This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e203237393139.roa
File: 323830333a623463303a3a2f33322d3438203d3e203237393139.roa (raw, json)
Hash identifier: P2FaygKJRnIQdBmGI9dh2vgrIA7Zb7SG39FG3UiSCQQ=
Subject key identifier: D4:1C:73:85:8A:30:5F:5E:A9:39:97:34:EE:FF:2D:0B:DE:0D:CB:88
Certificate issuer: /CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
Certificate serial: 21596F232228BF879F48714DA8CAB1951C3328C3
Authority key identifier: E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e203237393139.roa
Signing time: Tue 06 Jan 2026 19:21:31 +0000
ROA not before: Tue 06 Jan 2026 19:16:31 +0000
ROA not after: Tue 05 Jan 2027 19:21:31 +0000
asID: 27919
IP address blocks: 2803:b4c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl
rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:59:6f:23:22:28:bf:87:9f:48:71:4d:a8:ca:b1:95:1c:33:28:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
Validity
Not Before: Jan 6 19:16:31 2026 GMT
Not After : Jan 5 19:21:31 2027 GMT
Subject: CN=D41C73858A305F5EA9399734EEFF2D0BDE0DCB88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:ff:2d:d9:d5:8d:0b:67:99:04:d4:5f:d9:
d9:7f:fd:10:55:96:34:16:31:d1:5a:00:f9:90:92:
5e:66:4a:5f:ff:54:7f:33:10:a3:c9:78:42:e5:6d:
fa:a0:a0:fc:63:74:24:01:46:b1:d4:37:1a:47:88:
1f:52:10:09:b8:c8:77:70:47:7a:1d:b6:41:d3:6b:
71:ee:c2:9a:53:09:b2:63:1b:48:cd:5e:75:4a:7a:
73:21:28:a5:77:dd:12:b1:6f:18:9f:1f:b4:7e:0d:
13:39:ef:f8:1c:6d:4d:63:e3:57:a3:20:d2:82:a8:
d7:58:af:44:ba:72:26:77:83:28:a2:ed:ef:33:30:
41:5b:9b:1a:d4:fe:10:94:1f:67:7c:52:88:fc:2f:
4c:ed:09:75:56:fa:21:00:0f:2b:f2:6b:cc:26:14:
49:03:ef:4a:60:e9:e6:b2:22:a0:71:36:f7:dc:95:
2a:9f:c6:1b:ff:83:6a:7c:d9:1c:72:b3:1b:0f:d8:
46:9a:a2:2b:4a:7b:98:28:9b:37:d8:65:6c:b9:90:
b7:d0:c0:10:ee:41:2d:09:6d:e5:a0:6d:0a:20:47:
47:d0:cd:9f:e6:18:00:dc:3a:14:53:2d:4e:83:4a:
32:c8:23:f0:ec:a5:5a:c6:78:20:e5:0d:4d:31:3c:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1C:73:85:8A:30:5F:5E:A9:39:97:34:EE:FF:2D:0B:DE:0D:CB:88
X509v3 Authority Key Identifier:
keyid:E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e203237393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:e0:93:b2:5d:62:d3:d0:56:2f:a2:a9:9f:7b:63:db:3f:2c:
b6:6c:d0:fc:d6:9d:10:55:46:75:62:3b:77:80:ff:17:91:b0:
2f:d6:20:03:ce:a3:f7:3a:83:df:04:45:87:0f:7c:1c:23:aa:
e7:ba:1e:55:05:0b:21:b0:bd:74:63:d9:3d:43:33:a7:df:c6:
8e:70:41:96:99:e6:c4:3f:02:f2:29:a7:30:9f:9c:77:46:db:
0b:2d:58:13:b4:f1:23:2b:d1:85:53:e3:41:39:aa:b4:8b:08:
46:aa:a2:1b:15:a9:e4:3e:0c:5d:4e:54:46:5f:ed:dd:a1:91:
ff:0f:1d:45:de:d7:c3:93:46:d2:28:b8:d5:ab:b9:cd:b1:ab:
ce:58:39:4b:10:af:30:1f:5a:9d:5c:3a:5b:40:0e:59:f5:9a:
71:b9:53:16:bd:97:44:10:c1:6b:fd:6c:48:23:43:58:d7:c4:
9e:62:80:f3:71:90:8c:79:7c:da:ee:63:5b:5d:f4:a2:8d:8c:
b0:24:b4:e0:e3:69:f8:03:2f:fa:35:21:ec:fc:88:0e:bb:21:
8d:8a:87:f0:c2:10:85:a6:7c:af:61:34:d4:ea:ba:ae:15:b1:
36:dd:67:e3:51:ba:0a:2d:09:05:d6:8f:61:5e:7d:fb:ae:10:
0f:53:17:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:31:01 2026 by rpki-client