This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a383a3a2f34382d3438203d3e20323733303431.roa
File: 323830313a3161353a383a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier: bU7D/CPP6HkzHw4Af1bDpbk385cDDZMSlCf81pm5pOU=
Subject key identifier: 3A:09:09:F6:5C:36:76:04:39:A1:06:51:EF:96:8F:6C:0C:2E:21:C3
Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial: 3CDB9185FE2415FF9AABC94E1B1B290BB06E153E
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a383a3a2f34382d3438203d3e20323733303431.roa
Signing time: Tue 06 Jan 2026 19:47:39 +0000
ROA not before: Tue 06 Jan 2026 19:42:39 +0000
ROA not after: Tue 05 Jan 2027 19:47:39 +0000
asID: 273041
IP address blocks: 2801:1a5:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:db:91:85:fe:24:15:ff:9a:ab:c9:4e:1b:1b:29:0b:b0:6e:15:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Validity
Not Before: Jan 6 19:42:39 2026 GMT
Not After : Jan 5 19:47:39 2027 GMT
Subject: CN=3A0909F65C36760439A10651EF968F6C0C2E21C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0c:d7:01:33:82:2a:ba:7d:84:fd:ee:85:c2:
8c:83:c5:31:13:b5:5c:b8:2f:d0:76:a6:0b:e9:31:
06:49:b7:59:a9:1b:50:8f:51:92:be:8c:e4:76:52:
0d:16:fb:a4:56:f0:c5:d5:58:f3:d0:21:c4:b8:78:
7c:c7:4a:54:c4:5f:dc:62:e2:9f:3d:2c:e8:7a:1b:
79:c0:a4:ff:a0:b9:10:71:6c:ac:37:a7:36:87:9c:
22:84:09:6e:46:e2:c5:0e:42:d5:48:df:5e:eb:72:
a0:f2:2a:ea:a7:90:0c:7e:b6:a1:5c:5e:83:54:df:
f2:6f:51:51:2c:93:0e:d2:c5:79:d0:26:cf:01:c3:
7a:de:b1:bd:27:0b:45:b2:6c:ad:2f:de:54:1e:a7:
de:8a:05:b6:45:84:3f:ab:dc:ec:0c:2f:30:7b:2d:
92:9a:96:4e:d1:d3:6e:f0:94:0a:96:44:c1:88:7e:
35:16:c4:58:43:46:21:1e:26:52:1c:0f:4e:8b:46:
9e:5b:7d:0c:48:67:2f:d9:d9:d5:a8:d0:09:03:c3:
30:91:f9:52:34:8b:c6:aa:33:aa:43:ff:02:ab:17:
63:d9:55:62:94:d1:ff:97:b5:c1:a4:21:c1:f3:09:
42:70:5c:31:c2:fb:36:0c:49:3f:8d:ea:04:3a:47:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:09:09:F6:5C:36:76:04:39:A1:06:51:EF:96:8F:6C:0C:2E:21:C3
X509v3 Authority Key Identifier:
keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a383a3a2f34382d3438203d3e20323733303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a5:8::/48
Signature Algorithm: sha256WithRSAEncryption
95:0a:76:40:18:7b:e2:e3:51:24:ff:d7:6d:cd:b8:43:43:a0:
54:2d:07:36:95:76:ad:ef:7e:da:05:bd:5f:b7:a8:ec:dd:33:
27:83:d4:60:c6:5e:e3:bf:8f:d7:e9:c9:4a:04:3f:a2:39:61:
bd:49:27:93:ee:93:0c:b1:90:e6:e8:df:97:c2:b2:33:a5:91:
78:82:48:b2:0d:16:a1:8f:2f:1a:64:ba:2c:b2:13:80:43:1c:
c2:19:68:9f:31:f5:28:32:95:93:a7:b2:e6:d1:ef:3a:3c:87:
d5:23:42:4c:6a:aa:32:ff:08:10:aa:76:b3:3d:23:99:27:8a:
6f:d5:5c:44:60:04:1f:38:91:cc:ab:26:85:bd:98:ca:be:3c:
02:d2:ae:3e:85:ab:f4:d7:85:44:ff:d1:7d:07:2a:76:66:b4:
79:6e:ad:b2:48:23:4e:7e:56:d1:39:c8:fd:fc:c7:30:af:ac:
7f:f0:2e:38:e5:c6:be:d2:85:8a:66:d3:6c:25:e5:57:68:a9:
82:fc:b5:31:37:44:95:5b:32:e0:bc:f0:53:12:91:e3:9c:88:
7e:be:51:5e:83:2e:b9:db:5e:7e:52:53:63:a7:c1:7f:23:ad:
b1:73:93:f5:a9:f4:62:74:61:d1:c0:d0:53:02:06:a7:b1:3e:
d3:d0:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:54 2026 by rpki-client