This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/323830333a386238303a3a2f33322d3438203d3e20323732393932.roa
File: 323830333a386238303a3a2f33322d3438203d3e20323732393932.roa (raw, json)
Hash identifier: mj28KoW6mbg0hGb+ob+Dzap6VHBU3w0KDorTGu/aPJY=
Subject key identifier: C6:64:DB:72:4E:7D:BF:5F:17:CF:06:31:1D:D8:B9:A0:18:10:DB:02
Certificate issuer: /CN=8995F63E387603C84272761C6F4D5C08A0EC0161
Certificate serial: 5135858D5863FDF96085BEE7914054C5244FD48D
Authority key identifier: 89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/323830333a386238303a3a2f33322d3438203d3e20323732393932.roa
Signing time: Tue 06 Jan 2026 19:42:38 +0000
ROA not before: Tue 06 Jan 2026 19:37:38 +0000
ROA not after: Tue 05 Jan 2027 19:42:38 +0000
asID: 272992
IP address blocks: 2803:8b80::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl
rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 04:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:35:85:8d:58:63:fd:f9:60:85:be:e7:91:40:54:c5:24:4f:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8995F63E387603C84272761C6F4D5C08A0EC0161
Validity
Not Before: Jan 6 19:37:38 2026 GMT
Not After : Jan 5 19:42:38 2027 GMT
Subject: CN=C664DB724E7DBF5F17CF06311DD8B9A01810DB02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:bf:e1:cf:60:94:ed:a0:b0:98:e7:89:1d:
29:ff:58:e2:10:ce:be:19:3a:b5:9a:2f:6e:55:0f:
e1:eb:ad:79:f2:cd:bc:ab:b6:23:6f:62:e1:a9:bc:
51:bf:a3:1a:2e:c7:b2:02:08:1f:9f:09:99:43:dc:
af:99:c9:e7:8d:e0:d5:78:7a:14:4c:aa:e1:36:e8:
b6:2b:8d:ff:4f:84:bc:4e:8c:be:9c:d4:64:61:88:
6b:18:43:ed:3f:34:e4:5b:59:73:7f:72:2a:4e:d1:
f2:3d:db:6f:2d:54:3e:09:0f:04:cb:91:d1:4e:5e:
23:0f:ba:68:6f:33:9d:b0:71:a7:44:aa:e7:aa:7c:
c0:68:54:63:7e:75:23:b9:6c:90:b7:f1:e4:5c:b4:
8a:76:e2:29:8c:fc:cd:b2:c9:cb:ef:0c:82:b4:58:
b1:59:63:9a:89:9c:71:9f:6c:8e:75:25:a5:08:ff:
78:57:f6:2e:83:7b:30:a8:38:22:1c:2b:60:e6:a7:
68:bc:62:de:cd:34:aa:4b:dc:ef:c9:3a:08:88:de:
95:eb:3d:04:7d:f6:d9:83:8d:b0:59:38:cf:a1:c6:
c6:11:7a:92:6a:77:d9:76:09:16:e9:9d:90:58:81:
d1:86:39:bf:a5:c6:d3:81:10:26:dc:a0:f5:62:ac:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:64:DB:72:4E:7D:BF:5F:17:CF:06:31:1D:D8:B9:A0:18:10:DB:02
X509v3 Authority Key Identifier:
keyid:89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/323830333a386238303a3a2f33322d3438203d3e20323732393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8b80::/32
Signature Algorithm: sha256WithRSAEncryption
70:f8:b5:69:6c:b5:7f:ec:98:aa:e7:e8:e0:26:f8:2b:81:4c:
21:9c:e4:05:4a:c3:20:e9:f7:5a:4a:19:30:31:a2:7d:f2:fb:
25:77:d2:b7:99:e6:7b:31:78:21:85:ef:f0:69:83:0c:df:f7:
26:af:94:6f:2c:9c:aa:b6:88:75:fb:af:d7:44:d9:3c:5f:97:
b9:e3:3c:c0:81:bb:b0:af:e2:bd:fb:4d:ba:c9:ac:5f:32:0d:
2b:8d:8a:97:d6:66:08:bf:84:e3:65:ba:75:27:ac:77:30:27:
97:0e:c7:e7:e9:ed:30:57:f1:2f:17:ed:cc:fe:e6:37:11:54:
b3:6d:a3:be:1e:a3:b0:cf:80:46:c0:64:c7:da:86:22:11:f5:
ae:6d:e2:65:95:56:25:b6:69:fb:a7:19:01:60:a3:6e:ac:1f:
83:44:c9:41:e9:70:d0:c4:00:36:86:c8:62:cd:ee:9b:6d:5b:
72:9f:73:2d:02:d8:38:36:67:83:05:e7:e3:18:cc:aa:2d:89:
68:fa:2e:14:c5:b8:1c:d1:c2:1b:a3:2e:6a:05:2a:c0:72:57:
4e:90:62:ef:58:6f:b7:43:7e:56:60:55:2a:fc:28:71:81:a4:
c8:ba:6e:bb:5e:1c:49:2b:f9:e5:f6:a7:a7:c2:f0:a9:d2:62:
ae:f6:aa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:05 2026 by rpki-client