This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e2033333536.roa
File: 323830303a643330303a3a2f32392d3438203d3e2033333536.roa (raw, json)
Hash identifier: QR31S1XZNxzRIR8Trkluk7FdYRH/tIwvIEGJ6XmRLk0=
Subject key identifier: 27:B4:02:07:26:0C:CB:41:DB:69:2B:37:0D:2E:8F:16:86:D9:60:09
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 5F77F483E83CFF2F07267B366B15DBDBE56BADF5
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e2033333536.roa
Signing time: Tue 06 Jan 2026 19:30:40 +0000
ROA not before: Tue 06 Jan 2026 19:25:40 +0000
ROA not after: Tue 05 Jan 2027 19:30:40 +0000
asID: 3356
IP address blocks: 2800:d300::/29 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:77:f4:83:e8:3c:ff:2f:07:26:7b:36:6b:15:db:db:e5:6b:ad:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Jan 6 19:25:40 2026 GMT
Not After : Jan 5 19:30:40 2027 GMT
Subject: CN=27B40207260CCB41DB692B370D2E8F1686D96009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:dc:14:df:71:17:5b:4e:c9:07:31:60:2e:
89:7c:c0:b9:5d:39:4e:02:f1:3a:1a:0c:b4:8b:cb:
81:ad:79:55:8e:db:f4:37:f1:44:63:9c:09:0e:e2:
c1:3d:b4:e5:ab:46:e1:6d:ea:b0:89:fa:39:37:0c:
58:3e:6c:96:3e:17:4b:0b:fe:39:38:b2:ec:e0:47:
65:71:73:0c:95:5b:68:5e:19:ca:c9:d3:85:43:b4:
64:68:5b:01:2e:68:c1:c0:0a:c3:db:a0:91:b0:c6:
52:08:57:51:1d:d8:c2:75:fb:a8:25:33:21:aa:82:
7c:9f:d5:08:61:96:66:de:1f:04:ca:6f:0f:a5:c3:
08:93:ac:7b:65:9a:3c:3d:9c:38:8d:08:44:19:e7:
e9:79:fa:00:03:b4:36:6c:ee:a8:4c:70:ae:a5:24:
ef:1b:16:d4:6c:c4:7b:d2:b1:0f:0a:a1:1c:15:ba:
65:76:51:6c:51:dc:e8:4a:39:ed:6e:b5:48:b6:2b:
d0:99:be:39:b5:52:f7:fa:61:5b:3c:3f:8a:64:1b:
b2:91:4c:4a:96:e9:56:4e:e4:99:49:59:c4:23:55:
07:11:64:f5:a5:8f:40:8f:3b:af:b0:fa:07:0e:c7:
a9:c9:e7:32:6c:a9:be:7e:86:65:b5:43:0d:4e:3c:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B4:02:07:26:0C:CB:41:DB:69:2B:37:0D:2E:8F:16:86:D9:60:09
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:d300::/29
Signature Algorithm: sha256WithRSAEncryption
a8:d0:f2:be:72:8d:06:fa:53:59:23:d2:84:de:b5:29:42:79:
e2:9a:3b:0f:94:b9:b0:9f:ae:a0:4a:68:16:78:64:4e:ae:c9:
78:64:c4:4f:e5:70:20:a5:7e:bc:37:d3:af:d9:42:f9:d4:bd:
b1:0e:22:c1:f0:f1:e9:e6:28:9f:fe:bf:ce:aa:f1:ee:97:57:
16:d6:56:0e:dc:73:c5:57:49:58:4d:40:47:25:75:fd:ba:d6:
06:75:1a:b4:ed:7f:66:c4:2e:0a:36:ef:35:39:ec:e6:6c:bb:
b2:07:bc:cb:16:25:f9:ae:96:78:f6:9a:85:24:06:18:6f:50:
73:02:cc:43:b3:9b:70:6f:c4:d6:ad:54:d6:18:bb:a5:90:a8:
d6:3c:9f:31:8b:ab:b6:2d:d9:3b:90:5a:0b:32:c5:9e:28:77:
09:af:4c:d5:53:26:fc:23:10:da:05:22:1d:e7:26:a8:b3:51:
27:d1:a7:bd:6c:e0:3f:49:20:22:00:26:99:9b:b6:e7:82:de:
5a:fd:4b:54:fe:1f:c0:ed:90:f4:2c:45:15:ca:b7:de:46:0f:
1e:eb:53:ba:fc:cd:7f:96:4f:8e:ce:bb:50:ef:bc:92:cf:32:
65:8f:62:31:74:6c:ff:b9:81:0f:a8:1d:b6:4f:ba:18:1d:08:
9e:34:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:48 2026 by rpki-client