This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a3a2f33322d3438203d3e203237383431.roa
File: 323830303a36383a3a2f33322d3438203d3e203237383431.roa (raw, json)
Hash identifier: YXd7zf7nI8hrG2OJNylkIPDieLrA0Q4fuW8unMZCuwg=
Subject key identifier: 3E:30:18:29:09:0B:4C:4E:1C:ED:0C:84:24:30:9F:A9:81:65:29:7C
Certificate issuer: /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial: 4860C445F8899EA5477EB3AC956DFA7491252140
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a3a2f33322d3438203d3e203237383431.roa
Signing time: Tue 06 Jan 2026 19:12:40 +0000
ROA not before: Tue 06 Jan 2026 19:07:40 +0000
ROA not after: Tue 05 Jan 2027 19:12:40 +0000
asID: 27841
IP address blocks: 2800:68::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 16:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:60:c4:45:f8:89:9e:a5:47:7e:b3:ac:95:6d:fa:74:91:25:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
Validity
Not Before: Jan 6 19:07:40 2026 GMT
Not After : Jan 5 19:12:40 2027 GMT
Subject: CN=3E301829090B4C4E1CED0C8424309FA98165297C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:e6:b3:1a:aa:a2:df:89:4e:ac:18:5f:63:
69:42:03:32:70:a2:92:77:b1:98:2a:6b:07:c9:28:
6c:2f:b4:96:fe:b3:60:a8:fc:51:e3:a7:f3:10:6e:
3c:1f:29:6a:0a:7a:02:cd:44:8f:7b:fd:28:9a:ed:
14:58:d6:54:db:6d:59:bf:03:c1:b6:15:17:d5:92:
93:69:46:4c:b6:e0:f0:8c:05:0f:e5:99:4f:9c:6f:
e3:fc:32:e9:ea:e3:04:c5:fc:1c:1c:f5:83:a1:0c:
e8:16:1f:a5:04:34:a9:39:0b:60:ee:a0:9c:2c:fa:
c1:ea:75:f4:28:b8:ef:dd:1b:31:6e:ae:fc:0f:40:
e1:85:41:09:fe:84:f5:1f:ad:65:29:e7:ca:8e:c5:
7a:c8:f6:83:5f:4f:83:d5:1e:92:bb:20:04:9a:e1:
8c:66:e4:2e:52:39:76:bd:3e:ad:b0:2b:82:26:fe:
01:70:f0:21:8b:19:0e:52:77:a3:84:7d:73:a9:ba:
d4:f2:3d:9b:d6:30:2a:c3:c1:05:eb:32:75:ca:aa:
39:53:57:67:28:f9:1b:21:f2:10:21:e0:41:fb:7a:
89:c6:35:e4:da:97:c2:b7:dd:0c:e8:e9:92:77:7b:
6f:35:31:6a:fe:c4:dd:8c:c7:22:ed:55:b7:ff:9f:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:18:29:09:0B:4C:4E:1C:ED:0C:84:24:30:9F:A9:81:65:29:7C
X509v3 Authority Key Identifier:
keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a3a2f33322d3438203d3e203237383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:68::/32
Signature Algorithm: sha256WithRSAEncryption
bb:3d:fb:4f:36:a6:65:6d:31:db:a6:0a:2e:02:df:22:91:ce:
b0:98:13:b4:d1:72:9f:6e:4b:e8:8c:24:29:e5:bd:e9:1b:d7:
cc:ee:82:75:f2:bc:6b:38:12:1b:2b:ba:e3:1c:a4:76:93:db:
8e:99:dd:1d:47:ee:f6:dd:48:e9:10:71:73:ad:12:9b:6f:56:
84:0c:2c:6c:15:15:c9:3c:03:86:d4:64:cb:83:eb:78:6b:51:
ae:d2:d2:9d:7b:dd:d3:98:01:6f:55:19:2f:07:29:25:3f:68:
9e:b0:e6:f7:88:39:80:2d:6d:db:de:0e:d3:04:7f:28:c2:26:
6f:80:09:8d:99:0a:d5:d8:76:f9:b5:f5:5b:65:eb:8f:9c:94:
72:85:a4:cd:d4:4a:b7:8c:63:6f:4f:f8:69:31:e2:1a:01:75:
1e:dd:e2:ad:43:02:9f:8a:2e:1c:01:67:73:28:11:0c:f2:9d:
1e:d3:8f:1c:7f:7d:3b:be:35:f4:97:2d:8b:e8:98:fa:95:30:
9c:67:22:eb:08:e0:60:34:13:13:46:ea:2a:72:fe:79:40:c4:
70:d2:8d:b4:d7:bf:a2:d9:fb:31:68:3b:2c:85:71:7f:bf:8f:
74:b3:3e:71:c5:a6:68:cf:ff:91:79:b3:ee:d8:92:65:a6:87:
5e:32:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:07:56 2026 by rpki-client