This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/323830363a3361303a3a2f33322d3438203d3e20323635363230.roa
File: 323830363a3361303a3a2f33322d3438203d3e20323635363230.roa (raw, json)
Hash identifier: dRllGUeVHSiifAr180SSq8oEUY03GCMVngjRfAKPCNg=
Subject key identifier: 89:E6:9A:29:50:48:D3:C2:A9:A6:2E:9B:4B:C7:67:48:94:66:14:31
Certificate issuer: /CN=58C76DEB05E1657B955AB41355B108825D2D69BC
Certificate serial: 54F4A210AA80A3FD45FFAB6223BDE875E676F176
Authority key identifier: 58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/323830363a3361303a3a2f33322d3438203d3e20323635363230.roa
Signing time: Tue 06 Jan 2026 20:59:06 +0000
ROA not before: Tue 06 Jan 2026 20:54:06 +0000
ROA not after: Tue 05 Jan 2027 20:59:06 +0000
asID: 265620
IP address blocks: 2806:3a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl
rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f4:a2:10:aa:80:a3:fd:45:ff:ab:62:23:bd:e8:75:e6:76:f1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C76DEB05E1657B955AB41355B108825D2D69BC
Validity
Not Before: Jan 6 20:54:06 2026 GMT
Not After : Jan 5 20:59:06 2027 GMT
Subject: CN=89E69A295048D3C2A9A62E9B4BC7674894661431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:df:d7:9d:6b:a2:dc:30:64:a8:ba:2f:88:
b9:f9:6d:49:57:9f:1f:2c:b6:e1:01:70:63:55:91:
d5:74:0f:a6:cc:97:d3:9c:06:45:bf:87:17:1e:eb:
31:af:76:b2:3b:c4:31:26:3f:f4:9d:2e:7b:f0:ef:
59:56:0d:d9:1d:e6:00:a1:b5:f0:16:a9:7a:8d:e9:
98:63:1f:d3:6c:67:e5:4e:8c:47:71:e1:4a:e5:b4:
4f:95:ae:ba:a2:c7:93:44:e6:e7:8d:b6:2f:fa:68:
82:0a:fd:bb:90:58:f2:b0:7d:f2:0c:6a:16:3c:d9:
42:00:ba:9a:cc:da:f6:f2:33:be:66:37:17:89:83:
78:bb:aa:5f:30:24:d7:16:4c:4f:b3:74:2d:47:2e:
4d:e3:08:14:c9:e1:04:5b:23:59:15:74:90:ea:2d:
c2:41:35:4c:74:85:48:ab:ef:60:9b:59:a0:b9:6a:
69:bd:f9:65:ad:8c:65:33:f2:8d:dd:46:35:d5:fc:
18:9b:88:c3:a9:1f:8a:fc:65:9f:4b:43:86:0a:d8:
c5:e8:f2:fa:63:87:7c:35:a0:a5:3c:c9:11:03:19:
72:a4:ec:e0:7a:84:e4:9e:71:15:8d:20:0a:7e:26:
b7:d8:2e:38:3c:1a:ce:5b:f1:eb:12:2e:4a:52:5d:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:9A:29:50:48:D3:C2:A9:A6:2E:9B:4B:C7:67:48:94:66:14:31
X509v3 Authority Key Identifier:
keyid:58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/323830363a3361303a3a2f33322d3438203d3e20323635363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3a0::/32
Signature Algorithm: sha256WithRSAEncryption
80:b8:8d:5c:3e:7b:fa:81:21:d5:ab:4d:58:7f:e2:4a:56:c0:
6b:f2:42:f4:7e:6d:94:7a:92:75:28:97:4a:11:2e:cc:21:f0:
82:0f:ad:cc:7e:1a:20:e0:c8:65:c2:d4:a5:f3:f7:8d:47:3c:
05:c1:74:ac:96:ce:0e:79:64:87:22:a6:c8:d6:43:19:79:43:
ed:dc:8c:f6:87:b3:11:e6:20:75:61:a4:5f:09:f8:e4:88:0f:
e4:57:45:8f:79:a9:eb:ef:bf:23:49:f2:c3:01:b4:d1:d6:d0:
77:1c:d8:3e:2f:41:f1:9a:6d:ec:d7:1e:27:3d:c8:7c:fe:00:
cb:b1:14:f7:cd:35:cb:67:62:52:d7:e5:7c:63:9e:3a:58:be:
a6:ba:92:22:78:7f:19:93:4f:1a:7d:34:61:32:6f:e2:8a:c4:
75:c4:ac:53:c6:4d:52:b4:95:37:0f:6f:25:ce:fb:b8:21:cf:
38:1e:19:4a:4b:42:7c:d8:87:ee:ff:f7:40:7a:b9:da:a8:5c:
90:cd:70:76:f8:04:f2:bb:51:2a:5c:6c:77:fe:99:d7:2b:ed:
3a:ea:bd:5c:15:00:3d:49:0e:a5:96:f5:8d:4a:58:12:18:79:
33:bf:a1:2c:eb:5d:30:36:05:53:a8:c3:e9:34:4c:52:cd:1c:
56:94:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:51:41 2026 by rpki-client