This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3a2f34382d3438203d3e20323632313931.roa
File: 323830303a6237303a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier: 3mrK3vubEPMuWRh20fWNKvC5JGJS6ytaJG4bABTz43E=
Subject key identifier: E0:DD:34:35:F0:9A:62:B9:1C:0D:EB:E0:A8:81:E9:13:02:09:8E:5E
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 4ECCB2C507D300C94C023C148C7C9601688E8D04
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3a2f34382d3438203d3e20323632313931.roa
Signing time: Tue 06 Jan 2026 20:55:31 +0000
ROA not before: Tue 06 Jan 2026 20:50:31 +0000
ROA not after: Tue 05 Jan 2027 20:55:31 +0000
asID: 262191
IP address blocks: 2800:b70::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 22:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:cc:b2:c5:07:d3:00:c9:4c:02:3c:14:8c:7c:96:01:68:8e:8d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Jan 6 20:50:31 2026 GMT
Not After : Jan 5 20:55:31 2027 GMT
Subject: CN=E0DD3435F09A62B91C0DEBE0A881E91302098E5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:7f:89:86:8f:ec:92:6b:35:76:ea:2d:29:
58:14:12:f0:4a:94:b1:ae:10:e1:58:5c:a2:0d:e4:
8c:88:a6:61:41:0c:3d:e9:38:66:f6:14:a0:0b:f7:
a6:9e:94:5b:55:3c:b1:fc:17:7d:68:46:02:1c:48:
11:2d:97:a9:c8:50:1c:77:cf:1a:c1:15:d8:14:dd:
bc:8b:a5:4e:22:ac:c3:79:1c:a8:26:03:35:9c:51:
d5:ae:29:e3:97:f8:6b:16:f6:a5:8b:04:a9:30:10:
50:8c:16:55:15:47:e8:0c:91:fc:f4:a0:d6:f1:ef:
6b:50:e6:7a:bc:95:6a:6e:ea:2e:b3:c5:6e:5a:55:
64:b3:79:cc:ce:2d:56:93:b1:a7:0a:11:ba:8b:cc:
d6:49:cd:15:4d:46:11:b4:17:1d:7b:9b:1c:8a:82:
26:34:99:a4:5a:85:84:94:fe:3a:43:5e:4e:7a:28:
70:0f:ca:19:2a:6d:f5:1b:63:12:5e:b1:a5:3e:2d:
07:3a:4e:1b:da:6f:bc:71:ad:fa:dc:9a:c4:b6:61:
b0:e1:ed:ca:7b:e5:86:08:d3:c8:ee:34:3c:94:4e:
8c:1b:2c:d5:9b:c1:f2:f2:28:06:e3:59:9b:d5:1b:
ba:a5:e7:5a:a0:9c:ae:c4:4b:e6:2b:3c:fe:7a:20:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DD:34:35:F0:9A:62:B9:1C:0D:EB:E0:A8:81:E9:13:02:09:8E:5E
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3a2f34382d3438203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b70::/48
Signature Algorithm: sha256WithRSAEncryption
0e:5f:3f:b5:9e:56:5a:98:76:20:64:4e:bc:0a:63:1a:59:c7:
0e:54:ed:f3:a7:ba:44:b3:1d:00:63:0c:d3:5d:81:c4:9c:c9:
81:4b:66:d3:e1:24:e7:f9:85:fe:17:ca:f5:a4:34:82:0c:85:
70:89:cc:9f:59:15:cc:24:5a:62:8e:c3:fd:3c:20:63:b2:73:
b0:71:39:e8:ab:a2:ed:f9:95:b6:52:d3:8b:cc:36:91:7d:50:
88:d2:36:60:6a:93:7a:3d:31:ef:0b:59:d9:f8:c4:58:bd:fc:
a0:35:39:16:1f:dd:e7:80:1e:6f:14:94:95:f4:3c:26:b7:07:
04:10:83:22:9a:3a:c1:80:4b:70:e3:e0:14:9a:9b:3a:18:66:
2b:f9:ec:4a:d3:27:fa:7c:eb:14:a4:25:1e:dd:82:64:38:32:
eb:c6:bf:1a:f3:55:04:44:2b:b3:11:b7:27:3b:48:6a:36:f1:
8a:ee:01:09:7f:54:0e:6e:83:65:c8:72:83:fd:cf:66:0d:4e:
ee:2e:79:bf:35:ca:39:ce:2b:22:97:ca:c7:2d:cd:d3:5c:f0:
49:b5:c5:2a:ec:2b:77:5a:ef:77:b2:f9:bf:67:fe:38:6e:fb:
a8:89:81:f2:83:26:ba:2e:ef:b1:aa:3e:41:1b:e8:66:5f:e2:
b2:fe:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 14:41:00 2026 by rpki-client