This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34382d3438203d3e20323732393532.roa
File: 323830313a3162393a3a2f34382d3438203d3e20323732393532.roa (raw, json)
Hash identifier: /EiobGKf5oIE40lOyMXzyjObxOhVnKw6068y32eeunc=
Subject key identifier: 01:60:C3:75:AC:5B:7F:C6:79:FA:57:22:54:AC:22:3D:56:51:3B:18
Certificate issuer: /CN=721723EE6C96BAE63225C18652977F8E404DBD28
Certificate serial: 242B590AF884DA090245041EC17DADC410C099
Authority key identifier: 72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34382d3438203d3e20323732393532.roa
Signing time: Tue 06 Jan 2026 19:10:37 +0000
ROA not before: Tue 06 Jan 2026 19:05:37 +0000
ROA not after: Tue 05 Jan 2027 19:10:37 +0000
asID: 272952
IP address blocks: 2801:1b9::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl
rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 01:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:2b:59:0a:f8:84:da:09:02:45:04:1e:c1:7d:ad:c4:10:c0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721723EE6C96BAE63225C18652977F8E404DBD28
Validity
Not Before: Jan 6 19:05:37 2026 GMT
Not After : Jan 5 19:10:37 2027 GMT
Subject: CN=0160C375AC5B7FC679FA572254AC223D56513B18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:d2:b1:17:6b:ac:e9:87:7f:2d:fa:40:f8:
7e:aa:a4:82:5f:49:3c:32:42:0a:44:37:73:5a:8e:
5d:f4:de:c4:5b:45:85:3f:35:74:a7:73:b2:2f:28:
a0:ed:7a:06:5a:70:13:26:01:df:84:48:60:4c:4f:
a7:62:96:ad:75:13:cc:be:ff:6d:51:88:70:38:06:
bb:fb:f7:64:a2:17:2a:fc:63:4f:19:d3:da:3b:0f:
cc:04:c1:4b:40:5a:ff:15:30:46:f3:9f:76:9c:1d:
55:5f:eb:f8:0b:22:03:12:8d:7a:6f:bb:4d:3c:31:
36:ec:ca:92:a9:39:27:35:dc:42:b7:02:fe:af:86:
6e:ce:b6:62:49:ed:58:89:b0:f4:0b:b6:ee:a9:71:
8c:74:69:0e:c3:12:2f:ee:40:cb:6d:88:48:13:aa:
62:dc:f6:75:a7:39:67:73:89:1c:2b:40:35:53:0b:
73:7f:2c:e8:b1:73:ba:9d:30:d7:fa:13:45:29:e9:
9f:aa:8c:37:d3:15:20:9f:f6:65:e0:6c:d5:29:0e:
11:ad:d8:38:25:64:0c:87:d5:93:2f:25:ca:65:11:
ce:93:fb:21:97:1d:e4:bf:dd:30:77:df:e7:41:f6:
50:5d:63:79:74:b5:8b:1b:3d:d3:b3:07:5d:d2:52:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:60:C3:75:AC:5B:7F:C6:79:FA:57:22:54:AC:22:3D:56:51:3B:18
X509v3 Authority Key Identifier:
keyid:72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34382d3438203d3e20323732393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1b9::/48
Signature Algorithm: sha256WithRSAEncryption
9e:84:37:3e:24:47:3b:76:bc:f4:50:74:48:e9:ab:df:f1:2e:
18:5d:3b:75:6c:dc:5c:2a:cc:de:be:76:94:2e:5f:c7:60:97:
aa:5f:8f:88:a3:78:f4:d7:7b:c6:e2:1d:cd:93:6c:05:e3:73:
75:1d:7d:7e:65:e3:82:9c:6b:28:48:3e:29:b0:02:d8:ac:45:
85:ca:4c:e8:4b:27:72:51:42:33:45:c3:b6:9a:5a:f1:d4:07:
97:09:13:3e:25:47:3b:15:fb:2e:13:c9:6a:22:99:2c:72:23:
91:d6:db:0a:6d:94:2b:23:46:be:c7:a8:84:48:1d:69:3f:98:
c8:ec:a8:66:86:1e:80:43:ff:7e:10:18:69:0f:fc:64:ff:44:
c1:bf:7f:81:0b:2a:52:82:64:0a:72:68:16:a8:c6:d8:90:13:
82:10:9e:e5:fd:dc:c1:d4:c0:0e:5e:c0:84:a3:f8:38:93:7b:
66:83:56:00:84:db:92:5f:80:9a:b1:94:a8:2c:b7:5b:01:c1:
ff:1e:ba:a2:c2:3c:58:49:ba:03:f2:f8:08:2b:78:83:bb:09:
09:5c:45:e3:43:4a:7a:dc:01:a3:2d:3c:2a:84:ce:56:d2:09:
fc:60:a8:2b:31:96:46:54:8e:63:a0:21:e3:1c:15:f3:c3:74:
93:c8:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:49:37 2026 by rpki-client