This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/323030313a313334383a3a2f33322d3332203d3e203237373530.roa
File: 323030313a313334383a3a2f33322d3332203d3e203237373530.roa (raw, json)
Hash identifier: y0rU6AEHbwzucRU/Wl3rh3AO32A2i6I3mlVzwKZLr8Q=
Subject key identifier: AF:E8:B3:E9:8F:05:FA:9C:2C:1D:26:AA:18:91:32:13:09:F9:A4:EC
Certificate issuer: /CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
Certificate serial: 562519EFE757205C13EDE640F8823EAEC8FF19D6
Authority key identifier: A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/323030313a313334383a3a2f33322d3332203d3e203237373530.roa
Signing time: Tue 06 Jan 2026 19:30:49 +0000
ROA not before: Tue 06 Jan 2026 19:25:49 +0000
ROA not after: Tue 05 Jan 2027 19:30:49 +0000
asID: 27750
IP address blocks: 2001:1348::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl
rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:25:19:ef:e7:57:20:5c:13:ed:e6:40:f8:82:3e:ae:c8:ff:19:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
Validity
Not Before: Jan 6 19:25:49 2026 GMT
Not After : Jan 5 19:30:49 2027 GMT
Subject: CN=AFE8B3E98F05FA9C2C1D26AA1891321309F9A4EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:f1:ac:61:ea:5f:2f:c1:ec:40:95:e0:ad:
fb:5f:7a:c9:94:57:de:5c:eb:1e:45:2b:73:95:f7:
a1:35:b1:da:55:07:68:57:9c:43:9c:50:56:cd:7d:
28:22:69:48:5f:2d:87:a5:31:31:ff:ae:42:07:c1:
66:53:76:dc:b1:37:da:12:e8:a5:ad:c0:b7:85:56:
7d:93:b3:65:9b:ac:5c:76:93:6b:d2:80:34:03:62:
e1:9b:5b:2e:b7:fe:6b:a1:71:c8:12:db:42:8d:75:
7a:75:c3:28:bb:79:72:08:11:93:49:5b:40:ce:34:
80:0d:f6:b5:6d:2c:4f:df:c1:03:5e:95:d2:2f:4f:
cf:74:5f:b3:9e:6e:cb:a0:65:76:08:e8:97:94:9a:
a6:95:cc:42:e5:ed:91:a1:29:7f:3a:de:e1:59:6f:
25:60:ba:be:bc:ce:6e:13:2a:1d:72:66:5c:d3:62:
aa:56:41:44:58:2f:08:bb:21:1b:d4:34:d7:f6:4d:
39:b8:ed:c6:3d:fb:08:9d:b2:b2:e2:55:fd:a8:cc:
10:ff:77:35:63:95:d5:ee:91:90:27:9d:9d:f8:52:
37:da:5d:6a:18:b9:f3:ae:b4:bc:cc:c0:13:ff:ae:
d7:6d:03:70:76:06:5c:1f:76:13:ed:e0:15:22:2d:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:B3:E9:8F:05:FA:9C:2C:1D:26:AA:18:91:32:13:09:F9:A4:EC
X509v3 Authority Key Identifier:
keyid:A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/323030313a313334383a3a2f33322d3332203d3e203237373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1348::/32
Signature Algorithm: sha256WithRSAEncryption
2e:85:46:d4:fd:98:57:46:17:9f:53:96:36:41:ba:ba:39:51:
76:97:84:cb:ee:3a:7b:66:89:eb:cc:7a:82:c1:a4:b3:0d:e8:
72:a2:f6:c7:13:40:5a:32:df:7d:9f:56:20:53:cb:92:d0:3d:
83:99:da:97:4a:4c:cc:63:66:89:87:97:d4:42:95:e3:1a:c0:
e5:e9:78:0d:99:18:43:5e:a6:49:cf:91:18:48:8f:83:1c:8a:
b0:93:9e:ac:10:14:6b:16:84:91:76:96:55:b1:d1:55:ef:18:
00:0c:04:b4:4d:d9:c5:af:b7:a9:6a:9a:96:ca:55:43:97:b5:
37:33:c2:7c:c3:aa:91:d1:0f:04:37:9c:12:90:91:44:59:b7:
74:80:71:83:95:b6:d9:11:24:1f:3a:9c:29:b5:88:02:dc:fb:
48:15:7d:67:fd:08:e9:7f:24:4b:61:75:a5:05:b1:45:8c:99:
d4:06:4f:39:5c:d3:a0:8d:c6:fb:6b:a3:f3:a5:2e:f2:c9:58:
da:49:90:16:43:8b:a7:dc:50:19:d5:c6:48:11:f8:55:b1:72:
3e:60:a3:54:47:34:1b:4d:53:85:6e:4d:c7:15:95:9c:29:b6:
c1:0f:39:0d:46:d9:ff:cd:54:2d:7e:13:e6:10:0f:2b:cc:56:
7c:cb:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:16 2026 by rpki-client