This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa
File: 323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa (raw, json)
Hash identifier: GjTHD0azjVa794qXKqkbCFm6YSeqsOiDXgbanKkujT8=
Subject key identifier: FB:3A:E1:E7:CD:AA:93:31:C7:CA:85:59:CB:7A:0A:72:15:67:D7:13
Certificate issuer: /CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
Certificate serial: 0421193CB72241BD29E9C6945D2D403A4642106C
Authority key identifier: FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa
Signing time: Tue 06 Jan 2026 20:49:42 +0000
ROA not before: Tue 06 Jan 2026 20:44:42 +0000
ROA not after: Tue 05 Jan 2027 20:49:42 +0000
asID: 269844
IP address blocks: 2801:1b:4800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl
rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 17:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:21:19:3c:b7:22:41:bd:29:e9:c6:94:5d:2d:40:3a:46:42:10:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
Validity
Not Before: Jan 6 20:44:42 2026 GMT
Not After : Jan 5 20:49:42 2027 GMT
Subject: CN=FB3AE1E7CDAA9331C7CA8559CB7A0A721567D713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:53:33:f7:f4:86:94:a6:bf:0d:e4:f6:f5:
28:5e:19:25:d8:0c:8a:5f:05:a1:92:59:7f:14:3c:
1a:78:a7:9b:a3:1e:b0:88:a2:f3:84:d7:0b:8a:ce:
79:05:b6:de:97:53:b8:95:3f:b6:23:07:9b:6f:d1:
11:57:97:d9:c3:67:3b:43:1a:9c:f5:d5:8e:61:68:
84:9d:af:90:90:e3:b3:d4:fa:4e:c7:00:59:77:42:
e1:ce:8f:e8:13:fa:10:9c:34:05:13:9b:af:66:14:
03:c6:a2:ee:8d:63:be:d0:63:be:f6:4b:6f:86:95:
20:f2:ec:11:4e:3e:e2:d9:18:77:13:ee:6d:d8:e2:
60:ac:8a:a4:22:76:df:ab:3f:2c:4d:7e:5e:13:53:
ac:96:d0:c8:d8:e4:00:11:dd:d4:2a:31:71:df:af:
dd:77:55:d1:b0:cf:27:69:a8:8e:7f:14:eb:9a:07:
f7:2c:16:b5:99:b6:6d:2a:fb:b4:4f:a9:7e:19:86:
0e:3e:e4:f3:c8:b2:d4:38:05:8d:e9:aa:c0:3f:45:
eb:0c:74:70:c4:b1:bd:a8:92:56:73:da:57:29:a2:
03:cb:59:2f:99:0b:4f:ac:46:60:fc:f9:94:a5:c4:
0e:20:4c:98:1d:de:8e:93:39:14:60:7f:ab:e4:7c:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:E1:E7:CD:AA:93:31:C7:CA:85:59:CB:7A:0A:72:15:67:D7:13
X509v3 Authority Key Identifier:
keyid:FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1b:4800::/48
Signature Algorithm: sha256WithRSAEncryption
b8:7f:42:84:fb:07:58:d5:ee:82:60:21:1e:97:61:0f:0b:ec:
7a:2f:2f:6e:89:ab:2b:47:10:5a:5a:f5:8c:54:3a:c8:e1:8a:
76:bb:2d:ba:10:a4:ab:47:21:5f:bb:c2:71:89:2e:75:75:f8:
2a:08:41:f0:84:68:fa:e4:39:cd:1c:0e:20:e4:57:74:88:a4:
5d:d5:e8:4c:e0:1a:28:89:9d:b9:d8:36:e7:06:c1:98:e4:15:
44:46:c1:c7:ad:27:e1:55:73:ce:93:a8:cc:6e:68:65:b1:3a:
9b:d6:3d:74:67:dc:a1:96:39:24:76:e2:7a:d5:fb:25:8d:7a:
96:15:06:45:2d:78:b8:3c:3f:1b:5e:59:8d:2f:3e:5b:b0:17:
a0:15:31:68:96:cf:47:34:8d:04:9f:81:ef:9b:b6:8a:23:17:
62:4d:26:15:a0:97:69:d7:17:b7:6b:18:36:f3:7c:28:5b:ea:
44:3c:39:a0:2f:70:79:b4:70:58:bf:8e:53:91:c3:0e:a2:9b:
a6:f0:19:b2:79:c9:c2:15:79:2e:2c:52:e8:0f:63:fd:14:13:
30:1f:76:fe:86:f6:63:47:91:ff:7b:3f:29:42:eb:48:34:69:
b4:59:35:8c:e1:77:6c:05:fb:ac:aa:34:c6:07:a2:06:dd:a8:
7e:95:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:54 2026 by rpki-client