This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/323830333a646631303a3a2f33322d3332203d3e20323731393232.roa
File: 323830333a646631303a3a2f33322d3332203d3e20323731393232.roa (raw, json)
Hash identifier: RzXvJ06t2gVrHmb30udNowINSw1x/lwrWR0lIoo9jsw=
Subject key identifier: 7D:C0:9A:87:8F:41:6E:BA:33:2E:D8:62:E1:8F:EB:EC:99:07:C2:31
Certificate issuer: /CN=5E4C24352C2092D84F24710267624723A082F5C7
Certificate serial: 40BC687B4BD2B2830252F7AFAC518F652FEF4B48
Authority key identifier: 5E:4C:24:35:2C:20:92:D8:4F:24:71:02:67:62:47:23:A0:82:F5:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E4C24352C2092D84F24710267624723A082F5C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/323830333a646631303a3a2f33322d3332203d3e20323731393232.roa
Signing time: Tue 06 Jan 2026 18:59:42 +0000
ROA not before: Tue 06 Jan 2026 18:54:42 +0000
ROA not after: Tue 05 Jan 2027 18:59:42 +0000
asID: 271922
IP address blocks: 2803:df10::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/5E4C24352C2092D84F24710267624723A082F5C7.crl
rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/5E4C24352C2092D84F24710267624723A082F5C7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E4C24352C2092D84F24710267624723A082F5C7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 22:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:bc:68:7b:4b:d2:b2:83:02:52:f7:af:ac:51:8f:65:2f:ef:4b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E4C24352C2092D84F24710267624723A082F5C7
Validity
Not Before: Jan 6 18:54:42 2026 GMT
Not After : Jan 5 18:59:42 2027 GMT
Subject: CN=7DC09A878F416EBA332ED862E18FEBEC9907C231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:f2:90:04:ed:6f:31:15:07:c8:eb:b9:cf:
62:16:6c:38:90:b4:f6:98:d2:2e:53:73:96:ce:82:
67:8c:42:4b:dc:e7:da:13:3b:6f:ad:1d:55:42:05:
67:c3:fa:d3:30:96:6c:9b:26:95:c3:6b:07:9e:d9:
93:b1:ed:c3:9a:a4:e2:65:ec:af:53:7c:c5:5d:3c:
7d:19:99:ba:7f:e1:d6:ee:c4:25:30:f0:93:4f:cb:
70:77:e3:e5:23:e6:d4:30:fc:ed:97:9b:dd:72:0e:
81:c3:f1:91:d4:f7:db:83:1d:26:b1:49:f5:15:c0:
10:cc:7e:57:67:8d:24:13:9e:f7:2a:16:06:7e:5b:
75:cb:c9:b7:16:03:54:fd:52:e0:ea:7e:5a:07:7c:
64:dd:eb:8d:fb:3a:6e:24:97:a7:11:63:4a:bb:73:
53:dd:67:ea:b6:d6:f2:87:f9:b6:a7:84:87:30:27:
7d:7c:57:4a:dd:b7:c4:42:17:9b:07:76:7c:c5:a4:
6e:44:20:7e:8c:56:0b:c2:54:9a:64:6f:89:59:c5:
28:a8:29:88:68:96:51:7e:db:b1:89:6d:ab:8f:75:
ec:ff:4d:d8:c0:b8:2e:d7:6a:5e:98:44:8b:0c:4a:
45:c0:cf:cc:48:3e:fe:2b:07:20:8e:a0:67:3c:1d:
ae:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C0:9A:87:8F:41:6E:BA:33:2E:D8:62:E1:8F:EB:EC:99:07:C2:31
X509v3 Authority Key Identifier:
keyid:5E:4C:24:35:2C:20:92:D8:4F:24:71:02:67:62:47:23:A0:82:F5:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/5E4C24352C2092D84F24710267624723A082F5C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E4C24352C2092D84F24710267624723A082F5C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/323830333a646631303a3a2f33322d3332203d3e20323731393232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:df10::/32
Signature Algorithm: sha256WithRSAEncryption
9f:7f:7f:df:09:a2:72:59:f9:08:da:a7:b5:86:24:d2:e6:9c:
0c:aa:8c:f2:ad:f8:0f:76:98:75:c4:f8:e1:23:52:8d:f5:97:
17:12:92:e6:22:0e:f4:24:d7:17:11:ca:a7:b5:46:2a:85:1b:
64:f9:6a:45:98:43:75:06:60:0d:db:46:76:cc:be:2f:f4:fa:
ff:69:5a:32:19:80:c9:b3:dd:b8:1e:d0:06:21:61:b1:5c:4f:
7e:a8:c3:49:b1:e2:5b:b2:8a:d0:f1:5c:5e:38:97:08:d2:4f:
16:89:53:8f:c3:af:42:f5:1c:f7:5f:44:e6:f2:1e:eb:f3:53:
6d:39:c7:9e:08:1f:29:45:25:53:93:9f:4e:0c:a8:2e:1f:27:
2c:24:de:9f:e7:fc:a0:43:60:b7:6e:8f:f2:f2:1a:ae:42:6e:
87:04:04:46:c4:4a:18:83:b3:c5:09:c5:ef:74:18:8d:de:3e:
5d:51:89:cc:0e:f0:0c:c5:15:b3:62:5c:7e:68:58:4e:92:02:
a6:ca:a4:72:2e:ff:74:9c:54:b1:fa:5d:90:34:1e:ab:76:82:
1d:dd:7b:20:3b:b3:6d:ff:38:0e:ab:c2:de:47:a4:ae:1a:ef:
08:0d:ae:eb:a4:16:ba:97:34:b7:2f:1e:eb:d7:93:25:91:ea:
25:ac:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 18:01:46 2026 by rpki-client