This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa
File: 323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier: tjNL+LYDnk38haF5VsiHEUF4TO8T6GShRfdB52MRHbw=
Subject key identifier: 7E:CF:F4:1D:6A:DF:81:1B:33:4E:2E:61:AA:58:D6:5B:DC:B6:77:C2
Certificate issuer: /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial: 33C17E21F89B795F506227AD789C6C8502AB63CA
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa
Signing time: Tue 06 Jan 2026 19:07:48 +0000
ROA not before: Tue 06 Jan 2026 19:02:48 +0000
ROA not after: Tue 05 Jan 2027 19:07:48 +0000
asID: 61468
IP address blocks: 2801:18:5800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c1:7e:21:f8:9b:79:5f:50:62:27:ad:78:9c:6c:85:02:ab:63:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Validity
Not Before: Jan 6 19:02:48 2026 GMT
Not After : Jan 5 19:07:48 2027 GMT
Subject: CN=7ECFF41D6ADF811B334E2E61AA58D65BDCB677C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:e2:f3:eb:85:77:65:bf:f0:85:17:8b:2c:
6b:84:30:40:87:32:69:eb:13:85:63:5b:86:39:02:
b8:55:e8:f2:a6:0e:13:5d:4d:00:c1:97:e9:85:94:
10:1d:a3:ab:0d:b7:d1:84:63:98:3a:af:01:66:f3:
12:93:46:f5:44:f7:3c:a8:3a:2f:02:80:5d:03:a1:
f4:38:99:bf:6e:ac:00:a7:89:70:4d:59:d5:71:91:
de:24:c3:43:28:14:67:ad:16:70:86:7c:7d:e4:55:
db:28:af:25:88:ca:31:3f:19:7f:00:4c:af:2a:47:
66:7d:ff:dc:a2:06:6c:ad:78:b9:7d:03:4d:be:48:
88:7e:55:e6:b3:e5:cc:85:ef:4d:82:a0:4a:53:0e:
89:0e:76:0b:61:97:eb:5a:98:4c:0e:c6:df:93:67:
fe:1e:61:50:23:ac:7b:b5:29:2b:fd:50:0b:7c:b9:
4e:cb:75:f7:e1:0e:1c:8c:c3:30:d1:75:5e:52:5a:
4e:02:bf:5b:94:77:76:6a:b0:e5:24:87:4f:e2:c4:
41:77:da:ed:84:9c:8d:4f:7d:dc:f4:13:db:c0:8a:
d2:f5:37:56:89:33:c2:7d:36:9a:da:36:62:6c:bf:
c1:4d:67:eb:b0:e4:bc:d6:d3:8c:e6:16:82:b4:b2:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:F4:1D:6A:DF:81:1B:33:4E:2E:61:AA:58:D6:5B:DC:B6:77:C2
X509v3 Authority Key Identifier:
keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:18:5800::/48
Signature Algorithm: sha256WithRSAEncryption
46:28:24:20:ee:37:60:29:b9:c1:01:47:7a:c3:55:28:72:66:
88:3f:42:d3:54:a9:02:eb:92:8a:05:f0:d7:62:eb:e8:8c:3f:
d1:a2:4f:78:dd:5a:b9:74:ad:2c:f5:a9:69:9b:d9:9b:e1:5c:
e7:6e:d5:ab:2f:ed:57:15:f9:31:a2:ec:23:9b:0a:ba:a8:b1:
9c:cb:90:fa:81:96:fc:58:e4:79:34:34:fd:6b:56:36:0e:96:
6b:27:95:d9:9f:23:ec:c3:84:e9:64:98:35:71:0f:e7:a8:ba:
d5:27:0b:5c:2b:1a:46:4d:9d:19:fb:2d:1f:6f:90:23:7c:0f:
85:5b:e3:b3:2c:19:03:05:04:49:8d:2c:37:eb:82:d6:80:5a:
c3:5b:97:4a:a1:74:8a:95:df:e7:ca:b4:b4:a1:17:5e:49:0c:
5f:17:87:54:42:6f:9a:90:b3:74:5b:c4:bb:7b:e5:45:54:c7:
28:e2:b9:c0:9a:8f:be:3f:42:fb:c0:ad:38:0c:cd:c1:b2:41:
7a:f3:0b:ea:6c:41:54:bd:bc:a5:c5:25:83:44:d5:3e:bf:5e:
81:be:62:07:df:46:33:3e:72:f6:36:e3:f5:83:db:d5:10:53:
c7:64:94:70:3c:9e:5a:8c:ed:c8:55:1f:36:40:0c:6a:ca:10:
ac:46:d7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:01 2026 by rpki-client