This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa
File: 323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa (raw, json)
Hash identifier: NfKzf8Yd2QHus8pBDeQhWYxDc0W58ojlSz3PhMtq2/Y=
Subject key identifier: 3B:18:FB:CE:44:18:54:15:14:FB:0C:36:32:CA:1A:03:A5:2E:61:8F
Certificate issuer: /CN=5EBCF17E06528C616B6957551981653EE0748D3C
Certificate serial: 361E51DE277CB6CB40AF2BC82EA34325E277208D
Authority key identifier: 5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa
Signing time: Tue 06 Jan 2026 19:29:03 +0000
ROA not before: Tue 06 Jan 2026 19:24:03 +0000
ROA not after: Tue 05 Jan 2027 19:29:03 +0000
asID: 267854
IP address blocks: 2801:13:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.crl
rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:1e:51:de:27:7c:b6:cb:40:af:2b:c8:2e:a3:43:25:e2:77:20:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EBCF17E06528C616B6957551981653EE0748D3C
Validity
Not Before: Jan 6 19:24:03 2026 GMT
Not After : Jan 5 19:29:03 2027 GMT
Subject: CN=3B18FBCE4418541514FB0C3632CA1A03A52E618F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:44:e1:66:64:1b:4f:91:24:fb:08:30:d1:
4b:d7:f2:a9:5d:44:c1:b9:85:82:81:aa:76:bd:87:
96:9f:f9:5d:2a:27:c5:54:8b:e8:92:ac:6d:e6:09:
12:db:1f:43:3f:19:73:91:f4:f0:ac:e7:7f:01:e6:
21:ef:b0:a0:28:65:6c:a4:f7:4f:99:6e:13:b2:40:
e5:91:7e:dd:7d:4b:b4:61:78:a7:c7:aa:e6:e1:40:
9b:7c:b2:4b:b6:67:be:fa:d3:d0:aa:c2:5c:45:49:
9f:4b:42:02:43:2c:c7:f7:81:48:e1:6c:64:27:bd:
85:85:df:8f:60:79:d7:21:7e:77:76:71:0f:3c:e9:
bb:8c:98:dc:7a:b5:0d:d1:9f:6f:01:f7:96:6d:aa:
f7:c1:41:87:af:a4:9f:43:72:de:0e:1a:b8:08:90:
57:87:e0:6c:54:ef:11:70:22:15:85:06:d2:31:04:
e6:8f:51:0c:b5:03:68:86:5d:1f:68:b6:c6:b0:c1:
14:e2:cb:3c:71:23:37:3c:dd:03:c1:2e:9e:82:ac:
f5:51:82:36:8d:fd:05:d1:77:bc:84:1d:9d:48:91:
61:2e:77:04:7f:1b:c3:5b:3f:db:e9:c8:9e:31:bf:
1c:4b:b7:42:78:73:8b:b9:60:18:52:19:ae:74:b6:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:18:FB:CE:44:18:54:15:14:FB:0C:36:32:CA:1A:03:A5:2E:61:8F
X509v3 Authority Key Identifier:
keyid:5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:13:800::/48
Signature Algorithm: sha256WithRSAEncryption
43:a8:44:b4:82:60:79:9f:c4:f4:b7:11:65:ce:b8:aa:31:61:
95:fc:7f:35:e0:23:81:5e:20:89:7c:b1:f0:f7:c3:d0:da:cc:
23:7f:65:a9:3b:ce:fc:c4:09:7f:d7:f1:33:b1:37:ec:6c:27:
13:99:01:e7:85:53:06:7c:a3:76:c7:2b:4a:c8:b8:32:26:e0:
57:27:b7:b6:6e:e4:cd:82:da:4a:d4:ca:b0:3f:61:9c:f5:78:
a2:dd:e9:3d:d1:bc:f3:e3:47:5d:b1:d7:7f:27:fe:f0:ab:71:
01:09:d0:de:59:45:40:c1:34:81:5a:23:48:b2:e2:64:be:45:
e0:ff:98:36:f8:ef:c6:4c:07:1c:45:60:91:11:94:19:90:6b:
19:c6:a0:d7:9c:3f:e4:89:da:4c:3c:9c:de:13:8d:7f:06:a6:
30:a5:d9:2a:cb:90:9b:f0:4a:34:20:61:2c:16:79:62:e6:17:
28:8c:bc:a0:70:bc:f4:4a:8e:33:be:bc:aa:d2:25:f2:19:56:
4d:9c:74:aa:45:4d:dd:17:19:91:54:13:c8:b1:74:86:c4:c1:
27:51:af:47:ae:3b:16:c7:af:c4:68:d0:ef:5c:38:39:41:08:
7d:87:72:5d:2b:b7:94:f4:8a:05:2a:58:05:1a:a0:14:87:c3:
47:09:af:87
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUNh5R3id8tstAryvILqNDJeJ3II0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVCQ0YxN0UwNjUyOEM2MTZCNjk1NzU1MTk4MTY1M0VF
MDc0OEQzQzAeFw0yNjAxMDYxOTI0MDNaFw0yNzAxMDUxOTI5MDNaMDMxMTAvBgNV
BAMTKDNCMThGQkNFNDQxODU0MTUxNEZCMEMzNjMyQ0ExQTAzQTUyRTYxOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgUThZmQbT5Ek+wgw0UvX8qld
RMG5hYKBqna9h5af+V0qJ8VUi+iSrG3mCRLbH0M/GXOR9PCs538B5iHvsKAoZWyk
90+ZbhOyQOWRft19S7RheKfHqubhQJt8sku2Z77609CqwlxFSZ9LQgJDLMf3gUjh
bGQnvYWF349gedchfnd2cQ886buMmNx6tQ3Rn28B95ZtqvfBQYevpJ9Dct4OGrgI
kFeH4GxU7xFwIhWFBtIxBOaPUQy1A2iGXR9otsawwRTiyzxxIzc83QPBLp6CrPVR
gjaN/QXRd7yEHZ1IkWEudwR/G8NbP9vpyJ4xvxxLt0J4c4u5YBhSGa50tobjAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUOxj7zkQYVBUU+ww2MsoaA6UuYY8wHwYDVR0j
BBgwFoAUXrzxfgZSjGFraVdVGYFlPuB0jTwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQ0VFMEUzN0ZEQTE4N0IwRkMwRkE3MTI5MjFCOENFQTkx
RjJDNTVCQkNBMDc3N0FDRTUxREU2MzA5Q0M1Q0I3LzAvNUVCQ0YxN0UwNjUyOEM2
MTZCNjk1NzU1MTk4MTY1M0VFMDc0OEQzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RUJDRjE3RTA2NTI4QzYxNkI2
OTU3NTUxOTgxNjUzRUUwNzQ4RDNDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUNFRTBFMzdGREExODdCMEZDMEZBNzEyOTIxQjhDRUE5MUYyQzU1QkJD
QTA3NzdBQ0U1MURFNjMwOUNDNUNCNy8wLzMyMzgzMDMxM2EzMTMzM2EzODMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzczODM1MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQATCAAwDQYJKoZIhvcNAQELBQADggEBAEOoRLSCYHmfxPS3EWXOuKoxYZX8fzXg
I4FeIIl8sfD3w9DazCN/Zak7zvzECX/X8TOxN+xsJxOZAeeFUwZ8o3bHK0rIuDIm
4Fcnt7Zu5M2C2krUyrA/YZz1eKLd6T3RvPPjR12x138n/vCrcQEJ0N5ZRUDBNIFa
I0iy4mS+ReD/mDb478ZMBxxFYJERlBmQaxnGoNecP+SJ2kw8nN4TjX8GpjCl2SrL
kJvwSjQgYSwWeWLmFyiMvKBwvPRKjjO+vKrSJfIZVk2cdKpFTd0XGZFUE8ixdIbE
wSdRr0euOxbHr8Ro0O9cODlBCH2Hcl0rt5T0igUqWAUaoBSHw0cJr4c=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:37 2026 by rpki-client