This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/323830303a3835303a3a2f33322d3438203d3e203237393833.roa
File: 323830303a3835303a3a2f33322d3438203d3e203237393833.roa (raw, json)
Hash identifier: yCukLmsmVLzPba92ma+KpnFzgv8jCd+TRtfEbZMkce8=
Subject key identifier: 39:44:94:6D:E3:68:5D:C9:D5:5A:18:90:E9:E9:D0:C0:1E:CE:D9:4C
Certificate issuer: /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial: 7C968050437C703771F49A43DC693E49B68EB130
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/323830303a3835303a3a2f33322d3438203d3e203237393833.roa
Signing time: Tue 06 Jan 2026 19:25:27 +0000
ROA not before: Tue 06 Jan 2026 19:20:27 +0000
ROA not after: Tue 05 Jan 2027 19:25:27 +0000
asID: 27983
IP address blocks: 2800:850::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 12:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:96:80:50:43:7c:70:37:71:f4:9a:43:dc:69:3e:49:b6:8e:b1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Validity
Not Before: Jan 6 19:20:27 2026 GMT
Not After : Jan 5 19:25:27 2027 GMT
Subject: CN=3944946DE3685DC9D55A1890E9E9D0C01ECED94C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:98:b5:9e:d8:9f:85:3b:87:ee:70:38:78:
3d:23:40:ef:84:d2:00:c4:36:01:e6:39:45:2e:3a:
80:37:15:fb:23:5c:c7:7f:12:99:50:a3:bd:17:42:
6e:a8:23:5c:e6:37:44:60:86:34:93:d1:77:80:e1:
7a:c8:06:2f:70:3e:79:ba:6b:01:40:df:e4:76:db:
a0:e2:2a:7d:39:5b:35:62:4f:ee:be:69:21:fb:fb:
4d:4e:c5:af:e4:eb:ae:30:3e:96:97:06:eb:e0:40:
3a:09:80:1f:3a:1b:84:3e:f8:0e:28:4d:f9:cd:f5:
9b:a2:88:9d:8a:5e:fb:3b:d4:b8:ed:da:6f:76:16:
7f:fc:97:03:31:10:0e:5f:d5:8b:35:e2:60:c5:43:
d1:fc:7b:24:b1:18:a1:cf:80:82:fe:9f:7a:c7:ee:
13:3e:2b:c8:cd:99:12:1a:88:d7:a9:6c:49:d8:c4:
a6:71:71:81:cc:2c:ec:fc:65:c7:4d:3d:75:94:32:
80:8b:30:89:10:77:74:b8:a1:6b:41:8c:0c:c4:20:
69:b6:31:b9:3c:8f:7c:73:71:f2:2f:51:54:99:6a:
f9:6a:57:dd:a1:af:a1:91:0e:70:84:e8:07:6a:e0:
18:44:69:40:0d:1d:37:90:7d:83:93:ff:49:42:b3:
5b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:44:94:6D:E3:68:5D:C9:D5:5A:18:90:E9:E9:D0:C0:1E:CE:D9:4C
X509v3 Authority Key Identifier:
keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/323830303a3835303a3a2f33322d3438203d3e203237393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:850::/32
Signature Algorithm: sha256WithRSAEncryption
62:b0:ce:cf:7f:a5:6a:5c:53:c3:7e:d8:5b:2c:a1:97:ff:20:
f3:da:8d:42:58:ef:24:b5:9a:c7:23:52:b5:37:7c:78:ef:6c:
bb:61:1a:98:f9:6b:6c:fe:ce:37:3a:8c:6b:a5:bd:d8:e4:ef:
56:53:43:81:1b:8d:b3:b1:b8:da:15:21:c9:7c:f6:6f:0e:a5:
fd:7b:27:cf:dd:6e:ac:de:d7:92:b7:5e:0a:b6:e0:61:23:2a:
b1:97:e4:78:29:04:5a:d1:31:52:d6:85:1c:4d:6b:22:dc:fe:
51:cc:ec:2f:38:65:1e:3a:a3:e6:d2:da:1c:ea:5b:a8:2f:c2:
25:7a:93:5d:a6:36:6a:e1:62:91:30:81:50:17:b7:8e:f8:97:
a8:82:d4:8e:40:40:f5:5e:da:c9:7c:04:d7:cf:50:2c:5c:12:
40:57:3b:2a:d2:21:50:7c:43:65:ee:19:6e:54:b0:18:36:67:
20:55:cb:3e:33:69:e4:ed:66:86:f6:6c:1c:af:25:13:ea:9b:
c4:1d:f3:15:b1:11:24:40:6e:7a:0f:61:3f:ca:8d:10:3b:66:
77:9d:55:6b:69:ca:58:c5:cb:83:4e:c9:56:60:d2:58:4a:9e:
5b:73:8c:90:3f:be:38:65:cd:ee:5e:f3:e7:77:44:b8:fc:9f:
79:d8:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:40:36 2026 by rpki-client