This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/323830313a3161313a3a2f34342d3438203d3e20323732303231.roa
File: 323830313a3161313a3a2f34342d3438203d3e20323732303231.roa (raw, json)
Hash identifier: XLwKA3fqTb06xinCTDzKgrUyCalY1yNPVkNexkoFHuM=
Subject key identifier: 3A:72:B5:FD:C1:0F:A7:E2:1E:40:59:E0:ED:06:16:88:59:DB:C4:24
Certificate issuer: /CN=15AEFB47DDB077551B2BC6F226A051855E0A0F6D
Certificate serial: 1F47DF00016D4C6FF3E3B879DC67E810F590DB4A
Authority key identifier: 15:AE:FB:47:DD:B0:77:55:1B:2B:C6:F2:26:A0:51:85:5E:0A:0F:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/323830313a3161313a3a2f34342d3438203d3e20323732303231.roa
Signing time: Tue 06 Jan 2026 19:22:34 +0000
ROA not before: Tue 06 Jan 2026 19:17:34 +0000
ROA not after: Tue 05 Jan 2027 19:22:34 +0000
asID: 272021
IP address blocks: 2801:1a1::/44 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.crl
rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 14:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:47:df:00:01:6d:4c:6f:f3:e3:b8:79:dc:67:e8:10:f5:90:db:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15AEFB47DDB077551B2BC6F226A051855E0A0F6D
Validity
Not Before: Jan 6 19:17:34 2026 GMT
Not After : Jan 5 19:22:34 2027 GMT
Subject: CN=3A72B5FDC10FA7E21E4059E0ED06168859DBC424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:6c:19:4e:96:81:cb:5c:81:40:67:5e:5c:
71:78:67:57:84:ac:dc:59:92:d8:c0:51:94:b8:64:
12:5b:51:cd:43:51:ac:92:f9:7b:c0:8b:d2:04:a8:
85:e8:74:61:ab:2f:a0:ae:ae:fe:db:86:58:5f:90:
1a:7c:86:6a:96:0a:33:8b:e6:c4:73:91:63:28:75:
a0:dc:69:cc:45:39:87:2a:46:c7:84:22:60:b5:42:
11:b6:8d:e7:01:df:1f:a1:d5:bb:34:8f:45:5b:95:
8a:1f:57:cf:03:3c:85:66:cc:05:2d:fc:16:0b:c4:
90:9e:a8:ec:d9:76:08:95:48:54:09:84:4f:94:f9:
07:67:27:b0:f2:c8:e8:12:ab:24:4b:46:f3:21:ab:
5a:f7:c0:01:30:20:e1:77:c1:48:77:45:9c:d4:75:
1c:7b:7e:d6:fe:65:c3:54:78:69:79:d9:2e:26:45:
de:d1:1c:06:00:10:91:9a:9d:93:bc:93:c3:4b:e8:
82:b4:6c:de:e5:41:12:82:62:29:1f:dd:f0:70:ae:
89:4e:ec:ec:83:8d:09:0c:25:fc:71:7b:40:7e:00:
5d:28:0c:be:10:1a:8e:11:28:8f:31:51:0e:04:73:
46:99:a4:03:0e:ba:2d:98:c2:de:88:0a:9a:15:4f:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:72:B5:FD:C1:0F:A7:E2:1E:40:59:E0:ED:06:16:88:59:DB:C4:24
X509v3 Authority Key Identifier:
keyid:15:AE:FB:47:DD:B0:77:55:1B:2B:C6:F2:26:A0:51:85:5E:0A:0F:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/323830313a3161313a3a2f34342d3438203d3e20323732303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a1::/44
Signature Algorithm: sha256WithRSAEncryption
0b:83:79:a7:12:89:c4:5e:7e:2d:14:50:02:8b:1a:36:27:6b:
14:df:47:c9:a1:4b:f5:ac:9d:1f:0e:6a:f4:7a:41:1c:6d:72:
bd:8d:e5:ae:1d:f2:88:2f:14:4a:ca:c3:f4:88:d1:3d:02:b2:
f8:68:8d:10:ea:54:48:a2:b0:90:02:1e:4b:e4:c2:16:84:b2:
e7:1e:0a:aa:73:f4:13:ac:69:ad:3a:11:10:cb:2c:cb:4c:4e:
86:ce:ee:37:85:bb:a7:1a:45:2d:72:5e:2d:44:39:e4:29:b8:
41:4d:6d:18:60:d7:88:a4:75:ba:62:d3:d0:61:28:86:e4:63:
83:46:a9:56:7f:5e:b6:d6:ac:25:ac:3c:91:b3:3c:32:50:e2:
a1:ec:b3:b1:75:82:da:ab:44:43:dd:ed:89:29:68:23:01:78:
f5:59:01:70:72:cf:b3:ab:78:de:07:5b:71:9c:d0:91:5f:99:
21:ba:01:c9:b5:a5:6b:28:99:94:b5:55:8f:53:0d:b1:6d:e7:
c0:50:ff:6c:8b:76:35:ec:94:c5:a5:82:33:91:08:c9:ec:c5:
07:c8:ca:f1:f5:92:14:ca:37:18:d9:a8:27:23:e4:05:f9:c4:
ff:1c:7d:1e:51:85:69:9e:16:d5:f5:ff:1a:c2:e7:f4:5b:32:
00:90:c8:a2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUH0ffAAFtTG/z47h53GfoEPWQ20owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVBRUZCNDdEREIwNzc1NTFCMkJDNkYyMjZBMDUxODU1
RTBBMEY2RDAeFw0yNjAxMDYxOTE3MzRaFw0yNzAxMDUxOTIyMzRaMDMxMTAvBgNV
BAMTKDNBNzJCNUZEQzEwRkE3RTIxRTQwNTlFMEVEMDYxNjg4NTlEQkM0MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/WwZTpaBy1yBQGdeXHF4Z1eE
rNxZktjAUZS4ZBJbUc1DUayS+XvAi9IEqIXodGGrL6Curv7bhlhfkBp8hmqWCjOL
5sRzkWModaDcacxFOYcqRseEImC1QhG2jecB3x+h1bs0j0VblYofV88DPIVmzAUt
/BYLxJCeqOzZdgiVSFQJhE+U+QdnJ7DyyOgSqyRLRvMhq1r3wAEwIOF3wUh3RZzU
dRx7ftb+ZcNUeGl52S4mRd7RHAYAEJGanZO8k8NL6IK0bN7lQRKCYikf3fBwrolO
7OyDjQkMJfxxe0B+AF0oDL4QGo4RKI8xUQ4Ec0aZpAMOui2Ywt6ICpoVTylHAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUOnK1/cEPp+IeQFng7QYWiFnbxCQwHwYDVR0j
BBgwFoAUFa77R92wd1UbK8byJqBRhV4KD20wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84ODc4RENGQ0ZDMzMyNjBDMEJEOEEyQTY4M0Y5RjY3Njky
RTIxRkQ0Rjc0NDY1MkRGRDZCQUI2NTFCRDJFNzgyLzAvMTVBRUZCNDdEREIwNzc1
NTFCMkJDNkYyMjZBMDUxODU1RTBBMEY2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNUFFRkI0N0REQjA3NzU1MUIy
QkM2RjIyNkEwNTE4NTVFMEEwRjZELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODg3OERDRkNGQzMzMjYwQzBCRDhBMkE2ODNGOUY2NzY5MkUyMUZENEY3
NDQ2NTJERkQ2QkFCNjUxQkQyRTc4Mi8wLzMyMzgzMDMxM2EzMTYxMzEzYTNhMmYz
NDM0MmQzNDM4MjAzZDNlMjAzMjM3MzIzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoAQGhAAAw
DQYJKoZIhvcNAQELBQADggEBAAuDeacSicRefi0UUAKLGjYnaxTfR8mhS/WsnR8O
avR6QRxtcr2N5a4d8ogvFErKw/SI0T0CsvhojRDqVEiisJACHkvkwhaEsuceCqpz
9BOsaa06ERDLLMtMTobO7jeFu6caRS1yXi1EOeQpuEFNbRhg14ikdbpi09BhKIbk
Y4NGqVZ/XrbWrCWsPJGzPDJQ4qHss7F1gtqrREPd7YkpaCMBePVZAXByz7OreN4H
W3Gc0JFfmSG6Acm1pWsomZS1VY9TDbFt58BQ/2yLdjXslMWlgjORCMnsxQfIyvH1
khTKNxjZqCcj5AX5xP8cfR5RhWmeFtX1/xrC5/RbMgCQyKI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:32 2026 by rpki-client