This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a3a2f34342d3434203d3e20323733303431.roa
File: 323830313a3161353a3a2f34342d3434203d3e20323733303431.roa (raw, json)
Hash identifier: cJETtyWPOQRAW5b9idYGVwXAvsBMV+bGfwqXGJ7kqbo=
Subject key identifier: 36:3D:51:05:65:2B:0E:5C:C2:28:5B:DA:BB:42:67:68:B2:3B:A8:02
Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial: 0B6A735421C61D79A6C636AFDC029E592D83729C
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a3a2f34342d3434203d3e20323733303431.roa
Signing time: Tue 06 Jan 2026 19:47:42 +0000
ROA not before: Tue 06 Jan 2026 19:42:42 +0000
ROA not after: Tue 05 Jan 2027 19:47:42 +0000
asID: 273041
IP address blocks: 2801:1a5::/44 maxlen: 44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:6a:73:54:21:c6:1d:79:a6:c6:36:af:dc:02:9e:59:2d:83:72:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Validity
Not Before: Jan 6 19:42:42 2026 GMT
Not After : Jan 5 19:47:42 2027 GMT
Subject: CN=363D5105652B0E5CC2285BDABB426768B23BA802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:c5:bb:e6:80:05:f4:40:73:16:25:aa:79:
04:0c:fc:25:f7:c0:6e:33:7d:a4:38:73:b9:c8:4f:
8f:05:0c:37:a2:e0:35:81:d9:ee:e1:14:69:cc:c5:
08:dc:49:31:20:39:81:7c:e5:64:09:95:4d:8a:c5:
6b:9d:e7:a2:69:8b:bb:71:1c:c3:5c:ea:27:e5:29:
9f:c6:12:45:53:ae:16:34:0b:3c:93:8e:77:86:b2:
29:84:c5:03:29:25:4a:41:f3:f4:32:33:80:1e:f9:
38:4f:f5:8b:d3:b8:3c:97:e8:6a:5c:11:ec:03:d6:
69:0d:a4:5f:6f:c7:eb:dd:e3:a2:a4:b3:45:80:a2:
02:02:cc:4e:6d:70:5a:a4:84:75:de:32:f4:41:75:
03:89:e2:85:bc:d7:04:b7:a8:be:33:8e:35:3a:c2:
c3:d9:41:4a:82:d0:4b:bb:8c:ee:74:90:52:f1:08:
f7:60:64:ac:ed:30:ad:54:1c:9b:12:65:5b:5f:f1:
df:db:68:9f:4e:9b:63:be:7c:45:ab:e7:07:6f:8d:
02:e1:9e:e9:d9:98:81:da:0a:37:8d:65:6c:8c:af:
5c:73:42:b2:fa:e7:f7:d4:03:65:27:48:32:6b:b7:
01:bb:72:fe:f9:2d:4c:70:b3:bd:d7:0b:25:ec:0c:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3D:51:05:65:2B:0E:5C:C2:28:5B:DA:BB:42:67:68:B2:3B:A8:02
X509v3 Authority Key Identifier:
keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a3a2f34342d3434203d3e20323733303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a5::/44
Signature Algorithm: sha256WithRSAEncryption
2d:eb:3b:1a:09:91:8b:7e:90:4a:d5:f7:1f:49:b5:bd:7e:c0:
dd:9f:7d:56:da:ec:c4:d0:0c:05:0a:29:1c:3b:28:71:21:db:
04:09:4b:42:95:ce:2f:13:79:4e:62:13:67:ab:e9:6e:73:e4:
96:50:59:f1:7f:f2:4a:b2:50:d8:d1:b1:01:ed:b8:31:d0:25:
d8:f7:c9:47:41:49:4e:ad:b9:ef:4c:56:bf:81:fa:1b:d7:db:
d0:b5:f4:41:7a:f9:bc:56:8e:13:56:0b:b0:22:91:8c:39:e0:
40:38:98:7e:5b:da:d4:d4:ca:50:6a:7c:51:97:58:1a:9f:0a:
a1:a3:10:d5:11:52:d9:ee:69:dc:f1:29:73:41:71:a4:08:ac:
e9:6b:74:85:98:1c:07:5f:fc:f1:10:b5:57:9b:13:4b:b6:86:
d6:10:53:be:59:ff:b4:ad:88:eb:03:3d:74:85:ef:35:b6:d0:
db:83:72:5f:1b:0a:55:5c:10:15:ad:56:02:d4:ca:72:03:c4:
c4:1e:c1:f6:71:b9:8c:02:0e:a2:17:27:5c:27:1d:f7:2b:76:
a7:1b:7d:0c:8d:28:b4:95:c3:a2:65:e9:24:b9:f9:95:c5:7b:
6f:54:94:19:47:06:f1:9f:a1:84:b2:52:e3:86:06:4a:7e:d8:
cf:0d:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:58 2026 by rpki-client