This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34342d3434203d3e20323731383236.roa
File: 323830313a3165363a3a2f34342d3434203d3e20323731383236.roa (raw, json)
Hash identifier: TsS5jIY6mII+w/6BCzOhN9hQ8zC0irDiaWB+hSDNdLA=
Subject key identifier: 49:C9:2F:A2:BC:AD:64:4E:1A:7C:43:DF:D3:49:0F:6C:7B:F5:19:BD
Certificate issuer: /CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED
Certificate serial: 7370AE785B53F9DB4964E9049FC17A6BCC3E9F5F
Authority key identifier: A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34342d3434203d3e20323731383236.roa
Signing time: Tue 06 Jan 2026 19:07:47 +0000
ROA not before: Tue 06 Jan 2026 19:02:47 +0000
ROA not after: Tue 05 Jan 2027 19:07:47 +0000
asID: 271826
IP address blocks: 2801:1e6::/44 maxlen: 44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.crl
rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:70:ae:78:5b:53:f9:db:49:64:e9:04:9f:c1:7a:6b:cc:3e:9f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED
Validity
Not Before: Jan 6 19:02:47 2026 GMT
Not After : Jan 5 19:07:47 2027 GMT
Subject: CN=49C92FA2BCAD644E1A7C43DFD3490F6C7BF519BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:9d:2b:6f:01:77:19:02:50:1b:16:e6:7f:
2c:b5:51:17:0a:7b:a0:b5:ec:49:c7:63:4b:56:ff:
3f:63:97:43:40:87:76:f3:b1:e0:00:82:45:13:0d:
d8:fe:58:68:f2:8d:33:50:66:4a:56:53:06:3e:48:
d1:c7:20:b1:2a:14:d8:b0:6b:74:1a:61:96:51:bf:
41:74:d5:d3:a3:d3:5f:5c:c6:3d:7f:59:10:48:74:
a6:c9:40:74:e9:dc:82:62:b5:af:04:88:7d:22:51:
07:2a:ff:2a:d1:0b:68:c3:40:36:b5:15:40:8b:10:
e4:f0:dc:54:9d:13:a4:61:f2:3d:7f:6e:7d:2b:b9:
02:a3:df:65:15:98:fa:3a:e0:d8:39:c1:ef:57:65:
cb:b9:6b:16:c7:cb:8c:cd:70:0d:c9:c2:2d:c7:73:
3c:03:9d:bd:64:c5:69:d9:2a:d4:b5:cb:11:dd:1b:
cc:4d:c2:ee:f9:bf:f4:c4:d6:70:ee:41:f6:ab:66:
e0:d0:35:66:ee:2a:e4:0c:66:a4:86:02:07:84:59:
a1:94:7f:67:41:91:35:0e:e8:29:c4:96:40:1f:51:
c6:3f:69:4d:4c:ce:07:ac:dc:2d:c1:fa:80:cc:48:
a0:5e:f1:2f:0c:5a:fb:23:ac:c8:5e:5d:3d:36:d5:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:2F:A2:BC:AD:64:4E:1A:7C:43:DF:D3:49:0F:6C:7B:F5:19:BD
X509v3 Authority Key Identifier:
keyid:A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34342d3434203d3e20323731383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e6::/44
Signature Algorithm: sha256WithRSAEncryption
23:38:71:b9:48:74:9c:27:c4:55:35:68:3c:ee:26:60:ff:d6:
7c:86:a0:32:a1:d8:f1:5e:de:8e:9a:84:11:0c:fb:d7:71:d3:
f8:b3:1f:fa:92:26:4e:69:1a:13:98:a8:74:17:fe:17:35:4d:
fc:3d:2a:51:23:07:28:b4:37:ae:b4:43:a2:3f:3d:b8:77:4c:
b5:3b:7e:05:2b:01:c1:38:21:25:20:d1:c6:12:21:76:ad:fd:
0d:dc:4e:c9:f6:12:ea:18:72:d8:fc:33:6d:8c:c3:f3:91:db:
ed:28:45:ee:af:0f:db:9c:a9:6e:18:fd:6b:eb:d1:8c:33:bf:
ae:e1:d2:65:07:f3:68:3d:21:79:14:b0:a4:d7:21:f1:f8:0a:
32:ef:ac:8f:da:f1:fb:22:21:32:e5:84:8c:cd:8f:13:d7:3e:
6f:06:31:ff:86:f3:20:9c:7c:61:1b:b2:c0:2d:cb:5e:06:5a:
2a:02:77:88:57:59:af:25:48:ba:2b:e6:04:ea:24:be:9a:aa:
17:b7:6d:a1:7e:e6:03:a5:bf:8a:53:7a:93:c4:11:f9:1e:a4:
54:f7:68:5f:22:be:8d:4c:d8:6d:fa:69:8c:a1:2f:9a:c0:95:
84:62:6f:2f:85:b8:d6:65:53:30:e3:ec:5e:5f:62:aa:e2:8d:
97:f7:e9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:58 2026 by rpki-client