This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa
File: 323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier: qw/a+Cmh1e7fGT9Nit08Xe31MUcBnEHZ7viRfRox+LE=
Subject key identifier: 1A:D7:8B:E6:8A:40:3D:EE:A0:EB:9D:F1:0C:77:C8:9D:97:6E:11:BA
Certificate issuer: /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial: 1C2E5205B387FF135B9CC6B6B11BE9B181B86944
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa
Signing time: Mon 17 Nov 2025 11:52:45 +0000
ROA not before: Mon 17 Nov 2025 11:47:45 +0000
ROA not after: Mon 16 Nov 2026 11:52:45 +0000
asID: 262249
IP address blocks: 2801:140:bfa::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 03:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2e:52:05:b3:87:ff:13:5b:9c:c6:b6:b1:1b:e9:b1:81:b8:69:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Validity
Not Before: Nov 17 11:47:45 2025 GMT
Not After : Nov 16 11:52:45 2026 GMT
Subject: CN=1AD78BE68A403DEEA0EB9DF10C77C89D976E11BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:13:5f:b5:bc:b5:c4:26:ba:1c:6e:0b:b9:
78:3f:a9:53:de:38:fe:2c:13:aa:c8:89:93:c6:f7:
61:e0:a2:d6:61:b2:3c:3d:93:07:94:6a:1b:a7:2b:
c4:ff:64:89:f4:1e:91:f3:b3:e8:72:9e:86:2b:63:
fc:b2:6b:9c:86:47:43:6e:68:1a:2a:57:37:be:a1:
a5:69:c8:92:e6:cf:db:0a:e0:0f:85:83:ea:08:16:
38:6f:7c:84:11:91:94:14:40:44:9f:b1:75:69:2d:
ab:cd:d5:cb:b2:30:a4:ae:cb:b0:a8:4c:25:eb:8f:
8d:59:d7:ef:3d:42:86:02:27:91:07:8f:73:4c:b8:
53:f2:22:10:85:3c:1b:64:7c:73:0e:96:09:b8:36:
30:05:15:3c:16:2a:70:02:0f:76:08:44:ed:b0:cd:
72:8e:f5:0c:33:8b:7f:34:1c:3f:c9:5f:75:bc:36:
a9:0f:74:38:f1:b8:bf:26:2b:24:b7:41:5f:eb:ce:
21:61:20:3f:de:49:19:78:9e:f0:2b:b6:78:e4:e5:
90:2e:47:86:a1:1a:70:62:af:45:18:c5:7d:87:f1:
d1:d1:5a:67:08:b1:f7:d1:d1:27:3b:b8:c7:fe:0a:
f2:3a:4e:50:3e:75:d4:7e:30:66:97:0c:bb:d1:72:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D7:8B:E6:8A:40:3D:EE:A0:EB:9D:F1:0C:77:C8:9D:97:6E:11:BA
X509v3 Authority Key Identifier:
keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:140:bfa::/48
Signature Algorithm: sha256WithRSAEncryption
bc:e2:6c:b1:50:4e:44:03:56:95:c8:2c:dd:f3:b5:fe:56:d2:
8f:28:58:92:aa:25:1a:ef:8c:97:a4:fa:e2:ca:9d:fa:de:b3:
4d:3d:ac:92:40:11:44:8f:e0:00:45:94:42:d5:bb:3f:84:13:
59:db:4a:0d:fb:56:b5:c2:6e:85:f4:74:65:db:f5:16:f1:33:
5d:8a:a2:c9:76:1b:d7:9a:b8:cb:3a:b5:1c:51:20:59:2d:55:
70:14:2b:e3:b5:64:e7:60:36:c3:66:30:11:e1:d7:14:51:d2:
33:56:63:a2:ad:b6:7c:f0:8b:00:b5:47:70:19:50:24:03:13:
fa:db:eb:a1:1e:51:ef:00:f4:e8:04:5e:72:63:fd:cf:5a:61:
37:9a:d2:77:71:74:93:49:e8:58:57:5d:c9:18:3f:cd:a8:87:
10:b2:98:6c:68:a2:09:10:19:fa:00:7c:dd:93:a8:07:4c:3e:
55:59:a9:de:4f:72:7e:f2:ee:d2:cb:64:73:73:40:e0:cc:06:
d7:9e:68:a6:ec:7d:2a:10:b3:13:a1:ff:32:37:78:33:06:0c:
48:41:c3:93:e7:4f:b6:4f:04:95:5c:98:4b:af:4b:d1:77:53:
51:0d:4c:aa:56:86:1e:43:5a:82:56:03:4a:b0:f0:8d:39:ac:
59:72:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:40:47 2025 by rpki-client