This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a3a2f33322d313238203d3e20323733313430.roa
File: 323830333a386335303a3a2f33322d313238203d3e20323733313430.roa (raw, json)
Hash identifier: kJGxT8I1cxZfUhDCvOiRmeFDYyU6zHP9nEZRleQnl5A=
Subject key identifier: 9E:F9:0B:23:D9:38:12:D2:E7:E4:8F:AA:C2:3F:5B:55:C3:B7:3E:E1
Certificate issuer: /CN=C8585F69732D336320CC1588DC6B16D9F54DDE9B
Certificate serial: 445257A1B2A1F6DD2A14BBEBF79AEB179EFCA1ED
Authority key identifier: C8:58:5F:69:73:2D:33:63:20:CC:15:88:DC:6B:16:D9:F5:4D:DE:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a3a2f33322d313238203d3e20323733313430.roa
Signing time: Fri 16 Jan 2026 19:00:59 +0000
ROA not before: Fri 16 Jan 2026 18:55:59 +0000
ROA not after: Fri 15 Jan 2027 19:00:59 +0000
asID: 273140
IP address blocks: 2803:8c50::/32 maxlen: 128
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.crl
rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 00:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:52:57:a1:b2:a1:f6:dd:2a:14:bb:eb:f7:9a:eb:17:9e:fc:a1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8585F69732D336320CC1588DC6B16D9F54DDE9B
Validity
Not Before: Jan 16 18:55:59 2026 GMT
Not After : Jan 15 19:00:59 2027 GMT
Subject: CN=9EF90B23D93812D2E7E48FAAC23F5B55C3B73EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:84:f7:f0:78:eb:34:b4:53:1e:50:c1:b9:
94:a8:4f:c1:eb:b3:b1:5c:c0:5a:77:b1:bd:8c:04:
18:d9:20:ce:c6:ab:53:37:f2:8a:d1:e3:ea:a8:e3:
b6:c1:f5:4b:38:ef:63:14:9a:fb:1a:37:19:8f:9a:
ea:46:e7:b0:f1:83:17:7d:fe:a8:8a:75:73:95:99:
80:9a:3b:3e:a6:59:51:11:13:80:d6:f4:35:ba:6e:
21:de:a1:54:94:04:18:e3:7a:75:2f:e3:dd:27:07:
73:ec:75:0c:22:26:bf:e3:3c:79:5f:51:dc:60:6f:
3f:34:4f:1c:98:ee:4f:f8:ea:38:7e:0f:eb:c7:0c:
9c:fc:bd:00:84:7e:80:70:5f:f8:ce:c1:a0:55:e4:
86:a0:60:75:f6:4d:f7:c7:aa:a6:81:72:fb:1a:e5:
53:74:63:ab:01:b6:58:59:66:13:8c:d0:3d:56:37:
69:1f:33:57:24:d8:ae:8d:67:fc:32:16:48:20:83:
86:51:4c:2e:8e:d6:70:d6:9a:77:cf:3d:a3:e3:18:
40:1f:70:f2:7f:45:dc:60:47:48:2a:4e:b3:af:4f:
db:34:2b:84:53:de:c3:5c:71:02:4e:5b:32:9e:41:
88:33:d1:87:ff:56:35:4d:14:f2:d7:01:77:7c:60:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:0B:23:D9:38:12:D2:E7:E4:8F:AA:C2:3F:5B:55:C3:B7:3E:E1
X509v3 Authority Key Identifier:
keyid:C8:58:5F:69:73:2D:33:63:20:CC:15:88:DC:6B:16:D9:F5:4D:DE:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a3a2f33322d313238203d3e20323733313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8c50::/32
Signature Algorithm: sha256WithRSAEncryption
68:4f:2b:90:35:bb:af:c4:d6:eb:2f:41:ec:28:61:f1:ea:03:
6f:79:de:37:b0:55:a7:a0:6e:67:d6:80:85:30:62:90:4f:75:
59:98:51:54:9d:3d:e1:86:85:c4:10:87:9c:1a:43:c0:5d:40:
5f:9e:79:d6:d6:a7:07:6c:a2:5b:e8:e7:f6:7d:2a:c4:bc:02:
ab:3e:d5:ea:88:75:75:d0:a5:7a:9b:4f:bf:a0:65:51:e7:1a:
00:13:d0:27:9b:23:ce:6f:b8:46:9f:68:43:b1:3a:5d:f5:20:
8f:01:b6:74:88:13:87:3b:46:df:fb:e0:04:d2:bb:2d:0d:43:
c6:d5:c0:c5:de:d7:c0:94:8f:a2:f0:b7:30:4b:6a:f9:b3:d5:
4b:e1:fc:3f:19:6b:c2:2f:37:8f:0c:f2:08:96:1e:9d:c9:73:
00:42:3d:b6:e0:1b:82:a5:9f:f7:10:49:1c:31:03:b4:bf:85:
70:52:ac:df:88:92:48:59:3b:89:2d:3b:9d:f7:6a:f5:c7:be:
ba:19:b9:64:bf:26:22:e5:8e:13:3a:3c:d5:d2:82:f6:dd:91:
7e:91:40:dd:6f:27:44:0e:c1:fa:01:1f:84:b7:72:43:2b:6a:
82:d0:e8:6e:d5:dd:d5:98:7e:b7:43:4c:cd:8b:12:cb:35:d5:
47:b5:5b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:24:14 2026 by rpki-client