This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/323830333a363631303a3a2f33322d3438203d3e20323731393434.roa
File: 323830333a363631303a3a2f33322d3438203d3e20323731393434.roa (raw, json)
Hash identifier: L5ISfC72Y4TdnyQFIsN60uwexvUDAalpbLtt10zPMRs=
Subject key identifier: 24:F8:7C:F9:35:4F:D3:B2:61:24:D6:B6:B5:17:F0:C6:49:40:1D:5B
Certificate issuer: /CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
Certificate serial: 36DE40036E2AA9EAC621B0B709E6621DA90F10FC
Authority key identifier: E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/323830333a363631303a3a2f33322d3438203d3e20323731393434.roa
Signing time: Tue 06 Jan 2026 19:33:33 +0000
ROA not before: Tue 06 Jan 2026 19:28:33 +0000
ROA not after: Tue 05 Jan 2027 19:33:33 +0000
asID: 271944
IP address blocks: 2803:6610::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl
rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 14:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:de:40:03:6e:2a:a9:ea:c6:21:b0:b7:09:e6:62:1d:a9:0f:10:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
Validity
Not Before: Jan 6 19:28:33 2026 GMT
Not After : Jan 5 19:33:33 2027 GMT
Subject: CN=24F87CF9354FD3B26124D6B6B517F0C649401D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:70:e8:7a:7e:16:38:0c:5a:58:e7:28:de:
e2:57:91:d2:5d:c3:72:a4:de:51:34:e9:c3:52:13:
5e:51:7f:9a:c4:30:19:6a:8a:34:d9:53:3d:c0:80:
6b:79:84:2a:86:37:27:3d:49:5d:f4:ad:a3:ac:25:
11:19:4b:e9:bf:7f:fd:d2:a0:51:58:3c:d3:7a:9b:
ed:47:9d:0a:2e:d0:48:69:54:02:11:a0:9a:b8:d4:
d9:88:be:75:ee:c7:56:e9:2c:d5:4c:38:af:92:e0:
59:0f:8f:be:78:3e:69:92:64:32:48:29:4a:f3:30:
e8:21:b1:a7:c9:95:b7:27:e5:2b:4d:3b:0a:b2:f8:
93:10:ca:4b:3d:05:91:a2:38:ba:50:98:c7:9c:db:
50:a6:df:b2:ae:65:3d:9f:74:e4:cc:e5:fe:b0:b0:
97:7b:df:ba:b2:b0:fc:bd:08:1e:62:2d:ea:61:46:
43:8b:58:af:f9:c8:0a:78:69:42:80:14:fa:e8:5e:
3a:4c:d9:0b:48:80:00:39:ee:cd:7d:14:a6:54:3f:
c8:ba:de:b8:6c:73:ba:c5:b4:ca:72:28:27:a1:0d:
7b:90:5d:71:43:d7:18:61:66:d8:dd:82:ca:06:e1:
4b:52:1d:d9:ff:4b:4b:e5:e0:63:1f:6a:42:3d:5d:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F8:7C:F9:35:4F:D3:B2:61:24:D6:B6:B5:17:F0:C6:49:40:1D:5B
X509v3 Authority Key Identifier:
keyid:E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/323830333a363631303a3a2f33322d3438203d3e20323731393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6610::/32
Signature Algorithm: sha256WithRSAEncryption
c5:80:11:72:f6:80:c1:56:a5:ef:73:0a:59:7d:92:d6:36:27:
49:fa:6d:92:16:e3:89:e7:0a:86:5c:a8:45:7f:e1:b5:f6:65:
c2:c5:2d:68:70:dc:06:32:f1:e3:54:5f:6c:08:e0:be:a0:01:
8d:ba:6f:55:7b:9e:10:74:ac:27:bc:83:ed:67:23:e9:f1:dc:
da:1b:e5:53:56:12:4e:4b:bb:7d:0b:d4:e4:a8:f4:cb:47:fc:
76:62:b2:e5:79:55:61:79:b8:09:d5:0b:dd:67:63:51:09:49:
0d:f1:b4:6e:2f:7e:2f:7a:3e:8c:e9:50:4d:f8:e0:ee:9a:53:
75:75:52:dc:f1:66:bc:57:06:ed:4d:eb:4f:c3:68:5b:f4:35:
83:e9:87:48:0d:31:63:4d:23:74:5b:39:72:13:8f:39:07:fb:
cb:5e:1b:77:08:56:cc:08:ee:67:2c:34:37:63:48:c3:cd:70:
fe:71:51:1a:2f:3c:1c:18:cd:73:73:5b:dc:92:d7:5b:aa:67:
2d:6f:4f:26:dc:e6:dd:1c:f4:e3:37:d7:1d:21:c9:ae:44:a9:
64:ed:fd:0e:c7:90:74:43:c0:42:56:3d:d8:d9:72:a4:9f:f0:
dc:dc:1d:8a:bc:85:d4:92:06:8c:a0:41:f1:44:df:3d:4d:af:
dd:6e:b1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:43 2026 by rpki-client