This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/323830333a373138303a3a2f33322d3438203d3e203139393035.roa
File: 323830333a373138303a3a2f33322d3438203d3e203139393035.roa (raw, json)
Hash identifier: 20BbTunCnNonduk/YbpBsjkwZLcJw4djSwFzm8WK36I=
Subject key identifier: 3B:54:5B:2D:DC:D4:64:3A:24:01:80:98:96:97:CB:7D:AD:90:5C:1B
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 219F9412E6D60487FCAA4A460164E972710F82AE
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/323830333a373138303a3a2f33322d3438203d3e203139393035.roa
Signing time: Tue 06 Jan 2026 19:14:19 +0000
ROA not before: Tue 06 Jan 2026 19:09:19 +0000
ROA not after: Tue 05 Jan 2027 19:14:19 +0000
asID: 19905
IP address blocks: 2803:7180::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9f:94:12:e6:d6:04:87:fc:aa:4a:46:01:64:e9:72:71:0f:82:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Jan 6 19:09:19 2026 GMT
Not After : Jan 5 19:14:19 2027 GMT
Subject: CN=3B545B2DDCD4643A240180989697CB7DAD905C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:f4:79:30:f1:f1:ab:da:51:62:02:2a:c1:
b8:37:ab:ca:75:62:dc:71:49:8e:4e:e2:e2:b8:06:
17:f3:cf:cc:10:00:0c:72:74:32:25:c4:37:99:8f:
22:5b:c3:2c:bf:02:77:34:6b:01:e9:74:40:df:66:
f5:fa:5d:25:ba:ea:3e:95:8f:9a:84:34:0d:73:3d:
df:35:cb:ea:87:7f:12:b6:2e:1f:38:5e:d1:f3:a2:
85:06:0c:59:8f:cf:4b:eb:85:d5:8c:b4:4b:1f:df:
a1:a0:6c:2b:ff:92:7c:9b:56:d7:33:33:eb:86:30:
b8:c6:a5:df:31:37:a5:37:c8:0a:3c:bb:04:da:84:
1b:92:9d:f8:56:e2:95:a7:b7:1a:66:55:5c:75:34:
c7:39:74:6c:89:9b:f7:ae:69:1c:55:ac:dc:07:b3:
e6:69:f0:1c:d2:eb:6f:34:4f:3b:59:d3:bc:da:03:
fd:6b:30:f8:b8:ed:d3:50:81:9f:38:cf:e4:de:ad:
c7:7d:bd:13:36:9e:bb:f2:fc:8e:34:21:27:99:9e:
c8:7d:26:f9:b3:de:5a:bb:10:44:4b:26:aa:af:d8:
15:8d:48:d5:46:bf:63:ed:1b:57:91:d2:49:33:55:
92:2d:95:d9:ae:65:c5:49:d0:1b:c8:f5:95:54:6a:
bf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:54:5B:2D:DC:D4:64:3A:24:01:80:98:96:97:CB:7D:AD:90:5C:1B
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/323830333a373138303a3a2f33322d3438203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7180::/32
Signature Algorithm: sha256WithRSAEncryption
96:69:f1:fc:90:c6:e0:46:55:87:82:23:3e:2d:56:4b:b4:23:
40:77:b8:4b:46:55:4f:ff:90:42:6f:b9:80:60:73:e5:3a:00:
a5:d2:c0:62:e3:d3:13:84:5d:1c:33:19:0c:13:fe:06:12:8f:
16:99:fc:e4:7e:4f:96:cf:9d:cf:51:51:f4:c8:52:70:52:54:
60:43:55:83:a1:ac:50:34:c6:79:35:23:8f:e6:20:8d:35:bf:
58:6c:2c:e7:e5:68:03:10:93:33:33:01:2e:1c:ca:d9:6b:77:
80:f5:d5:61:ea:d3:e3:79:73:98:f1:ad:62:de:28:bf:19:f6:
6e:fe:e7:98:e6:1c:09:c9:25:b3:0e:5a:25:53:04:26:9f:84:
f5:84:c8:e0:ef:b2:58:b2:1f:98:c8:7d:54:0b:45:55:af:4d:
12:82:c9:37:b1:4e:ee:08:9a:93:c4:09:d4:e9:ac:84:30:4c:
26:40:87:e6:24:f4:79:4b:64:eb:bc:07:55:50:7f:85:01:3b:
46:3f:e6:ba:6a:72:92:30:e7:bf:0a:07:47:8a:f9:6b:11:10:
3a:e3:16:ab:55:f9:b5:77:68:df:7d:4b:b0:ae:d5:9d:b3:3d:
b6:7d:8d:8d:8c:0d:4f:0b:e7:ca:61:ac:31:41:c0:87:a9:fe:
b2:b6:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:07 2026 by rpki-client