This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/323830303a3163303a3a2f33322d3332203d3e203237373730.roa
File: 323830303a3163303a3a2f33322d3332203d3e203237373730.roa (raw, json)
Hash identifier: MUubDt5IC8e9ZqLi9sqOs+Ca8qWwhxWJNmf6EaFb96g=
Subject key identifier: F6:2D:D2:66:38:53:20:4A:D6:A0:05:E9:FD:21:73:3F:46:08:32:A8
Certificate issuer: /CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Certificate serial: 1C82FB7A8FFFBF8603171465A7878014FEBD76DE
Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/323830303a3163303a3a2f33322d3332203d3e203237373730.roa
Signing time: Tue 06 Jan 2026 19:40:07 +0000
ROA not before: Tue 06 Jan 2026 19:35:07 +0000
ROA not after: Tue 05 Jan 2027 19:40:07 +0000
asID: 27770
IP address blocks: 2800:1c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:82:fb:7a:8f:ff:bf:86:03:17:14:65:a7:87:80:14:fe:bd:76:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Validity
Not Before: Jan 6 19:35:07 2026 GMT
Not After : Jan 5 19:40:07 2027 GMT
Subject: CN=F62DD2663853204AD6A005E9FD21733F460832A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:7a:a3:38:e5:91:ff:5e:e9:c4:e4:42:21:
ee:5f:f3:7f:e0:43:99:3b:a5:3a:a7:38:2a:66:10:
4f:e7:ca:b3:e7:70:ac:c1:64:db:ec:56:bf:6d:01:
2d:48:5b:93:e6:59:60:75:7c:b1:f6:b9:db:08:9b:
4a:ec:fe:99:58:93:f3:da:4a:ea:27:6d:d5:a6:32:
e5:5a:52:a0:5f:9c:b6:fa:d1:88:53:1f:02:66:86:
cd:51:b3:a3:4a:b3:14:da:cd:ce:63:11:9f:d4:2d:
2e:1d:c8:82:47:8e:ff:40:80:07:7e:5f:62:5c:21:
a2:cc:f6:7d:76:ad:58:40:a8:9c:f4:a7:e3:7e:ac:
47:eb:b2:3f:ad:59:a2:fd:5a:62:1a:3a:e8:6f:9e:
65:67:75:95:91:86:8a:f0:13:6d:8e:e6:8a:5c:29:
0c:47:15:c8:23:10:c8:a7:88:0d:31:e8:ec:38:b0:
44:a0:a1:93:69:38:ba:c2:45:85:03:40:a4:84:53:
9e:b6:fe:13:b0:32:0b:3a:44:64:fe:42:c2:78:ad:
d4:b8:ad:68:36:82:84:72:be:e5:64:58:72:ce:1b:
3e:de:4e:d8:e9:74:bd:0e:9f:d5:60:03:1b:ec:f9:
54:0a:a8:74:b2:59:e1:bf:5e:92:1f:66:e1:33:96:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2D:D2:66:38:53:20:4A:D6:A0:05:E9:FD:21:73:3F:46:08:32:A8
X509v3 Authority Key Identifier:
keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/323830303a3163303a3a2f33322d3332203d3e203237373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:1c0::/32
Signature Algorithm: sha256WithRSAEncryption
56:8d:98:a6:68:d7:97:b3:a0:62:13:2d:4e:88:f4:cf:e7:28:
c6:83:24:61:ef:75:61:81:b6:a3:cf:3b:63:58:c4:c2:a0:71:
c5:cc:b8:52:1b:83:6a:13:ce:a6:48:a3:a1:89:de:14:85:fa:
e9:28:65:3b:8b:9d:03:30:eb:a2:e3:13:63:91:c7:bd:9a:5f:
6c:7e:d8:f2:38:31:1c:01:f9:a9:f1:ee:29:8a:12:12:e0:4a:
e1:4e:ce:d1:a0:d2:11:9c:cf:c5:0b:1d:47:76:6c:50:89:1a:
71:4c:aa:cf:53:69:d5:1f:63:b0:77:bb:1f:58:54:6c:2b:3e:
db:5e:a8:ca:aa:2f:c8:6f:54:fb:6a:be:96:cc:5d:66:d1:df:
47:4f:41:9b:a4:cb:95:39:e7:cc:2a:80:20:91:f9:b4:a1:ce:
bd:fa:43:9b:05:74:20:45:3e:8e:1b:47:22:63:5e:42:75:8f:
6d:d2:dc:3b:3f:46:b7:6d:13:0f:30:9e:1e:8e:33:a8:80:e6:
72:34:d9:15:cd:8d:94:7d:69:6a:4e:64:63:92:d5:46:51:ca:
b3:24:d6:8c:e2:2e:b7:70:aa:81:6d:f2:0d:40:d4:3a:06:28:
23:c0:6a:cf:d8:bd:7a:58:cf:17:f4:68:0a:42:7c:cf:43:c3:
e8:e4:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:18 2026 by rpki-client