This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/323830363a3334353a3a2f33322d3332203d3e20323635353936.roa
File: 323830363a3334353a3a2f33322d3332203d3e20323635353936.roa (raw, json)
Hash identifier: ezy5QokvyZmLaG7FhA+u9Z4Vjopha9B4wZPpgpIctfQ=
Subject key identifier: 07:80:DC:1B:FB:28:35:26:81:E2:F0:E6:EB:A0:50:39:87:99:27:0B
Certificate issuer: /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Certificate serial: 252F2AB0B0AFA494D43C62F2F6D90E17A34CCC02
Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/323830363a3334353a3a2f33322d3332203d3e20323635353936.roa
Signing time: Tue 06 Jan 2026 19:33:01 +0000
ROA not before: Tue 06 Jan 2026 19:28:01 +0000
ROA not after: Tue 05 Jan 2027 19:33:01 +0000
asID: 265596
IP address blocks: 2806:345::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl
rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 11:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2f:2a:b0:b0:af:a4:94:d4:3c:62:f2:f6:d9:0e:17:a3:4c:cc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Validity
Not Before: Jan 6 19:28:01 2026 GMT
Not After : Jan 5 19:33:01 2027 GMT
Subject: CN=0780DC1BFB28352681E2F0E6EBA050398799270B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:d6:da:44:f6:d3:84:dd:72:01:67:0d:63:
0e:2f:be:03:9a:b2:1f:0f:d0:47:04:f0:2a:1c:bd:
8a:62:99:ea:8c:9a:15:18:69:4a:ca:cb:12:7d:ff:
2c:5d:b5:0f:26:3b:d9:9e:4e:87:6f:d1:f4:69:0e:
2b:b2:32:39:5f:44:c0:5e:ae:c0:07:c0:a6:5f:aa:
76:bb:a4:05:54:a9:d0:d8:ff:c5:58:8a:46:83:2e:
dc:df:fe:f3:e3:e3:ca:8d:4d:e4:be:21:48:d0:9d:
ef:62:55:41:87:af:d9:75:b2:24:da:f4:6a:6e:83:
95:6c:a0:0a:3e:1d:d3:9a:60:ae:ee:26:aa:0f:51:
39:86:21:22:42:04:5a:ea:89:6e:dd:ea:86:b7:81:
55:48:c4:2a:c3:1b:b8:73:26:76:3f:5a:63:5f:5c:
71:3f:74:85:8f:1a:92:de:0a:1c:0c:67:4b:c7:f0:
80:e0:ca:dc:25:12:8e:ad:c4:fb:04:14:22:8e:a7:
ac:76:2f:2e:4c:98:4b:a5:30:fd:ef:91:e0:53:45:
75:cd:a4:e0:2d:30:16:83:04:6a:c6:bf:d2:f4:63:
7f:fa:60:9e:5e:68:48:bf:2c:ff:ec:ae:cb:bd:84:
d3:44:e7:4a:84:e9:d6:28:28:06:67:9b:0a:bb:45:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:80:DC:1B:FB:28:35:26:81:E2:F0:E6:EB:A0:50:39:87:99:27:0B
X509v3 Authority Key Identifier:
keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/323830363a3334353a3a2f33322d3332203d3e20323635353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:345::/32
Signature Algorithm: sha256WithRSAEncryption
b9:20:6c:bf:44:ef:ec:c1:f5:63:44:6a:09:33:f5:96:32:92:
c5:62:18:df:62:a8:17:38:5b:1e:19:0f:1d:9c:61:4c:ac:e2:
bc:f6:ed:cc:18:24:ff:28:71:78:ce:91:08:38:94:4f:09:e3:
17:ae:95:f5:8a:0c:f3:4f:6a:9e:d4:96:9b:1c:fd:e2:bc:20:
4f:f5:8b:6d:b2:73:d1:88:eb:94:a3:7f:96:1b:29:f5:3b:54:
c4:d4:ff:c2:3b:b8:4a:aa:3a:86:d6:9e:09:52:bc:86:f4:d9:
11:0a:d1:6c:c0:13:5a:67:ad:60:a3:e4:2b:5a:0a:ac:8e:0a:
1c:7a:c9:81:07:c6:fa:62:40:e4:1b:89:e1:56:88:df:68:ce:
7a:07:ee:76:ab:25:0d:70:8d:c6:c6:c9:90:38:9f:a9:e6:8a:
c4:a7:6d:fd:dd:92:42:09:83:65:ff:2d:2f:63:96:a6:ff:f4:
8b:76:65:36:98:c3:9c:59:5f:ab:fc:2a:a8:2b:59:ff:b2:4c:
41:1e:9b:d9:73:ad:85:2f:57:dc:7b:45:0d:02:dd:22:33:c1:
54:16:71:54:d0:0e:3d:ab:71:5f:eb:87:85:8d:46:64:43:f6:
27:51:a0:da:78:02:0c:63:69:59:d2:dc:3b:5b:dd:d2:2f:86:
37:75:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:27 2026 by rpki-client