This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/323830303a613031303a3a2f33322d313238203d3e203139313932.roa
File: 323830303a613031303a3a2f33322d313238203d3e203139313932.roa (raw, json)
Hash identifier: T9sc2NhDXYMb9AV3TccAnjiZpLMaInAfxlZB6+KfeGs=
Subject key identifier: 09:3B:86:99:C2:9C:5E:99:81:B8:79:CD:4A:FD:46:C3:8B:1F:9B:0D
Certificate issuer: /CN=898729973C2338366642A6EE0E3DA10797106F7B
Certificate serial: 75ED7AB76810CD71419BC12C0913A1FF5D2CA40B
Authority key identifier: 89:87:29:97:3C:23:38:36:66:42:A6:EE:0E:3D:A1:07:97:10:6F:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/323830303a613031303a3a2f33322d313238203d3e203139313932.roa
Signing time: Tue 06 Jan 2026 19:00:34 +0000
ROA not before: Tue 06 Jan 2026 18:55:34 +0000
ROA not after: Tue 05 Jan 2027 19:00:34 +0000
asID: 19192
IP address blocks: 2800:a010::/32 maxlen: 128
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/898729973C2338366642A6EE0E3DA10797106F7B.crl
rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/898729973C2338366642A6EE0E3DA10797106F7B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 09:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ed:7a:b7:68:10:cd:71:41:9b:c1:2c:09:13:a1:ff:5d:2c:a4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898729973C2338366642A6EE0E3DA10797106F7B
Validity
Not Before: Jan 6 18:55:34 2026 GMT
Not After : Jan 5 19:00:34 2027 GMT
Subject: CN=093B8699C29C5E9981B879CD4AFD46C38B1F9B0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:09:d3:37:bf:84:28:7b:d3:be:3d:55:01:
e4:63:fb:25:c7:ec:88:df:53:ec:8d:77:71:5c:ef:
38:29:3d:6d:0f:89:88:c0:4a:52:c7:78:58:a2:ac:
07:5f:5b:9c:70:dc:d7:19:3b:d0:81:93:67:96:0d:
80:34:98:c6:9b:0f:8a:41:37:a5:0f:ab:18:cc:33:
86:4c:4d:a5:26:a2:07:2e:44:ba:35:b1:ed:7f:97:
3f:54:eb:b2:e4:08:ca:de:73:a2:72:87:b2:50:fc:
eb:ab:17:5e:c5:4d:ee:08:1f:c7:86:35:33:58:77:
4c:bd:2c:c0:11:a5:65:e7:71:3e:4d:9e:85:36:69:
43:40:b9:ce:cc:9b:30:32:8a:7b:57:ef:61:79:c2:
1e:79:30:38:90:75:53:c5:22:da:b0:bf:04:10:ba:
b6:b0:60:21:e1:99:0f:22:8c:6f:a2:9c:e5:d2:3a:
0c:7d:92:2f:13:de:0a:39:fd:c0:02:b7:98:82:35:
76:67:a9:01:51:4d:70:b8:48:ad:56:02:e3:2f:4e:
be:b6:2d:e9:f8:3a:5e:b6:01:54:9f:78:f8:99:c0:
42:5b:80:cf:89:06:43:b6:4e:b4:60:3f:46:4d:46:
68:ad:bb:28:52:61:4b:14:d2:9a:41:8a:06:b8:68:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3B:86:99:C2:9C:5E:99:81:B8:79:CD:4A:FD:46:C3:8B:1F:9B:0D
X509v3 Authority Key Identifier:
keyid:89:87:29:97:3C:23:38:36:66:42:A6:EE:0E:3D:A1:07:97:10:6F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/898729973C2338366642A6EE0E3DA10797106F7B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/323830303a613031303a3a2f33322d313238203d3e203139313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:a010::/32
Signature Algorithm: sha256WithRSAEncryption
31:c9:fd:77:2e:b8:23:c1:18:fc:16:0f:ee:eb:dc:89:07:71:
87:ac:16:a4:db:4a:c0:98:07:8e:42:ef:1e:79:7d:f0:87:ab:
13:e0:ea:fb:c4:18:47:a6:6e:53:76:0f:03:4d:be:43:38:17:
11:80:96:fd:38:30:0d:90:11:c7:8a:37:e1:14:35:b8:d8:48:
d0:9d:64:98:84:2d:c7:ff:1f:ab:4e:58:62:1b:0c:29:9c:ed:
18:41:83:49:f7:7d:e5:c6:89:02:ed:ce:26:9b:f1:db:fb:61:
a9:4e:59:b8:fb:9a:1b:3f:af:8e:cb:9f:3b:b8:0c:3b:c3:47:
52:4c:8e:37:e3:30:da:37:c5:9d:df:4a:ba:19:e1:79:46:97:
1f:af:1b:91:0d:47:3c:9b:6a:38:ee:3a:52:fd:0f:3f:80:b6:
58:6f:a5:64:b7:9f:51:39:f2:3d:5d:02:47:3b:04:15:05:28:
99:b2:be:23:58:ba:f3:b4:d0:e2:90:55:cd:cb:af:2b:6d:6f:
35:e9:8f:09:32:6d:0e:38:2a:69:46:3f:1b:d0:a8:b5:47:b1:
a6:42:28:71:d6:4d:32:e1:59:a0:eb:49:82:d4:d4:38:09:c9:
68:e4:8d:ef:d9:60:08:82:5c:ef:e6:c8:65:93:c8:11:0d:20:
6f:58:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:02 2026 by rpki-client