This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a373a3a2f34382d3438203d3e20323733303431.roa
File: 323830313a3161353a373a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier: uhgSYxZKPJnX7rO/HTin1oQAe1gcIP+cA1MRBhFc5o8=
Subject key identifier: 6C:FD:9F:1F:68:51:83:3D:11:8C:EA:F0:FE:FD:6C:46:08:B6:53:22
Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial: 193F6593E7927217D3B0F725D0B7CA6373D3D297
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a373a3a2f34382d3438203d3e20323733303431.roa
Signing time: Tue 06 Jan 2026 19:47:43 +0000
ROA not before: Tue 06 Jan 2026 19:42:43 +0000
ROA not after: Tue 05 Jan 2027 19:47:43 +0000
asID: 273041
IP address blocks: 2801:1a5:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3f:65:93:e7:92:72:17:d3:b0:f7:25:d0:b7:ca:63:73:d3:d2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Validity
Not Before: Jan 6 19:42:43 2026 GMT
Not After : Jan 5 19:47:43 2027 GMT
Subject: CN=6CFD9F1F6851833D118CEAF0FEFD6C4608B65322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:98:8a:b1:39:81:a9:5e:8d:1f:8a:75:49:
ae:e4:7a:85:d9:91:df:fe:4d:9b:2c:39:8c:d3:dd:
1f:50:8f:d9:0b:4f:01:55:5b:6f:75:00:bb:3e:12:
8e:f8:26:c2:63:38:20:f9:21:72:e2:80:d9:18:ba:
7c:ac:7a:2e:d6:7e:0c:45:2e:31:c6:a8:db:20:10:
b8:8d:7e:c1:ab:5d:fa:8b:f7:9d:a8:ed:56:85:26:
c9:15:64:f1:48:f6:71:d7:2b:07:c1:35:11:ce:18:
11:0b:0a:bc:04:62:3f:a8:91:92:4f:c5:b9:71:2a:
79:7e:32:8f:d7:e9:c3:b9:8d:ed:0f:3f:c4:16:22:
84:6f:4f:e0:80:3a:98:fd:aa:5b:4c:48:81:80:5f:
40:6d:92:5b:9b:90:5f:97:4f:ff:23:af:9b:bc:66:
aa:b5:73:d8:88:a4:75:f7:10:23:a0:e6:26:c9:07:
02:8c:99:06:ea:2f:5d:87:5a:dd:91:74:4a:85:f7:
86:e5:4a:55:29:6e:3a:e5:ec:16:cc:4b:bf:7e:30:
e3:08:cb:6d:a7:22:48:c6:52:7d:65:1e:ff:d0:d5:
63:b6:72:4c:00:ad:ac:8d:f8:37:67:16:7a:7f:f0:
c8:85:72:81:27:94:9e:98:f0:f0:60:79:9f:f2:48:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FD:9F:1F:68:51:83:3D:11:8C:EA:F0:FE:FD:6C:46:08:B6:53:22
X509v3 Authority Key Identifier:
keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a373a3a2f34382d3438203d3e20323733303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a5:7::/48
Signature Algorithm: sha256WithRSAEncryption
80:58:76:85:5f:a8:90:35:08:d1:1c:a4:3f:2d:ec:f6:bb:bd:
5d:1a:c8:1a:23:2e:14:3e:8a:6b:cd:35:97:b8:a1:f7:1b:d2:
25:71:be:f8:0c:ce:7a:f4:be:9a:b9:45:c8:18:2f:26:31:c4:
f8:9e:38:27:61:b5:e6:78:7f:06:5a:be:84:10:49:a0:11:dc:
41:0d:d5:45:d1:4f:5e:5f:6a:bc:48:74:e3:42:19:ca:6d:61:
66:e6:82:43:f6:bd:10:83:6d:3b:dc:30:76:67:da:64:2a:4d:
ec:11:70:33:31:70:f0:ac:db:45:fd:49:8a:2e:a1:c2:b3:a3:
bb:7a:75:18:cf:db:e5:a5:48:45:e5:76:50:cf:78:21:12:74:
19:33:6f:e1:0a:79:7f:07:c2:f4:57:5f:6b:3e:b6:5e:1f:db:
8f:4c:ed:4c:e5:bd:39:4b:28:f3:c8:49:e2:60:ac:98:8b:21:
5a:d6:fd:a3:8a:20:48:65:c8:77:9b:a0:40:70:c7:ce:2c:2f:
d9:a6:49:5d:39:59:d1:df:70:87:9a:c3:88:33:9e:2b:75:6f:
35:88:02:f6:62:a6:af:51:1a:da:d7:e6:c8:b9:8b:86:a3:23:
a0:15:96:90:dd:ad:01:89:de:3d:05:f4:a5:d7:c2:7b:e6:2f:
34:a5:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:56 2026 by rpki-client