This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e203133393539.roa
File: 323830363a3331313a3a2f33322d3332203d3e203133393539.roa (raw, json)
Hash identifier: PvJXFgv+wcTPomCLvoCJCjaLGZ5HkVVTgnCR3e0cYVQ=
Subject key identifier: 7F:10:0D:D4:9E:04:4D:FC:6E:0C:39:AE:29:83:65:89:CF:7C:B7:0F
Certificate issuer: /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial: 49BBF34C575404F2C7EAE4C7E41C2F5BDD718133
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e203133393539.roa
Signing time: Tue 06 Jan 2026 19:01:45 +0000
ROA not before: Tue 06 Jan 2026 18:56:45 +0000
ROA not after: Tue 05 Jan 2027 19:01:45 +0000
asID: 13959
IP address blocks: 2806:311::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 18:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:bb:f3:4c:57:54:04:f2:c7:ea:e4:c7:e4:1c:2f:5b:dd:71:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Validity
Not Before: Jan 6 18:56:45 2026 GMT
Not After : Jan 5 19:01:45 2027 GMT
Subject: CN=7F100DD49E044DFC6E0C39AE29836589CF7CB70F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:03:09:9a:12:3b:6c:a8:04:3a:a2:73:0d:
87:6c:5c:10:9e:bc:ad:c4:7c:62:ea:61:16:78:be:
cc:34:b5:a3:0b:41:e2:82:b1:1e:64:ed:1d:29:35:
49:76:da:4d:e1:f1:19:c9:c8:0f:fb:ba:d5:1e:4c:
58:a8:d1:63:49:3e:f0:81:2b:5f:af:9f:ed:df:11:
8a:8a:4b:b1:1f:2f:0a:7d:3e:4d:ac:3e:e6:3c:27:
2d:ed:5f:d7:d6:41:3c:b7:aa:ec:0e:05:4e:d5:52:
ac:15:ab:c5:e5:32:2c:a4:82:1f:29:73:66:33:ca:
f7:45:4b:00:64:6f:72:c8:2b:18:0e:b4:3e:aa:8a:
89:72:fb:d2:13:6a:b6:c4:44:86:91:4e:8f:5d:e7:
4a:a5:7d:95:9f:02:38:5b:d3:70:79:f2:f8:6a:a4:
a0:74:fc:f2:e8:c1:c2:2c:60:e4:9b:e3:3b:69:95:
6a:da:72:af:59:c5:ae:2f:cf:04:0d:27:b1:b1:b6:
54:90:72:c5:d2:e6:58:ff:90:31:85:57:dd:cc:d4:
d6:72:b2:eb:1f:62:2b:89:72:8f:1f:a1:72:42:69:
81:54:3d:ad:7c:50:83:d1:ba:09:69:48:ac:7d:d6:
fb:2c:80:64:5e:44:28:59:10:c5:3b:4f:6e:e1:b8:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:10:0D:D4:9E:04:4D:FC:6E:0C:39:AE:29:83:65:89:CF:7C:B7:0F
X509v3 Authority Key Identifier:
keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e203133393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:311::/32
Signature Algorithm: sha256WithRSAEncryption
73:88:72:1b:91:84:eb:14:e1:c7:bb:92:7b:6f:79:48:9a:ec:
73:af:36:fd:bf:f0:95:c9:88:c0:0f:ee:73:22:f7:48:a8:c2:
25:a9:5f:46:f6:0d:f9:79:0f:a4:d4:cf:59:57:97:47:94:cd:
54:6c:c3:84:58:26:5a:7b:1e:3e:3d:10:f1:81:df:f2:df:6d:
a1:41:83:cd:3e:fe:ac:de:b2:7c:30:5b:13:f0:c1:55:51:6e:
bb:4e:ee:7b:3f:d6:03:70:0c:00:b9:1d:80:33:22:43:7e:6c:
20:9b:78:bb:4f:bf:87:d6:7c:0e:1c:2e:3b:b6:0b:a3:70:55:
60:6d:e2:39:80:55:0c:62:88:18:be:94:25:58:34:77:44:46:
d7:73:35:17:6e:f0:1e:24:c7:7f:7a:6f:84:49:36:11:50:14:
cb:01:6b:e2:ec:1c:1c:28:bd:e3:5e:40:49:12:f8:63:12:ab:
f0:90:ae:81:6e:4d:65:91:ae:61:a6:2c:be:02:98:64:92:0f:
c5:b3:de:4f:11:88:19:dc:3f:a8:55:72:11:99:2d:30:5e:ef:
a7:7e:97:50:25:e9:90:48:9d:38:3f:9e:fa:50:37:56:01:14:
78:db:a6:c4:bb:24:5b:07:6f:70:ab:bd:f5:24:d1:88:85:7a:
e9:2d:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:08 2026 by rpki-client