This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/323830303a6166303a3a2f33322d3438203d3e203237393834.roa
File: 323830303a6166303a3a2f33322d3438203d3e203237393834.roa (raw, json)
Hash identifier: obhpgMgnIiiKxzmyh6d6//T2NJyjSwfg4kOdvpTypBs=
Subject key identifier: 40:E7:F3:C8:EC:D1:3E:8E:46:F9:9A:74:5A:F5:13:97:46:E3:32:00
Certificate issuer: /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial: 2E14473EDC0C29A042B125E7285D86A344F5C984
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/323830303a6166303a3a2f33322d3438203d3e203237393834.roa
Signing time: Tue 06 Jan 2026 19:02:50 +0000
ROA not before: Tue 06 Jan 2026 18:57:50 +0000
ROA not after: Tue 05 Jan 2027 19:02:50 +0000
asID: 27984
IP address blocks: 2800:af0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 13:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:14:47:3e:dc:0c:29:a0:42:b1:25:e7:28:5d:86:a3:44:f5:c9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Validity
Not Before: Jan 6 18:57:50 2026 GMT
Not After : Jan 5 19:02:50 2027 GMT
Subject: CN=40E7F3C8ECD13E8E46F99A745AF5139746E33200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:ae:b4:23:39:fd:fe:ba:87:e5:77:20:6f:
fc:90:fe:a9:48:75:9a:94:8b:52:89:5f:1a:b6:3d:
0d:be:f1:69:76:62:d7:e6:5e:93:a4:6a:61:ff:51:
0a:0e:06:27:12:bc:4f:0d:14:10:e7:81:09:60:21:
f7:43:64:79:c0:2b:2b:eb:0f:c1:0f:8f:2e:c5:d2:
b6:02:49:f5:ed:61:14:cf:07:d1:db:85:97:17:a2:
73:74:9e:ce:19:8a:1a:ca:d4:74:db:c9:ac:ca:b1:
d1:d1:f3:fd:49:2b:fc:be:c5:e1:2f:c3:de:34:db:
89:d1:b8:1e:2a:e2:97:8b:8e:b2:c8:89:da:80:34:
63:3c:99:13:54:62:0e:9a:2c:b4:dd:77:70:ed:66:
e8:40:e1:ce:6e:fb:e9:ab:0a:74:ee:91:f4:bf:31:
86:83:0a:b5:f2:77:63:8b:ea:68:07:42:d2:89:53:
ea:89:15:64:60:35:b9:8d:77:35:44:10:73:f3:33:
b1:ec:c5:f9:b5:c1:5f:8a:d1:fa:2f:bd:39:08:e8:
03:39:35:aa:f8:7c:fa:ef:77:47:14:d7:07:61:eb:
12:7f:9c:c6:ec:30:e4:e4:9a:e7:28:b2:20:63:99:
41:b1:df:67:ab:be:f7:09:7c:20:8d:9a:e7:2f:19:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E7:F3:C8:EC:D1:3E:8E:46:F9:9A:74:5A:F5:13:97:46:E3:32:00
X509v3 Authority Key Identifier:
keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/323830303a6166303a3a2f33322d3438203d3e203237393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:af0::/32
Signature Algorithm: sha256WithRSAEncryption
80:7e:4d:8e:c7:b2:ee:6f:16:2b:8d:ff:54:b3:fa:a2:74:85:
9a:dc:eb:b3:66:aa:99:84:f7:67:83:5f:f7:73:90:91:e4:8c:
e1:19:54:e4:de:69:a2:13:a7:5d:0c:cc:ec:bc:36:e3:4e:ae:
a2:28:8f:87:52:04:f1:7e:4d:a1:7e:37:35:39:70:c3:d0:26:
36:87:19:08:27:d0:9d:69:04:68:bc:de:53:03:c5:15:54:28:
23:5b:87:05:e8:35:a7:71:f7:77:3a:20:8a:09:23:d0:d1:16:
90:69:4f:2e:fc:73:b5:f6:b6:dd:de:bb:58:aa:59:b5:45:45:
f4:1f:7f:77:15:94:1c:30:fc:2b:da:c3:65:51:f3:fd:2c:06:
40:3c:07:fc:cb:37:3e:63:26:d4:c1:52:6a:d3:78:ea:5a:c2:
68:f7:16:b5:bf:2b:9d:e4:88:21:3b:64:01:71:79:48:71:59:
07:12:3b:32:c7:a7:c0:d0:c8:fb:89:b8:b3:09:c9:e6:eb:f6:
a1:72:e0:01:fc:d3:3a:2f:b3:2e:6d:09:22:26:db:1a:d6:1a:
de:06:48:6f:5a:fe:18:43:f5:b2:f2:36:c8:dd:90:ed:c0:19:
fd:e4:5e:0a:64:5c:4e:19:ef:ef:73:65:3d:11:ae:15:5a:8d:
53:82:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:36 2026 by rpki-client