This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/323830333a3430303a3a2f33322d3332203d3e203532333637.roa
File: 323830333a3430303a3a2f33322d3332203d3e203532333637.roa (raw, json)
Hash identifier: n6IdpXX6Ery1JijwkqC7omcvkSIJcE2Lkn5DxNQiHB8=
Subject key identifier: E4:F7:0B:0E:98:31:4A:3F:4C:20:7A:A7:79:29:D7:F7:14:4F:8A:C8
Certificate issuer: /CN=1FDF2DE08054C55BA3B5B59C734302F868234F58
Certificate serial: 67932BB2B5B2A45F97E2D83DA326E22334FB6A9D
Authority key identifier: 1F:DF:2D:E0:80:54:C5:5B:A3:B5:B5:9C:73:43:02:F8:68:23:4F:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/323830333a3430303a3a2f33322d3332203d3e203532333637.roa
Signing time: Tue 06 Jan 2026 20:51:20 +0000
ROA not before: Tue 06 Jan 2026 20:46:20 +0000
ROA not after: Tue 05 Jan 2027 20:51:20 +0000
asID: 52367
IP address blocks: 2803:400::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.crl
rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:93:2b:b2:b5:b2:a4:5f:97:e2:d8:3d:a3:26:e2:23:34:fb:6a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FDF2DE08054C55BA3B5B59C734302F868234F58
Validity
Not Before: Jan 6 20:46:20 2026 GMT
Not After : Jan 5 20:51:20 2027 GMT
Subject: CN=E4F70B0E98314A3F4C207AA77929D7F7144F8AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:d1:1f:5d:e9:6a:0a:ff:d1:c6:34:60:2c:
44:96:0f:d2:08:c5:c6:c4:78:58:b5:bc:27:73:e5:
15:47:9d:75:fc:4f:3f:9b:92:c0:96:d3:82:74:0d:
62:6a:f4:1e:56:e2:37:59:2f:7a:43:71:ad:4e:fa:
14:cc:80:10:9e:5a:55:30:3d:56:b1:29:16:45:ee:
a0:1d:75:97:e8:f6:f0:1c:6b:37:57:71:db:1b:f7:
5c:59:a7:50:40:b4:50:4e:43:80:d6:76:46:c7:5a:
99:5b:dd:02:4f:bc:ee:43:d4:b0:5b:be:4c:a7:a0:
aa:0c:2e:8f:e4:83:9f:8c:c3:74:60:d8:74:0a:42:
29:15:7e:30:40:7f:a3:26:37:0b:55:da:99:28:56:
25:7b:97:07:22:2a:21:ed:ab:ce:7b:82:c7:03:35:
38:9c:26:f6:45:6c:c7:34:aa:96:af:37:8d:8e:b8:
0d:87:89:ad:ba:f5:b7:7a:28:05:5d:8c:13:1e:a5:
6e:15:b9:32:91:cb:77:8f:36:61:b9:fa:9e:1c:c1:
db:3b:5c:50:18:22:e9:a3:f8:c3:58:0c:95:42:e3:
51:a7:4a:2e:c9:33:dc:82:cd:c8:a2:a5:18:08:41:
61:97:64:ea:b2:6c:68:90:8f:a4:5d:63:af:0e:6c:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:0B:0E:98:31:4A:3F:4C:20:7A:A7:79:29:D7:F7:14:4F:8A:C8
X509v3 Authority Key Identifier:
keyid:1F:DF:2D:E0:80:54:C5:5B:A3:B5:B5:9C:73:43:02:F8:68:23:4F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/323830333a3430303a3a2f33322d3332203d3e203532333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:400::/32
Signature Algorithm: sha256WithRSAEncryption
8d:37:eb:69:bd:75:a2:91:bd:c0:4d:2c:e1:3f:45:c3:c4:21:
c5:9b:89:75:3d:dc:6d:47:b6:f4:bc:fb:b5:ae:34:87:ed:5a:
57:78:75:9e:81:68:8b:08:6e:80:50:53:02:a7:a3:ac:b8:75:
e3:c2:20:0e:6e:77:a2:e3:89:7d:fc:19:72:ec:77:2a:3c:81:
74:72:cc:85:16:42:1f:fa:6f:16:8d:d0:9d:99:56:24:05:aa:
9a:26:0d:78:d4:37:4a:84:c6:a6:3f:9b:27:bd:64:2b:57:c2:
37:3d:e4:a2:6e:36:e8:49:94:78:66:9f:3d:b6:99:48:bd:f6:
e1:5c:cf:70:e5:c7:f1:57:b0:55:c8:19:80:14:2c:e0:b2:1f:
33:a8:94:e3:a0:bb:9a:3a:50:8d:7f:19:08:15:82:0d:5e:78:
d4:30:4a:62:1a:7f:1f:1b:ee:54:59:cf:08:ca:b6:14:41:4c:
c8:f8:96:17:1d:9a:de:ab:60:28:5e:d5:cb:f9:d6:e0:0c:06:
82:9c:0a:fc:8c:bf:07:68:c6:60:81:62:d5:8d:db:66:e7:e8:
05:89:c5:bd:b4:47:3f:88:06:74:89:2f:45:51:11:aa:87:a3:
d8:c1:be:2a:f6:83:e9:10:4a:57:18:46:6c:43:89:f8:b7:d2:
52:e3:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:47 2026 by rpki-client