This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/323830313a3138363a3a2f34342d3434203d3e203237393531.roa
File: 323830313a3138363a3a2f34342d3434203d3e203237393531.roa (raw, json)
Hash identifier: saA+gH2m/qtlupprtCDVbc4Lesb00epmV3OtpMudxF4=
Subject key identifier: 21:BC:79:71:6C:A2:32:4E:90:4B:3B:69:B5:F7:24:81:C0:04:9B:C5
Certificate issuer: /CN=D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466
Certificate serial: 3F78B0022A1B4B944AE32518D27C43408CF51E7F
Authority key identifier: D0:9A:0E:1E:A6:05:B7:A8:EA:80:B5:B3:9D:56:BD:8E:02:A0:A4:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/323830313a3138363a3a2f34342d3434203d3e203237393531.roa
Signing time: Tue 06 Jan 2026 19:21:33 +0000
ROA not before: Tue 06 Jan 2026 19:16:33 +0000
ROA not after: Tue 05 Jan 2027 19:21:33 +0000
asID: 27951
IP address blocks: 2801:186::/44 maxlen: 44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.crl
rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 15:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:78:b0:02:2a:1b:4b:94:4a:e3:25:18:d2:7c:43:40:8c:f5:1e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466
Validity
Not Before: Jan 6 19:16:33 2026 GMT
Not After : Jan 5 19:21:33 2027 GMT
Subject: CN=21BC79716CA2324E904B3B69B5F72481C0049BC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:17:e0:40:5c:37:5c:90:c6:59:b9:1f:47:
1f:cd:09:e0:84:c3:03:67:2c:6c:c6:86:29:6f:b1:
27:46:cc:6e:e8:44:00:e3:9d:fc:b5:ed:ff:8c:0b:
c8:0e:ae:de:a2:84:94:e7:07:8c:61:91:72:52:28:
d4:d2:78:f4:11:74:6f:eb:7e:5c:27:e5:78:94:2d:
8c:0e:e0:bd:51:54:4b:e9:c1:1a:5c:43:9d:a7:8d:
62:f2:e5:60:df:0b:fb:23:61:61:bb:23:f9:10:0c:
5b:f3:42:66:29:16:ad:f7:8f:d8:60:a7:ec:72:81:
fe:ca:08:c5:10:eb:fa:65:e7:2a:b1:ce:e4:74:e0:
a8:8a:80:65:91:7b:3a:47:16:75:c4:58:69:35:72:
1a:b2:66:04:4a:31:28:de:0b:49:4f:ab:73:2a:f8:
21:ce:84:5e:4e:f5:8f:4d:c8:b3:a1:31:27:f7:1f:
08:ff:ae:3c:92:6b:b4:1b:79:c3:01:5a:86:6b:4f:
fa:7d:8a:8a:8a:69:af:07:dd:89:b6:c7:a5:23:d5:
b7:cc:bd:b4:0c:5a:14:84:fd:79:74:91:19:39:38:
fb:bf:31:15:a6:e3:d3:fb:d4:8a:42:1f:74:e1:3d:
3d:96:bf:97:05:9d:27:f2:a1:a4:36:8c:f0:7f:4f:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BC:79:71:6C:A2:32:4E:90:4B:3B:69:B5:F7:24:81:C0:04:9B:C5
X509v3 Authority Key Identifier:
keyid:D0:9A:0E:1E:A6:05:B7:A8:EA:80:B5:B3:9D:56:BD:8E:02:A0:A4:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/323830313a3138363a3a2f34342d3434203d3e203237393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:186::/44
Signature Algorithm: sha256WithRSAEncryption
53:3b:4d:35:b8:d2:16:c0:7e:87:d3:b3:23:a2:12:12:68:9b:
ba:ac:87:42:9b:25:a5:64:d0:0d:2d:90:3a:76:e8:27:23:5f:
e5:35:dd:ad:bc:4f:c4:cf:22:3f:89:ae:df:cb:07:5e:d2:74:
57:72:36:61:9e:18:be:b8:df:9b:65:ab:e5:bb:66:6a:d6:5d:
16:39:47:c3:12:a5:f8:19:eb:64:92:0b:d5:fd:75:e2:20:1d:
5c:10:a0:8c:3c:85:b4:9e:19:fe:83:f5:5c:3c:8f:4f:77:3f:
99:c8:51:03:32:bd:e4:b7:85:af:ba:43:5a:30:7e:9f:25:ef:
e4:92:28:32:64:21:c9:43:38:ea:e6:85:99:ef:c1:39:80:41:
03:97:6d:91:67:25:f0:fa:19:0d:aa:eb:4d:9b:4e:28:80:3e:
ad:b6:ea:98:75:95:9d:31:21:5d:e5:09:23:30:9f:dc:c4:81:
44:b6:9c:eb:a7:65:ed:e0:51:07:f1:fb:c8:89:2e:74:ec:95:
8f:48:8f:58:f6:c1:13:08:d0:e0:25:f1:da:80:6e:10:92:18:
aa:86:6e:2c:e5:41:34:24:cc:20:c6:39:42:da:d0:7e:46:9a:
ce:25:12:90:c6:1f:ea:8d:63:61:d2:2a:70:26:52:41:0c:38:
ca:12:2d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:01:45 2026 by rpki-client