This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa
File: 323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier: VDRbRwXLSLvYL4xi7ryOb4dgoWQ4USpDU6NQZnC+kRc=
Subject key identifier: 0E:C1:BD:A9:F2:77:57:3E:40:BA:3B:C4:CB:1F:2A:F8:CD:11:B2:F2
Certificate issuer: /CN=65ABB800C3E6526FD0368FC597BC1D1E1863AE04
Certificate serial: 393D57548E47816BF602043B2398394B1AF14C4C
Authority key identifier: 65:AB:B8:00:C3:E6:52:6F:D0:36:8F:C5:97:BC:1D:1E:18:63:AE:04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa
Signing time: Tue 06 Jan 2026 19:19:31 +0000
ROA not before: Tue 06 Jan 2026 19:14:31 +0000
ROA not after: Tue 05 Jan 2027 19:19:31 +0000
asID: 262589
IP address blocks: 2801:1c:a800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.crl
rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 00:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3d:57:54:8e:47:81:6b:f6:02:04:3b:23:98:39:4b:1a:f1:4c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ABB800C3E6526FD0368FC597BC1D1E1863AE04
Validity
Not Before: Jan 6 19:14:31 2026 GMT
Not After : Jan 5 19:19:31 2027 GMT
Subject: CN=0EC1BDA9F277573E40BA3BC4CB1F2AF8CD11B2F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:4a:ca:08:24:d0:8a:e8:e2:99:75:96:a2:
6c:3e:3e:cd:38:64:6a:c8:77:f7:c5:4c:6f:57:9d:
04:b5:e9:33:67:a7:6f:a5:dc:d6:d8:88:5a:73:6d:
23:d1:a6:70:3d:31:7c:69:dc:4b:86:b8:bd:54:6e:
06:e1:0c:eb:bb:a6:30:46:4c:6d:12:ba:d9:85:45:
fa:8d:9e:a5:52:36:ef:9d:18:18:a7:6a:eb:41:72:
1a:3d:b0:43:cf:75:24:91:95:f3:4c:f1:97:23:ae:
1d:50:3b:42:ad:ae:b6:d9:d7:82:0a:cf:be:b8:8b:
c2:40:3d:30:a3:5a:56:56:1f:dd:ea:ae:f5:62:4a:
98:3b:90:37:f8:8b:b7:f9:a3:ac:32:f8:85:24:cc:
af:d1:72:f8:3a:6e:d4:16:a0:a3:19:f5:29:c6:00:
c3:97:d7:d4:cd:5c:c7:95:e4:93:f6:fc:cf:ee:e1:
6f:08:76:1f:ac:fe:21:c9:7b:b5:dc:fa:99:39:58:
53:dc:a0:a4:69:0e:32:e7:91:83:48:9a:4e:e0:65:
9b:78:a1:42:ce:d8:df:ec:0f:94:07:33:0c:8b:49:
9a:d3:26:81:bc:52:69:7f:ba:c3:5a:ab:9e:a4:84:
f5:2e:bb:89:7b:1b:d8:92:29:a4:95:9c:99:14:03:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C1:BD:A9:F2:77:57:3E:40:BA:3B:C4:CB:1F:2A:F8:CD:11:B2:F2
X509v3 Authority Key Identifier:
keyid:65:AB:B8:00:C3:E6:52:6F:D0:36:8F:C5:97:BC:1D:1E:18:63:AE:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ABB800C3E6526FD0368FC597BC1D1E1863AE04.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D82DE0E864103239EF2C8C0FE500D5912BE3DE53F42DF717F899190E77488/0/323830313a31633a613830303a3a2f34382d3438203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1c:a800::/48
Signature Algorithm: sha256WithRSAEncryption
85:69:2b:75:32:3a:f8:ee:68:4b:76:27:14:b8:0c:75:ca:16:
96:5a:0d:5d:77:24:ed:f7:86:d7:64:17:57:81:fe:b1:70:cd:
9b:88:5e:08:aa:a5:56:e6:b1:31:cd:b8:71:2e:5d:9d:02:fa:
89:4e:81:fd:68:45:ca:0c:ab:2a:ec:94:a9:72:aa:3a:24:0a:
0b:ca:3e:ce:41:d2:78:dd:99:0f:22:a5:27:3d:9c:7f:9c:26:
4a:0d:fc:5b:aa:61:c4:7b:87:d2:88:df:e2:d1:14:42:c4:74:
9d:ef:f8:b4:57:3b:81:4e:2d:3d:02:48:b7:b0:17:4c:94:9c:
3b:80:82:01:42:3b:e4:fa:32:53:5b:c1:6e:00:d0:3d:1c:2c:
db:64:bb:cf:f0:fd:a4:e5:bc:2f:f9:65:53:16:b4:ce:6a:56:
6d:05:1a:9c:57:5c:b8:67:85:d0:8e:e6:19:a8:57:aa:6a:44:
f4:31:84:b3:1b:96:db:d8:a1:0f:f1:3c:53:f3:0c:eb:1e:33:
d1:76:47:74:b3:5a:3a:22:b0:30:b2:ef:91:75:10:58:0d:53:
24:a1:fa:42:19:36:12:e0:25:f8:7a:77:49:50:f4:32:fd:94:
c2:97:bc:3c:6e:32:31:fc:7a:58:75:10:6f:67:5e:1b:b8:60:
5a:13:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:30 2026 by rpki-client