This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/323830313a31653a383030303a3a2f34382d3438203d3e203532343633.roa
File: 323830313a31653a383030303a3a2f34382d3438203d3e203532343633.roa (raw, json)
Hash identifier: ZZOSNzIz9ja9cpTkwu6BHyc52ldREGKJ5NKJCpB6WkU=
Subject key identifier: 37:1E:17:57:8A:9B:6B:50:E8:66:C8:A9:86:AA:6D:E7:01:28:3A:FD
Certificate issuer: /CN=899F313321C13B5591ABC1D56B271A1F6BB60E12
Certificate serial: 544619F7FFF689F4C41BE1E9CE26BC621F5F6E47
Authority key identifier: 89:9F:31:33:21:C1:3B:55:91:AB:C1:D5:6B:27:1A:1F:6B:B6:0E:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/323830313a31653a383030303a3a2f34382d3438203d3e203532343633.roa
Signing time: Tue 06 Jan 2026 19:09:30 +0000
ROA not before: Tue 06 Jan 2026 19:04:30 +0000
ROA not after: Tue 05 Jan 2027 19:09:30 +0000
asID: 52463
IP address blocks: 2801:1e:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.crl
rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 13:25:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:46:19:f7:ff:f6:89:f4:c4:1b:e1:e9:ce:26:bc:62:1f:5f:6e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899F313321C13B5591ABC1D56B271A1F6BB60E12
Validity
Not Before: Jan 6 19:04:30 2026 GMT
Not After : Jan 5 19:09:30 2027 GMT
Subject: CN=371E17578A9B6B50E866C8A986AA6DE701283AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:e1:b8:da:a9:a8:e5:f6:f0:97:53:6a:34:
fe:57:be:5a:3c:0c:c6:9b:61:f2:1a:a2:aa:81:89:
f2:91:03:c4:5a:99:44:b8:4d:4d:2c:4c:d8:41:e3:
af:58:09:d6:af:00:00:5d:8c:d0:e0:53:b1:a5:dc:
fc:8c:a2:c9:ef:62:5e:53:56:25:ad:f4:76:f1:a3:
df:5f:9c:cb:49:be:1d:71:48:2c:29:45:c5:e1:e5:
86:c3:9a:9a:1d:22:e8:f4:af:4b:05:9d:9b:42:11:
77:3c:e3:86:fb:7d:54:e7:d9:86:1c:01:83:08:21:
b4:f5:12:df:c0:57:09:0d:57:ca:72:1e:66:f1:3c:
24:a8:e4:2b:b0:9a:35:e0:ec:13:e5:b8:75:ac:de:
ac:99:1d:ac:4e:d2:68:3e:1f:94:85:1e:8c:a4:24:
4e:04:4a:26:69:87:6c:42:a9:50:27:eb:86:2c:a2:
6d:c5:73:0e:01:45:74:87:62:1b:b8:ee:68:4c:e5:
e3:7d:d4:07:e9:ff:2e:c7:7d:28:92:3d:57:6b:cc:
ab:2c:5e:5d:e3:e4:48:ab:7b:32:e4:33:d9:a4:01:
8f:2c:96:57:e2:e2:bf:75:a0:4a:87:43:13:69:17:
68:1e:2b:ce:0a:f5:a0:4b:8c:15:db:b4:9f:b3:8c:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1E:17:57:8A:9B:6B:50:E8:66:C8:A9:86:AA:6D:E7:01:28:3A:FD
X509v3 Authority Key Identifier:
keyid:89:9F:31:33:21:C1:3B:55:91:AB:C1:D5:6B:27:1A:1F:6B:B6:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/323830313a31653a383030303a3a2f34382d3438203d3e203532343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:8000::/48
Signature Algorithm: sha256WithRSAEncryption
72:a7:5f:43:4a:84:a2:ac:a2:64:9d:64:07:cd:2f:a6:51:9f:
b7:f5:66:ba:10:aa:b8:35:c3:d9:a4:78:3b:a0:27:0c:02:f7:
13:10:e8:a9:f5:37:cc:70:af:f4:df:0b:e3:65:6e:89:39:dc:
aa:d7:49:d9:d6:0e:90:13:94:c3:39:71:53:4e:0a:64:d7:ef:
45:a3:25:fb:98:c7:29:90:e2:de:ca:71:0a:3a:d2:72:4c:26:
96:1f:8e:a8:20:b7:db:f6:a5:c5:3f:58:a6:d3:8c:07:ae:89:
e1:07:9e:13:b8:bf:b4:93:41:d3:49:34:e3:4e:13:0d:1e:aa:
58:57:5d:be:0c:04:7d:c3:31:bc:78:5c:8a:52:1e:4b:22:f9:
98:eb:2b:f2:7f:07:c0:db:6b:41:02:ef:87:2f:d8:b4:0b:65:
b1:8c:96:e1:96:68:cd:a4:e3:6c:e0:b2:7d:d8:d2:d5:33:07:
dc:35:f7:3a:81:97:73:54:dd:93:95:08:71:71:48:76:f4:ad:
ed:f2:bf:f0:60:05:74:29:ad:0c:2e:18:67:b5:5c:26:67:64:
7c:54:2a:1c:a1:44:6f:62:8a:7f:a4:90:3b:b7:0a:db:c9:cc:
d1:52:f0:4f:c0:18:bf:46:50:81:22:5a:5c:34:84:61:a6:c4:
96:cf:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:04:05 2026 by rpki-client