:23:eb:77:d7:94:07:2c:7d:88:
fc:18:51:4f:3e:50:eb:c8:9b:0d:52:8e:58:ac:7f:22:45:3c:
73:ef:bc:92:33:f8:c8:4f:6b:4f:aa:44:b8:a1:90:24:98:89:
40:45:8c:98:84:e3:41:8e:e7:ba:1f:de:7a:9d:5b:77:94:3c:
0c:b7:29:f4:b8:60:d9:55:0f:d2:48:46:f5:8a:c0:5c:59:8d:
60:c1:3b:69:a5:f5:b2:08:2a:73:a9:48:23:24:f7:80:c5:9f:
c5:9b:8e:16:f4:7a:6d:2c:6b:b3:5b:be:a4:41:eb:79:04:a8:
6b:ad:ec:37:97:a1:26:2a:fe:06:90:d0:be:55:8a:5e:fb:59:
0f:81:79:e8:90:9f:2f:af:aa:42:19:1b:c3:46:6e:5b:e5:da:
72:e1:c2:c2:48:ca:26:c1:63:01:84:9c:39:e0:31:4d:d7:3a:
e6:3b:01:87:9a:5b:b0:bc:52:17:ac:37:3b:96:2a:51:6d:ad:
84:18:ad:f4:63:a9:07:fa:1e:24:3c:2b:d7:8d:a6:db:9c:e8:
ad:12:09:a3:41:e8:b1:5f:e9:1f:86:0c:77:ad:19:d7:db:be:
b4:bf:ee:8f:95:e0:fc:c9:13:67:c9:f9:fb:fc:d6:e9:40:26:
6c:c2:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:05:24 2026 by rpki-client