This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa
File: 323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa (raw, json)
Hash identifier: lf3oVJ9LlNdtglrx6z7KxASTJCwokXvnNhC1VS59eN8=
Subject key identifier: 63:3C:4F:F2:E3:B4:78:84:73:98:5D:DC:27:D9:4D:2B:AD:02:E9:6A
Certificate issuer: /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial: 61806E218A54A4BF64448677FEDB5A8B734FF011
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa
Signing time: Tue 06 Jan 2026 19:07:48 +0000
ROA not before: Tue 06 Jan 2026 19:02:48 +0000
ROA not after: Tue 05 Jan 2027 19:07:48 +0000
asID: 272140
IP address blocks: 2801:18:5800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:80:6e:21:8a:54:a4:bf:64:44:86:77:fe:db:5a:8b:73:4f:f0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Validity
Not Before: Jan 6 19:02:48 2026 GMT
Not After : Jan 5 19:07:48 2027 GMT
Subject: CN=633C4FF2E3B4788473985DDC27D94D2BAD02E96A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:38:7e:bd:a8:0d:14:b3:5b:e0:a1:8e:b3:
a4:1b:fe:b1:1e:d0:8e:e4:ca:c8:c2:71:b3:5c:4a:
e8:4b:a2:2b:2a:ac:26:4d:f6:88:bb:5d:ca:5c:bd:
38:20:39:7c:79:6d:c9:03:18:f4:05:01:63:2a:3d:
80:cf:42:21:26:df:50:c4:62:9c:50:48:2b:48:c7:
78:a2:22:75:92:32:b9:aa:27:d2:9a:f5:b5:4b:b4:
4c:ff:75:c3:7a:68:75:77:b5:1f:2c:7f:ed:42:ca:
93:fc:d2:93:01:1c:6e:1c:f8:a3:b4:e9:67:ca:c4:
8b:0c:15:25:0a:39:13:20:99:c4:f9:47:98:3c:ae:
61:ca:7c:9b:94:8d:66:d2:31:7e:71:e1:09:98:ac:
b5:11:86:02:f6:34:d5:7a:da:bd:6d:cf:b9:db:24:
36:48:53:9a:ee:2e:88:c5:78:da:ba:b9:1c:c4:3f:
80:89:f0:b7:cf:6b:1f:09:54:f3:d3:e6:13:9f:df:
79:ca:61:da:15:a3:fb:cb:37:f2:77:81:23:30:5a:
28:e6:88:69:f7:6c:2e:91:c4:b3:7e:61:1a:4d:d8:
f9:80:5d:36:2b:16:57:c5:72:30:22:df:9b:67:a5:
7b:41:a1:be:bb:03:c6:07:a6:f9:aa:c4:4c:6c:c4:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3C:4F:F2:E3:B4:78:84:73:98:5D:DC:27:D9:4D:2B:AD:02:E9:6A
X509v3 Authority Key Identifier:
keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:18:5800::/48
Signature Algorithm: sha256WithRSAEncryption
91:89:7d:c8:61:68:1b:ea:38:34:ef:9d:f1:a4:dc:19:e9:58:
56:e5:d0:bb:27:25:e6:d2:54:d8:db:ef:23:ab:84:11:17:04:
74:6f:e9:26:40:79:56:de:5e:d9:e9:45:a0:d1:65:e9:9e:99:
37:04:7f:16:8f:e9:c8:c2:34:05:71:90:cf:42:75:01:31:3c:
2a:16:c0:67:b4:dc:89:56:6a:94:e3:69:6c:f0:ed:d9:46:b9:
53:e3:71:10:4c:58:39:31:da:d3:ac:7d:8b:7a:d7:4f:39:07:
b7:c2:2c:60:94:5a:fb:db:ca:b9:dc:1c:56:1a:ad:c2:68:5e:
d2:88:3a:dd:47:98:31:61:eb:6b:af:dd:0c:aa:46:87:c3:c1:
fe:4a:25:26:7a:76:84:c4:80:81:6c:98:ea:1c:c0:e2:4f:05:
0c:6e:05:90:9e:75:8b:c3:e1:f7:1f:4f:c5:87:50:c5:30:f7:
89:7c:ce:07:8b:59:f2:34:6e:2f:63:96:70:5e:b9:a6:5c:a6:
d0:61:06:ab:96:13:b4:67:3f:8c:37:d6:68:2d:15:70:ed:3d:
1a:63:e5:1b:1e:34:26:80:25:c2:62:d7:42:be:c2:b3:fe:87:
88:a2:f9:f2:da:9f:92:29:88:33:5d:c8:cc:16:0c:f7:a4:fa:
ee:28:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:40 2026 by rpki-client