This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa
File: 323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa (raw, json)
Hash identifier: 6Emknh0Dmw2d0oNnm/ipQ9p6nDiuC9h62Xsp1fSUZk8=
Subject key identifier: 90:52:54:27:96:E0:89:D7:34:94:FB:83:55:73:24:FD:F5:DC:9C:48
Certificate issuer: /CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
Certificate serial: 594CDFCEEB7DEAF5C71DA09B44F9C1826BDDA0E7
Authority key identifier: 4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa
Signing time: Tue 06 Jan 2026 18:57:56 +0000
ROA not before: Tue 06 Jan 2026 18:52:56 +0000
ROA not after: Tue 05 Jan 2027 18:57:56 +0000
asID: 28392
IP address blocks: 2801:c4:b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl
rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4c:df:ce:eb:7d:ea:f5:c7:1d:a0:9b:44:f9:c1:82:6b:dd:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
Validity
Not Before: Jan 6 18:52:56 2026 GMT
Not After : Jan 5 18:57:56 2027 GMT
Subject: CN=9052542796E089D73494FB83557324FDF5DC9C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:97:a5:91:cb:ec:1c:27:46:b2:3d:31:00:
9d:1a:b7:b0:58:af:9e:26:0a:85:46:f2:04:b6:56:
d3:ac:c1:02:20:6e:fd:75:e7:72:5b:36:9a:da:aa:
16:ac:2b:2d:d5:9e:52:8d:56:bc:8c:15:03:56:2b:
40:8f:14:36:61:3e:db:b5:2e:50:f0:37:fd:20:e6:
39:90:2c:1d:a0:b8:c8:27:cc:06:35:68:5e:60:06:
06:94:5c:2c:d6:6a:df:45:e1:0f:e4:13:bc:71:81:
b4:94:cf:d8:c7:5a:60:92:f6:32:e2:f5:30:9f:d2:
30:fb:ef:6c:a6:55:dc:d2:45:39:d9:e8:cf:8d:3d:
b1:1f:2c:1c:fa:4d:37:0e:da:4d:81:89:c9:95:c4:
e6:e2:d1:ba:57:d3:f9:9e:89:b0:e1:39:fd:30:56:
b4:4f:c2:b3:cb:2e:16:05:fe:87:4e:5b:3c:c6:df:
d4:1f:bb:ff:9c:24:ef:69:7b:33:1e:62:00:a2:6d:
bc:42:89:70:7b:2b:2c:a4:17:52:d5:db:26:42:69:
96:e6:ff:03:2e:79:ea:fa:65:be:34:b6:56:01:96:
f3:d7:e3:6d:32:f8:38:5b:6d:c4:0c:fd:c5:32:ff:
68:32:d2:dc:86:0a:c8:8e:0a:5f:3e:cb:74:46:9d:
8f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:52:54:27:96:E0:89:D7:34:94:FB:83:55:73:24:FD:F5:DC:9C:48
X509v3 Authority Key Identifier:
keyid:4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:c4:b4::/48
Signature Algorithm: sha256WithRSAEncryption
56:25:ab:74:4c:f4:b6:7e:a1:46:13:18:5b:91:d9:34:20:ac:
bd:f3:e4:8e:f2:9c:1f:e0:ec:a5:aa:8a:91:29:b8:3e:19:6a:
a7:fd:8a:27:1d:ed:a8:6d:4b:08:92:30:bd:64:cc:89:42:da:
19:64:9e:a1:8e:ca:3e:92:bc:3d:36:cc:96:5a:21:68:05:4d:
c3:b5:7c:2a:13:db:bb:5f:34:ef:fd:72:09:b8:7a:30:0d:7e:
b6:75:2a:62:11:8b:88:16:ea:a7:16:4a:01:b0:56:b0:9e:40:
4f:5f:92:9a:61:cc:db:10:9e:a7:fe:78:3d:01:39:d8:45:b9:
02:ea:b9:2c:29:87:29:0a:ed:d8:a9:61:b4:31:0c:7e:7e:11:
2c:73:4f:b2:b7:ca:60:15:d8:7c:ce:2f:d9:3e:6e:a8:4d:99:
c7:81:b4:50:73:ed:f5:f9:52:24:02:bc:90:3d:39:9e:a0:b4:
6a:69:26:ac:16:ed:d5:aa:6d:21:ba:93:70:0a:6f:b9:45:c4:
b4:ab:57:74:dd:91:e6:49:cc:ec:b4:7b:47:de:c1:22:a1:97:
b8:12:68:25:0f:3b:8a:2e:30:45:a4:3f:97:f1:07:b6:69:0f:
ee:38:a7:a9:c0:bd:3b:2d:4d:58:39:74:9b:0b:bb:21:de:8f:
99:c9:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:35:48 2026 by rpki-client