This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa
File: 323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier: hyktxDxPXCLpbT21Pt/njxlTl3p6dKqfWAAnpaPoteI=
Subject key identifier: 37:4C:8F:A1:C9:3A:D4:9B:D8:F8:9A:6F:2A:B9:6C:9F:EE:8F:55:90
Certificate issuer: /CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
Certificate serial: 6C84C4179EFD9F0043EFC5E512821C5E41C91EC0
Authority key identifier: 4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa
Signing time: Tue 06 Jan 2026 20:53:50 +0000
ROA not before: Tue 06 Jan 2026 20:48:50 +0000
ROA not after: Tue 05 Jan 2027 20:53:50 +0000
asID: 14080
IP address blocks: 2801:11:c800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl
rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:84:c4:17:9e:fd:9f:00:43:ef:c5:e5:12:82:1c:5e:41:c9:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
Validity
Not Before: Jan 6 20:48:50 2026 GMT
Not After : Jan 5 20:53:50 2027 GMT
Subject: CN=374C8FA1C93AD49BD8F89A6F2AB96C9FEE8F5590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:a2:ac:40:9a:ba:fb:95:73:be:96:5a:69:
e2:25:b0:05:7f:a3:1e:ef:b3:93:ab:cf:91:2a:d7:
85:50:21:37:db:31:af:6b:14:49:49:70:16:8f:2b:
0a:a8:9c:d4:ba:10:61:e0:3c:ca:be:d5:50:f6:fe:
d7:22:29:4a:08:4e:7d:66:ad:42:9f:77:05:b7:c2:
84:cd:cb:c6:78:56:a8:07:a6:0d:9d:4c:0e:99:ef:
ab:b6:c0:43:42:c7:e0:db:e5:c8:e7:eb:e6:b1:e3:
52:2b:33:6a:d9:86:d8:26:43:43:ff:07:99:e9:01:
e2:f1:0b:1b:57:dc:62:69:04:d0:b9:37:fc:2e:f0:
fa:96:d2:12:de:85:7a:de:d9:5d:e4:23:7e:1b:93:
d6:3b:84:a1:75:12:83:62:89:1b:c4:f7:78:b5:0d:
43:21:44:75:e6:4c:05:fe:e5:3c:39:2d:45:99:eb:
29:90:6c:54:04:30:35:37:e0:7b:c9:4b:3d:d4:d9:
62:27:a4:3e:31:2e:65:4f:a0:3c:98:b1:1b:f9:c1:
ca:a1:a8:61:02:16:30:eb:a9:e2:21:ee:41:84:28:
90:1a:82:9f:bd:6a:59:b7:f8:16:5f:c4:bc:a3:f9:
c2:6a:c1:8f:35:98:06:1a:c9:22:5e:f0:c8:20:c0:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:8F:A1:C9:3A:D4:9B:D8:F8:9A:6F:2A:B9:6C:9F:EE:8F:55:90
X509v3 Authority Key Identifier:
keyid:4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:11:c800::/48
Signature Algorithm: sha256WithRSAEncryption
93:5d:ea:da:61:15:50:5e:ec:5f:07:0c:4f:d0:91:bb:9e:82:
86:06:5b:f8:a7:05:f8:f4:a0:25:35:b8:c0:8f:b4:c4:ee:08:
00:82:fc:1f:13:5b:e5:72:23:e8:4b:e4:c7:67:d1:f6:cb:fc:
7a:95:e6:13:93:52:98:02:c9:be:a5:2b:be:ef:32:99:0d:ef:
cf:bd:15:fc:03:53:db:ea:46:f0:80:9c:9c:e0:cb:f4:63:2c:
88:70:8c:b6:37:81:22:70:0e:e8:c1:a7:b6:7c:19:a3:b3:05:
86:5a:39:57:ca:38:c6:9d:4c:5e:10:09:aa:07:27:f8:e1:c1:
09:b6:2e:5b:32:bf:6b:ea:f6:77:a1:b0:89:58:2f:4b:78:00:
b2:4e:82:af:b0:77:61:f9:e5:ce:bb:cd:28:c4:0c:9c:2f:f8:
af:51:59:63:f0:13:f6:16:e8:e9:09:71:f0:d7:e1:ff:c1:71:
3c:01:2a:d8:b0:39:e3:08:ff:98:14:85:05:2b:9a:38:23:58:
52:80:41:59:90:7c:93:b9:fe:d6:2c:9d:17:c7:fa:7f:79:e7:
3c:bf:29:43:5c:b3:1d:a8:a4:f3:02:c2:8d:b9:1e:ce:71:15:
63:41:c5:e1:d2:8a:fe:52:98:94:00:34:87:46:04:80:bf:09:
5d:9c:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:45:01 2026 by rpki-client