This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa
File: 323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier: Oafom6YjMLXSirC61uMMsgoi+zv2PxHGcKbM/Shpgxg=
Subject key identifier: C7:03:43:11:7F:70:10:81:C1:18:BD:5C:CB:99:04:19:29:58:72:A1
Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial: 576F4A5F09F69CB9B0E52EBADDF957161F740888
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa
Signing time: Tue 06 Jan 2026 19:47:40 +0000
ROA not before: Tue 06 Jan 2026 19:42:40 +0000
ROA not after: Tue 05 Jan 2027 19:47:40 +0000
asID: 273041
IP address blocks: 2801:1a5:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6f:4a:5f:09:f6:9c:b9:b0:e5:2e:ba:dd:f9:57:16:1f:74:08:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Validity
Not Before: Jan 6 19:42:40 2026 GMT
Not After : Jan 5 19:47:40 2027 GMT
Subject: CN=C70343117F701081C118BD5CCB990419295872A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:e7:d2:43:6d:af:c1:41:d7:cc:1d:3c:fb:
73:52:da:3d:17:f3:26:d8:2a:e3:ba:d5:5b:b4:18:
59:89:dd:bd:9f:78:70:64:ed:d3:76:41:26:2c:4b:
4d:c5:84:0b:d8:e0:30:06:ef:26:f1:33:4b:c6:a5:
e2:75:33:a4:ef:6a:ac:a2:96:7d:1c:12:05:e6:4a:
fd:e6:d3:bc:ed:3b:37:40:ad:2b:8d:6e:f0:9b:28:
09:ef:05:9d:77:76:a2:24:6a:42:5f:2b:1a:00:45:
36:97:db:68:db:b1:0c:89:38:dc:c7:bc:52:71:2a:
73:1c:ae:e0:12:a1:3a:3a:73:6a:0a:92:ff:ee:ae:
b9:a8:76:62:3f:cd:94:d6:16:d6:d5:eb:3c:72:5b:
fb:eb:47:90:3e:86:f0:3b:7c:b4:5a:ce:0c:79:6b:
d2:3c:ae:ef:44:82:25:2c:e8:cf:a2:da:63:ad:0f:
64:67:29:60:59:b4:14:7c:93:9a:d2:df:3e:7f:fa:
49:70:81:18:10:64:50:7d:20:16:93:fd:da:c4:8f:
01:b6:9c:5b:ea:81:a4:d8:32:22:1b:89:3a:e4:29:
c9:24:18:55:3b:af:c1:d7:11:5f:9f:cc:00:cc:b8:
03:ee:c2:4a:e6:ce:95:5a:28:ab:5a:a0:96:59:19:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:03:43:11:7F:70:10:81:C1:18:BD:5C:CB:99:04:19:29:58:72:A1
X509v3 Authority Key Identifier:
keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a5:a::/48
Signature Algorithm: sha256WithRSAEncryption
15:e8:fd:79:10:9c:3d:1c:de:6f:a2:dc:34:fe:a6:47:a2:34:
e4:cd:a8:f6:b0:3b:31:bf:1f:3d:a0:7f:34:a3:c3:51:83:fd:
aa:98:ab:fd:17:1b:20:4d:69:f7:42:6a:c4:2f:c2:76:6c:b2:
1f:0a:88:dc:00:75:8e:06:8b:8d:5b:4e:95:31:9e:63:a3:a5:
a4:12:e5:f8:92:b4:83:8e:73:fe:6c:f2:98:44:0c:0c:13:5d:
59:a2:af:51:10:5e:c8:e6:b8:22:9e:19:fe:c2:ac:bf:69:94:
8d:f8:6b:c9:27:66:73:f4:92:34:bf:92:0e:52:cb:7f:d6:5f:
d3:85:19:a0:25:ee:78:43:c2:6f:29:8a:8f:ae:ff:c6:48:e5:
04:ad:85:90:69:e7:ce:37:43:c5:03:f9:8b:c2:e3:fd:d7:3f:
1d:0f:8d:19:f1:d2:c5:f8:ae:5f:3b:40:e3:2a:e0:3a:cf:d5:
b0:ef:fd:6a:97:b4:e6:4b:6d:88:58:97:46:6d:38:4a:45:72:
69:0d:b1:b1:4b:5a:2f:8d:0e:22:eb:68:5e:c6:7a:6f:02:1b:
42:50:85:2c:84:ff:70:82:c5:9e:95:13:1b:4b:16:d1:55:8c:
3f:42:13:6e:68:f4:aa:22:99:d6:0d:de:a8:75:8b:74:c5:d5:
fc:a8:da:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:04 2026 by rpki-client