This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4F2C9A2E6E0AADFD50CAEE9E61ABC180679417559E4A61EEAC97D6F1F9306D9/0/323830303a6361303a3a2f33322d3438203d3e20323639393936.roa
File: 323830303a6361303a3a2f33322d3438203d3e20323639393936.roa (raw, json)
Hash identifier: HKldt0zDX4lJF5V2lbeBvQRwuXpMptGOcnDximRwxTc=
Subject key identifier: AF:B9:EB:E4:73:5F:79:13:29:7E:D1:BF:BA:44:85:4B:DD:F9:E6:61
Certificate issuer: /CN=3F2E58143D2740EF45140B3C58EE14ACB71DE18E
Certificate serial: 7FE7E3C9F7452A62094956332AB7DBD015FC09C3
Authority key identifier: 3F:2E:58:14:3D:27:40:EF:45:14:0B:3C:58:EE:14:AC:B7:1D:E1:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F2E58143D2740EF45140B3C58EE14ACB71DE18E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A4F2C9A2E6E0AADFD50CAEE9E61ABC180679417559E4A61EEAC97D6F1F9306D9/0/323830303a6361303a3a2f33322d3438203d3e20323639393936.roa
Signing time: Tue 06 Jan 2026 19:15:57 +0000
ROA not before: Tue 06 Jan 2026 19:10:57 +0000
ROA not after: Tue 05 Jan 2027 19:15:57 +0000
asID: 269996
IP address blocks: 2800:ca0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A4F2C9A2E6E0AADFD50CAEE9E61ABC180679417559E4A61EEAC97D6F1F9306D9/0/3F2E58143D2740EF45140B3C58EE14ACB71DE18E.crl
rsync://repository.lacnic.net/rpki/lacnic/A4F2C9A2E6E0AADFD50CAEE9E61ABC180679417559E4A61EEAC97D6F1F9306D9/0/3F2E58143D2740EF45140B3C58EE14ACB71DE18E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F2E58143D2740EF45140B3C58EE14ACB71DE18E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e7:e3:c9:f7:45:2a:62:09:49:56:33:2a:b7:db:d0:15:fc:09:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F2E58143D2740EF45140B3C58EE14ACB71DE18E
Validity
Not Before: Jan 6 19:10:57 2026 GMT
Not After : Jan 5 19:15:57 2027 GMT
Subject: CN=AFB9EBE4735F7913297ED1BFBA44854BDDF9E661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:90:90:b0:c9:74:1c:53:2f:bd:a5:f0:cf:
d3:9a:18:62:58:f5:3d:15:a0:26:b3:38:83:0d:5b:
84:78:46:1d:53:45:b2:8d:43:3e:a1:65:59:ca:07:
5b:78:b6:8e:f8:02:9f:e6:b5:ae:94:69:89:9d:95:
ad:7d:1b:90:98:13:3b:da:5a:4a:aa:58:5e:52:92:
8a:4c:11:8e:55:16:a1:e3:fe:75:bd:d0:aa:9b:ee:
78:5f:33:dd:e7:36:c3:3d:db:db:b5:7c:0a:17:dd:
62:8a:fa:92:f0:80:ea:67:56:fb:37:ea:00:79:03:
81:93:03:7d:a6:49:2b:f6:a7:ff:e2:17:b6:aa:4a:
b2:6c:1e:4a:b0:6e:89:34:53:3d:1b:a2:3e:36:ca:
db:b1:96:ce:4d:8a:e6:58:92:79:9d:af:9f:d4:cb:
23:72:fb:93:48:47:38:51:f0:85:bc:f3:7c:2e:b2:
e2:b9:37:bc:9d:8b:41:86:62:e6:84:a3:3e:69:78:
53:fc:0c:cc:17:f8:2d:c0:c3:36:a6:e7:f4:8a:5d:
9f:d0:48:1a:b4:6e:8f:93:0d:67:fd:61:c3:67:88:
77:84:40:42:56:94:e3:49:dd:89:b1:a5:f7:01:89:
5b:b2:40:c7:f6:97:3b:98:7f:17:50:11:8c:56:1c:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B9:EB:E4:73:5F:79:13:29:7E:D1:BF:BA:44:85:4B:DD:F9:E6:61
X509v3 Authority Key Identifier:
keyid:3F:2E:58:14:3D:27:40:EF:45:14:0B:3C:58:EE:14:AC:B7:1D:E1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A4F2C9A2E6E0AADFD50CAEE9E61ABC180679417559E4A61EEAC97D6F1F9306D9/0/3F2E58143D2740EF45140B3C58EE14ACB71DE18E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F2E58143D2740EF45140B3C58EE14ACB71DE18E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4F2C9A2E6E0AADFD50CAEE9E61ABC180679417559E4A61EEAC97D6F1F9306D9/0/323830303a6361303a3a2f33322d3438203d3e20323639393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
47:b8:99:c1:12:48:f0:7e:7f:be:dc:9b:95:1b:44:06:64:d5:
37:f8:09:0b:44:0e:64:54:32:4d:0d:b3:01:c1:df:f4:bb:37:
ef:fb:3c:13:b5:c8:a5:04:3b:71:d2:10:5e:60:49:89:43:15:
e6:24:93:3f:65:f9:47:4a:8c:cc:89:ab:7c:0e:32:52:fa:00:
74:fb:04:08:7b:9f:67:23:2c:56:62:7f:55:68:19:18:6b:bb:
98:26:d7:61:70:cf:27:46:89:f3:d1:a7:a2:df:30:58:73:aa:
8b:e0:f3:c1:2b:77:78:22:d4:be:3d:df:05:bb:07:be:2d:c4:
62:7c:76:41:21:e4:47:4a:9b:d2:ba:c0:f0:0b:58:15:ec:ca:
a7:cb:43:dd:f3:1e:88:4c:62:60:fe:39:28:d9:a8:8a:24:a8:
c5:3f:b8:1d:65:2a:6f:5c:6d:cf:89:df:e8:b5:3a:e2:71:e7:
14:0c:15:a4:32:1c:db:16:3d:75:b0:27:40:51:51:b2:ba:fa:
02:eb:51:b0:5e:63:71:d9:0a:9c:4e:b7:c1:c3:de:0d:b8:1c:
ac:71:86:69:a7:9e:d1:9f:68:c1:85:de:6b:b3:53:0c:f7:c0:
2c:b8:99:88:5a:26:3a:bd:af:20:ef:a2:56:66:06:73:db:bd:
d6:7a:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:17 2026 by rpki-client