This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa
File: 323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa (raw, json)
Hash identifier: xS1nRWUkRCdIlN9Qyhg08JmvuMBYgEiJgC25zgxVEgg=
Subject key identifier: 14:7D:A7:87:7B:8F:91:76:22:06:7C:B2:5F:4C:BC:96:15:1A:48:55
Certificate issuer: /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial: 1B7553FEE90372521BC5A5D5FCF10A204AD437A5
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa
Signing time: Tue 06 Jan 2026 19:14:44 +0000
ROA not before: Tue 06 Jan 2026 19:09:44 +0000
ROA not after: Tue 05 Jan 2027 19:14:44 +0000
asID: 26506
IP address blocks: 2801:114:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 02:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:75:53:fe:e9:03:72:52:1b:c5:a5:d5:fc:f1:0a:20:4a:d4:37:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Validity
Not Before: Jan 6 19:09:44 2026 GMT
Not After : Jan 5 19:14:44 2027 GMT
Subject: CN=147DA7877B8F917622067CB25F4CBC96151A4855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:25:15:80:42:58:c3:de:aa:f7:54:f3:d2:
c4:45:4d:2d:65:58:8b:42:42:87:a5:44:72:32:15:
18:19:a4:91:cd:e7:0e:82:30:62:1e:41:0d:b6:ad:
eb:bd:09:12:d5:c7:f6:6d:0b:ac:28:7e:4a:db:37:
e3:fb:a3:e9:59:21:48:6c:18:a6:ff:bc:2c:8a:a2:
52:14:56:41:8d:df:31:10:f2:58:2f:64:b7:b2:ce:
98:14:9b:b4:c8:bc:16:43:4d:fa:b2:fd:36:11:55:
1d:e1:67:16:fa:f8:e6:fe:fb:45:0b:36:46:27:27:
9c:42:95:b2:f5:d5:b4:cf:15:a6:9c:9f:80:ce:d5:
ad:73:73:52:01:5f:08:5b:99:6c:ba:22:59:77:5e:
0e:cf:c8:4f:e5:0c:94:cb:c1:86:f2:71:1b:46:9d:
1c:31:77:e2:ae:32:f2:52:f7:ee:c6:42:7e:04:21:
fc:29:87:92:6b:3f:95:df:4f:19:0b:98:93:2b:38:
67:a7:d1:63:08:3a:9a:91:f8:3d:40:01:1a:2a:0b:
cf:94:86:20:5e:2d:e7:a8:21:39:fc:0d:4a:98:0a:
ea:af:1d:35:d0:65:eb:a3:f7:c1:2c:f5:d0:81:06:
67:3a:15:86:cf:a8:31:af:44:b0:eb:87:66:c9:3c:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:A7:87:7B:8F:91:76:22:06:7C:B2:5F:4C:BC:96:15:1A:48:55
X509v3 Authority Key Identifier:
keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:114:8::/48
Signature Algorithm: sha256WithRSAEncryption
b6:bd:db:d7:c0:db:35:bd:6d:2c:24:a8:22:fd:c8:13:13:c6:
4f:37:7d:eb:42:a1:4b:ca:f0:ef:f1:df:3b:b3:6c:54:88:85:
ab:db:53:92:d7:db:57:a3:6d:d1:d9:f4:92:e7:d6:ec:96:36:
07:6f:73:6e:81:08:90:f0:71:29:20:81:61:7b:3e:7c:7d:0c:
94:d5:80:f3:71:b6:36:fb:a8:e7:91:59:c2:df:c4:92:d6:df:
86:35:bf:15:0c:49:98:0e:ad:d8:fe:9d:fb:fa:87:08:1a:a6:
7c:4d:86:e0:a1:e5:32:a4:9e:42:a1:bf:ea:16:2b:95:1a:64:
b8:b7:ce:b1:60:79:3b:fe:ae:21:05:1c:a3:38:fc:cf:8e:9d:
73:1a:8f:2b:0b:a0:09:23:1b:6a:7c:d3:d9:78:f7:0b:b4:1b:
11:88:24:95:4d:ab:29:1a:9e:94:76:90:4d:b8:0c:da:29:26:
4f:fa:7c:c3:41:bc:ce:be:9a:d5:77:99:67:fd:9f:07:3a:06:
07:e6:65:c9:b7:3f:63:37:cb:4a:4a:7d:d7:b2:52:49:b1:4f:
a6:05:9a:ff:8d:2c:52:5e:f8:cb:c2:fa:15:81:12:80:1d:7e:
54:f7:ef:2c:8d:57:97:f1:dd:ef:8b:b5:63:cd:ad:af:38:77:
8c:bd:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:21 2026 by rpki-client