This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a643a3a2f34382d3438203d3e20323733303431.roa
File: 323830313a3161353a643a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier: NWKpnNhbRw2e1Lzgj4IQzENAGSrk54MtiVLqW0MQRF0=
Subject key identifier: F5:69:FE:5E:77:5E:3B:10:94:2B:CE:5B:18:D7:F6:51:68:15:01:CC
Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial: 032F4DE6AFCE39CA8057846D9679C950B5077579
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a643a3a2f34382d3438203d3e20323733303431.roa
Signing time: Tue 06 Jan 2026 19:47:39 +0000
ROA not before: Tue 06 Jan 2026 19:42:39 +0000
ROA not after: Tue 05 Jan 2027 19:47:39 +0000
asID: 273041
IP address blocks: 2801:1a5:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:2f:4d:e6:af:ce:39:ca:80:57:84:6d:96:79:c9:50:b5:07:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Validity
Not Before: Jan 6 19:42:39 2026 GMT
Not After : Jan 5 19:47:39 2027 GMT
Subject: CN=F569FE5E775E3B10942BCE5B18D7F651681501CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b8:be:44:41:67:8c:d0:9f:c6:72:41:61:aa:
79:73:7e:1c:c2:9a:90:d8:fb:2e:99:37:80:2f:84:
28:68:4e:d3:eb:e1:5a:3a:1c:61:a8:d4:fc:79:a4:
47:b8:5b:2b:6e:93:48:9b:7f:bd:de:8f:b5:6e:15:
ef:8a:51:d2:13:a9:f4:f2:40:7e:92:4d:b3:81:3f:
e8:c0:84:01:e4:68:1f:ae:6d:7c:6f:cb:6d:e2:77:
6a:49:50:0c:c4:91:83:41:cc:9c:f8:b3:f2:c6:73:
fc:61:5f:95:a6:ae:f6:6c:bc:73:c4:91:a4:7f:45:
b2:55:79:a7:5d:f6:06:4b:9c:a5:c0:9f:57:d8:b1:
76:9e:44:58:1b:34:ce:6b:8f:8a:39:be:84:3b:2c:
9e:67:ac:a1:89:03:ae:66:8e:71:38:a4:6f:9e:57:
08:45:10:fd:05:ef:9c:58:9a:08:c1:61:ce:db:10:
3b:35:46:4a:51:99:29:ee:fc:d8:50:a2:89:e4:4b:
b0:42:27:c8:fa:70:fa:e5:91:9a:c8:15:85:8c:ec:
11:03:38:b0:85:b9:d1:e3:2a:b4:3e:f3:6c:05:a1:
d4:8a:2e:56:d1:c8:2e:9a:1d:e0:f8:73:1c:ca:97:
92:a4:9e:56:f7:fc:76:e2:25:48:b7:3d:a0:e2:4a:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:69:FE:5E:77:5E:3B:10:94:2B:CE:5B:18:D7:F6:51:68:15:01:CC
X509v3 Authority Key Identifier:
keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a643a3a2f34382d3438203d3e20323733303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a5:d::/48
Signature Algorithm: sha256WithRSAEncryption
2e:b8:01:b5:df:65:e0:46:d0:e4:72:81:32:6e:fa:1b:5d:70:
70:e3:40:ba:6f:17:93:53:99:03:59:19:f1:87:a9:d7:e5:44:
58:64:80:fb:43:49:0c:46:70:35:c7:ff:c8:77:52:10:c1:cb:
07:b2:cb:4d:ac:b1:a6:b9:40:cf:55:92:13:e3:6b:f2:6e:42:
8e:60:c5:b7:c7:d2:52:d1:ec:b9:06:05:2c:67:4a:1a:22:d2:
e0:4f:2d:ad:c8:e5:d7:7e:f4:ba:89:94:6c:53:1a:4e:cf:45:
07:06:b9:44:bf:89:29:c1:b8:0c:51:43:2b:d6:08:d2:5d:d9:
9a:b3:56:83:46:34:1b:e3:da:40:15:70:e1:9a:02:d1:2d:b6:
25:db:89:ca:14:eb:38:85:83:54:36:a5:1e:1f:9b:4e:0f:26:
30:80:f1:b3:a5:78:69:00:91:aa:01:e0:35:99:0d:5b:06:fe:
92:34:e0:54:7e:38:f5:db:73:cd:42:50:6b:55:fb:e0:9c:96:
c5:08:28:30:ae:3c:6e:8a:f0:54:d3:92:ee:e8:5e:dc:75:47:
bc:a9:97:cc:29:b3:35:53:d2:b3:30:df:16:24:f2:36:b4:bd:
6b:f5:3d:3a:08:c0:1a:39:b4:26:e0:24:93:3a:c1:9f:45:09:
17:6c:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:22 2026 by rpki-client