This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e20333939393730.roa
File: 323830313a31373a373830303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: bFUWOHXWmOnTE5o3KsNf1zqc3joY0Bj+xj24vgLmWmw=
Subject key identifier: F4:37:2A:55:86:65:13:C9:4A:51:04:88:96:E4:7F:26:1B:89:5A:1A
Certificate issuer: /CN=DD284B15EC8E065D133B2F9315470527232784D4
Certificate serial: 5B346ABAEFA2285877C8E22C191DC6E7A0DA286A
Authority key identifier: DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Tue 20 Jan 2026 14:26:18 +0000
ROA not before: Tue 20 Jan 2026 14:21:18 +0000
ROA not after: Tue 19 Jan 2027 14:26:18 +0000
asID: 399970
IP address blocks: 2801:17:7800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl
rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:34:6a:ba:ef:a2:28:58:77:c8:e2:2c:19:1d:c6:e7:a0:da:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD284B15EC8E065D133B2F9315470527232784D4
Validity
Not Before: Jan 20 14:21:18 2026 GMT
Not After : Jan 19 14:26:18 2027 GMT
Subject: CN=F4372A55866513C94A51048896E47F261B895A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:81:ba:78:6f:37:ad:05:bc:2a:db:81:a2:
e7:32:cb:e1:af:39:9d:e0:30:9e:be:3d:51:0c:45:
14:dd:ee:d9:e1:bf:6d:8b:81:2e:d9:5b:c0:6a:e2:
ee:da:8b:5f:9f:94:8a:ee:a4:e4:04:0a:75:89:7e:
97:c4:21:0c:82:28:aa:08:55:d3:c9:df:7a:30:04:
6a:3a:86:76:af:8d:84:f2:e4:52:08:a7:87:72:37:
4e:3e:01:e5:ac:97:7b:8f:26:e8:cd:5a:96:11:59:
4f:31:e6:61:f9:2f:f1:3d:07:87:91:86:74:f8:dd:
c2:a0:d7:6f:cc:f6:34:d6:5f:98:4a:4a:29:ac:0b:
53:42:49:a5:fc:17:d2:ec:6d:1c:1b:f0:5c:2c:4f:
56:9a:9f:c1:02:c9:9e:6e:38:ba:56:f9:ef:d2:5a:
12:0d:f2:82:77:37:4a:1e:34:74:e9:e5:08:c8:35:
1b:2a:32:9d:6e:76:63:61:84:f7:c1:2b:cd:6e:9f:
de:08:af:67:fe:20:01:a7:3d:44:82:3b:f0:ce:85:
e4:b5:52:62:0f:2e:60:ee:25:b7:ea:ea:e4:90:b8:
8a:4e:f7:4b:65:bf:15:ea:2d:a7:3c:ea:90:a8:11:
f8:48:07:f7:e5:a5:7e:cf:2c:e7:5f:fb:43:7b:5a:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:37:2A:55:86:65:13:C9:4A:51:04:88:96:E4:7F:26:1B:89:5A:1A
X509v3 Authority Key Identifier:
keyid:DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:17:7800::/48
Signature Algorithm: sha256WithRSAEncryption
1f:cb:a9:83:d2:c1:92:8a:9c:e1:1b:65:9e:c5:b0:78:7d:35:
51:e5:12:dc:e3:44:64:09:94:01:7c:b3:ff:a6:9a:36:24:f0:
68:29:ed:78:01:93:34:36:9a:c6:7c:1b:6f:d2:69:a4:69:9c:
e4:13:6f:78:10:e1:49:de:7b:5b:8d:e2:51:32:b8:05:55:23:
92:f1:6d:42:d0:11:99:39:cc:b8:65:42:64:6c:e6:6a:4e:9a:
df:6c:31:28:93:62:3d:30:49:ff:74:a1:85:35:c3:09:5a:f7:
4d:77:6c:d8:2c:43:09:a7:e9:38:12:5f:dd:30:31:8b:71:fc:
c3:59:7c:cd:2c:91:4a:36:3e:63:74:42:68:c5:b4:d1:cc:d0:
15:6d:1b:e7:ed:11:20:6c:0b:80:66:fc:2d:4c:7b:b7:f4:e7:
24:e6:56:16:7b:fb:e4:92:12:91:a7:0e:af:5d:c8:26:e2:b5:
87:94:30:da:fb:08:48:27:56:66:89:8d:28:15:db:6c:40:69:
4f:ef:d7:ba:40:fd:c2:b7:61:de:b5:db:27:90:aa:a8:65:0a:
61:5b:34:3d:d3:85:e6:dd:0c:6c:88:56:bc:97:dc:5f:94:99:
43:32:27:53:0b:05:52:0d:34:bd:c4:ca:39:fb:22:a7:32:a3:
2a:e3:af:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:21 2026 by rpki-client