This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323032.roa
File: 323830303a643330303a3a2f32392d3438203d3e20323032.roa (raw, json)
Hash identifier: QnjWvTjzRVqfpSbH6cCH5o/zALbsFHmVN6J5Jmz/8VM=
Subject key identifier: 7A:0F:A8:3A:D0:68:DB:0A:8D:A1:BB:86:2B:A7:01:29:45:E5:0A:64
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 615C8051792BCD7CB0A5290C9A3ED8F4EF9E38A4
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323032.roa
Signing time: Tue 06 Jan 2026 19:30:40 +0000
ROA not before: Tue 06 Jan 2026 19:25:40 +0000
ROA not after: Tue 05 Jan 2027 19:30:40 +0000
asID: 202
IP address blocks: 2800:d300::/29 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5c:80:51:79:2b:cd:7c:b0:a5:29:0c:9a:3e:d8:f4:ef:9e:38:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Jan 6 19:25:40 2026 GMT
Not After : Jan 5 19:30:40 2027 GMT
Subject: CN=7A0FA83AD068DB0A8DA1BB862BA7012945E50A64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:27:c4:f4:57:eb:6b:0c:62:6b:f3:38:b1:
6f:2a:ca:06:24:5e:16:c7:25:9d:5c:5a:1a:76:7c:
02:98:3d:ec:9b:dd:55:16:0f:9e:f5:5f:87:47:e3:
e9:23:1b:97:1c:0d:0b:8a:b3:48:d2:35:da:3a:aa:
69:3a:15:40:bd:03:5f:da:c1:b0:df:ba:1a:6f:ff:
cc:06:8c:a1:34:fc:55:d6:d1:34:4d:b7:1b:86:41:
be:de:d8:d3:f7:a5:97:cd:f8:c0:d1:72:a4:ff:67:
33:2c:33:c8:dc:a1:a0:d1:f2:18:bd:4b:de:0f:01:
ef:23:5e:88:7d:7f:dd:d7:c6:80:b6:e9:b3:e5:b3:
d7:dd:a4:e4:a1:1e:36:bb:a2:72:62:80:43:a9:59:
98:de:28:50:ba:10:ac:de:ec:c9:73:02:2f:3e:6f:
41:3e:da:07:89:b3:b3:34:e7:be:4a:da:ef:88:92:
c9:a5:8b:3b:15:37:10:26:ee:97:00:57:0d:bf:0d:
ab:04:92:e0:65:a3:35:cf:0f:43:31:c9:d4:28:14:
01:16:43:3e:5a:a7:ee:8e:97:62:12:5c:46:f9:63:
e0:cf:bb:40:c7:69:83:36:6a:29:05:d8:64:ea:83:
a7:1d:15:26:20:33:a7:21:1a:45:23:99:97:00:48:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:A8:3A:D0:68:DB:0A:8D:A1:BB:86:2B:A7:01:29:45:E5:0A:64
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:d300::/29
Signature Algorithm: sha256WithRSAEncryption
1b:88:de:43:7e:e5:1e:5c:af:7b:7f:bf:eb:48:bc:da:67:73:
56:ff:80:ce:50:f7:ba:f4:5c:c3:62:c6:57:0a:f3:25:d3:40:
16:ad:74:b2:a7:15:88:33:62:72:51:a5:df:4c:29:1d:86:34:
e5:88:f6:7d:cc:73:e6:d5:e8:e8:f1:5d:d4:6c:c3:e4:d5:6e:
92:26:20:57:97:06:1b:df:fc:d8:96:e7:94:74:37:5d:75:3d:
8b:66:78:f1:e4:8c:a4:c5:37:a8:7c:e3:58:5c:7e:eb:1b:60:
c5:49:fd:79:07:db:4b:98:b4:93:d4:21:e2:11:6e:a0:54:41:
46:2d:74:fa:1f:6e:af:e2:d2:6a:81:2c:8a:76:ad:da:57:75:
5e:03:01:4e:c3:ff:d9:5f:82:0a:1d:20:4d:72:c3:4a:6f:b5:
68:ea:ba:59:f3:0f:43:18:f9:34:47:cc:63:f6:b8:da:d4:c9:
a1:e5:ee:83:b8:4f:82:94:a4:fe:78:ae:95:08:3f:eb:fc:51:
cb:ed:56:24:c8:58:b7:78:bf:18:b7:89:cb:2f:e7:98:48:aa:
b0:29:ca:54:ef:a8:0e:44:7c:25:43:f7:97:73:17:3f:50:07:
da:9d:c5:5d:21:42:f5:b6:a8:2c:36:b9:ca:06:9c:34:8b:a7:
d9:3f:86:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:48 2026 by rpki-client