This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a333430303a3a2f34382d3438203d3e203238303638.roa
File: 323830303a3131303a333430303a3a2f34382d3438203d3e203238303638.roa (raw, json)
Hash identifier: 75rj8t90EjlBKfvlFrg1EGpz6AB1+jYzgGqRYVjAhXs=
Subject key identifier: 75:5F:9C:03:F9:8D:66:B3:7A:A4:3C:33:DD:FB:9A:13:16:1B:29:5D
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 24B7A6D545B7B3B07C83A763CEF4E74F3B2FAEBB
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a333430303a3a2f34382d3438203d3e203238303638.roa
Signing time: Tue 06 Jan 2026 19:22:08 +0000
ROA not before: Tue 06 Jan 2026 19:17:08 +0000
ROA not after: Tue 05 Jan 2027 19:22:08 +0000
asID: 28068
IP address blocks: 2800:110:3400::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 15:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b7:a6:d5:45:b7:b3:b0:7c:83:a7:63:ce:f4:e7:4f:3b:2f:ae:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Jan 6 19:17:08 2026 GMT
Not After : Jan 5 19:22:08 2027 GMT
Subject: CN=755F9C03F98D66B37AA43C33DDFB9A13161B295D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:99:51:8e:f0:c0:59:84:c9:95:80:c8:43:
e7:38:6c:1a:87:93:ed:18:bf:55:18:e6:6c:fc:7f:
bd:51:0f:2c:a4:b6:05:33:2b:ef:b9:a0:15:98:e5:
fb:a4:e1:4e:4c:9b:c0:b1:6a:68:3b:c1:25:f2:d0:
e0:70:3b:86:ec:a5:d2:c6:b5:02:90:46:c5:72:d6:
7a:66:e0:f1:24:ec:94:97:aa:2e:e0:ae:1d:88:a9:
73:49:8b:87:58:25:51:32:60:1b:fb:33:04:aa:94:
1c:26:ab:10:29:ca:91:be:e1:a8:7c:cd:d4:60:eb:
ac:57:9d:8c:67:9e:e4:6f:81:04:a5:e2:2b:14:5b:
ed:f6:b1:43:37:d1:ff:1b:ea:a1:13:f6:62:15:73:
83:54:36:1f:ca:19:ee:60:37:1b:e2:c0:fb:fd:81:
31:32:3f:0a:64:94:02:10:9b:1f:60:c8:eb:8b:2e:
65:6e:12:97:aa:56:0d:00:66:d4:b9:2a:cd:21:01:
bb:e6:46:17:44:0d:1b:24:c2:2b:7d:c4:ae:7a:cb:
d5:f3:de:10:3f:e2:2a:02:25:cd:d4:58:1d:14:3d:
ac:a3:d3:37:d1:2e:82:1a:dd:35:7c:02:7c:6f:ff:
8f:9e:c0:80:91:d6:43:4c:ca:fb:35:f2:61:ff:1f:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5F:9C:03:F9:8D:66:B3:7A:A4:3C:33:DD:FB:9A:13:16:1B:29:5D
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a333430303a3a2f34382d3438203d3e203238303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:110:3400::/48
Signature Algorithm: sha256WithRSAEncryption
4e:fc:83:a2:87:d9:cc:20:59:ed:2f:80:fc:1b:8a:27:17:89:
b7:7f:18:83:ca:f0:a7:65:8a:50:f6:b1:1f:7f:05:79:c6:2c:
f6:42:68:95:a5:b7:74:5c:fc:66:a8:ac:86:a1:40:3f:5b:8a:
ef:95:99:e6:1c:a9:0e:73:c8:8d:78:c6:f0:f3:6a:a5:ec:21:
5e:de:a7:0e:c9:a5:31:af:18:d2:b3:5f:23:41:a5:97:76:22:
1f:c1:d1:55:9b:fe:25:4c:90:31:6b:19:d5:7b:bc:fc:4f:ae:
72:fc:72:d9:84:54:50:70:03:f8:2b:aa:db:a0:2e:18:bc:82:
6f:87:10:f7:22:61:b9:ec:64:01:1c:6e:f6:72:a2:2e:d0:19:
5e:eb:c9:1e:39:19:4a:8b:3c:63:dc:3f:51:e6:25:3a:ad:32:
fc:9c:be:75:fc:b2:c9:52:8c:d7:db:8d:25:60:5c:9e:6a:d3:
65:c6:36:81:dc:42:49:97:66:76:4d:9e:79:0f:6b:46:70:bb:
cb:cc:6a:dc:e0:e4:2a:b5:b8:8b:15:93:54:d5:a5:26:68:d4:
0d:76:50:0c:43:85:f9:6b:f0:22:9c:28:d4:34:38:a0:37:36:
88:93:48:39:f2:9e:68:35:69:d1:1c:c2:2d:57:58:20:87:33:
9c:60:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:55 2026 by rpki-client