This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34392d3634203d3e203631343938.roa
File: 323830313a3136353a3a2f34392d3634203d3e203631343938.roa (raw, json)
Hash identifier: +4YdrALy+MihiAjwOmVHlW6yvpiamWbuIUy06TZ+hrk=
Subject key identifier: 52:82:F3:56:12:FA:DA:01:04:62:42:AE:DA:A5:DB:9C:78:BC:CA:60
Certificate issuer: /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial: 0A25CA51137E4769E04E88CD4DF4B99C89FDF9A1
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34392d3634203d3e203631343938.roa
Signing time: Sat 08 Nov 2025 14:10:00 +0000
ROA not before: Sat 08 Nov 2025 14:05:00 +0000
ROA not after: Sat 07 Nov 2026 14:10:00 +0000
asID: 61498
IP address blocks: 2801:165::/49 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 07:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:25:ca:51:13:7e:47:69:e0:4e:88:cd:4d:f4:b9:9c:89:fd:f9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Validity
Not Before: Nov 8 14:05:00 2025 GMT
Not After : Nov 7 14:10:00 2026 GMT
Subject: CN=5282F35612FADA01046242AEDAA5DB9C78BCCA60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:46:e8:9b:31:a1:a7:8b:7d:e0:fe:86:a4:
b9:89:16:25:ab:88:a6:54:b3:1c:09:e9:8f:87:43:
74:30:d6:ee:0a:c3:0f:51:3f:e9:7b:53:19:97:df:
8a:7c:eb:45:0f:9c:c8:65:cd:5c:6c:64:45:37:9a:
06:bc:e0:34:73:73:4b:fc:a5:a7:f9:f8:5a:5c:da:
3d:6c:99:bb:db:40:50:42:f3:db:1b:f3:3e:94:0d:
68:63:bf:9a:65:53:65:40:22:95:7d:37:3d:ef:70:
b2:7b:a6:89:80:79:22:50:88:bb:34:8a:29:91:a3:
32:5e:9f:5e:38:62:a3:77:16:4d:ac:a9:02:10:78:
d1:ca:67:5f:dc:d8:3d:ab:03:45:76:b2:b3:58:0e:
94:1f:32:a7:ad:79:57:98:5e:1c:44:8d:79:1f:67:
fb:48:16:4a:9c:23:93:39:3b:1d:d4:f4:44:68:b7:
51:b6:be:10:a2:77:0f:c1:a9:af:0d:d0:64:dc:58:
1b:04:f4:9a:d1:d7:1d:02:ae:e2:e2:ea:b3:68:b3:
4c:f6:00:42:eb:ef:18:49:15:65:69:0f:7b:5e:53:
c0:c0:4a:18:68:02:1b:48:7f:a0:16:18:62:c3:f8:
c2:a9:d2:4a:f8:0c:93:47:fc:63:7d:ec:a8:9a:f0:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:82:F3:56:12:FA:DA:01:04:62:42:AE:DA:A5:DB:9C:78:BC:CA:60
X509v3 Authority Key Identifier:
keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34392d3634203d3e203631343938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:165::/49
Signature Algorithm: sha256WithRSAEncryption
c2:9d:6b:77:a9:b0:06:00:91:be:0e:c5:82:eb:da:37:96:f1:
99:6b:2b:2b:e3:a1:a6:d9:36:2b:05:aa:b4:b9:d4:6f:30:04:
d8:6f:85:2e:94:91:99:c8:ba:7e:f2:f1:fd:88:0c:27:1d:6a:
16:78:9d:b3:ed:6e:c7:9b:54:b3:58:b9:99:02:09:c1:b7:ae:
ef:5c:34:62:bd:64:fc:63:c8:bf:d0:e5:ff:9a:85:37:0e:cc:
8d:ba:e2:4d:9a:ea:df:b6:f2:2c:4d:64:13:99:6f:50:87:42:
69:61:54:a5:34:04:3d:16:78:b3:4f:b7:01:a8:46:a9:63:78:
e1:9b:ae:e5:25:63:50:3f:85:8e:a9:2a:b4:16:65:36:e3:4d:
d0:62:6f:65:20:12:a0:9f:65:24:27:de:97:32:d8:bd:bf:bb:
a1:9a:98:ef:f6:a1:b0:d8:17:eb:22:ea:7d:c9:8d:9a:f0:d1:
4c:1c:ab:0f:48:fc:06:1e:55:26:e7:14:af:2d:3b:61:b1:9e:
52:cf:4c:3d:b3:90:98:6c:9a:77:84:24:22:03:40:c4:73:1e:
bf:7b:d6:41:af:ad:54:c2:a6:38:c7:52:45:7b:02:80:7c:e8:
98:07:cc:f6:3f:28:eb:9f:23:8c:ef:93:a0:ca:53:d8:59:46:
94:7f:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:04:54 2025 by rpki-client