This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa
File: 323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier: 6VN841OSvpgXF1NAtazPvUVNXvarIkdWGbd3v6PGO/Y=
Subject key identifier: 22:32:3F:71:7F:CD:27:2A:AD:48:20:B8:4D:73:E1:FD:B4:4E:AC:56
Certificate issuer: /CN=D250CE792821FD0F56C8D82DCB69EE4C56791CE5
Certificate serial: 023760DB5795D07E595353D8A176DDABB0626EBC
Authority key identifier: D2:50:CE:79:28:21:FD:0F:56:C8:D8:2D:CB:69:EE:4C:56:79:1C:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa
Signing time: Tue 06 Jan 2026 19:43:33 +0000
ROA not before: Tue 06 Jan 2026 19:38:33 +0000
ROA not after: Tue 05 Jan 2027 19:43:33 +0000
asID: 19429
IP address blocks: 2801:1f:3800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.crl
rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:37:60:db:57:95:d0:7e:59:53:53:d8:a1:76:dd:ab:b0:62:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D250CE792821FD0F56C8D82DCB69EE4C56791CE5
Validity
Not Before: Jan 6 19:38:33 2026 GMT
Not After : Jan 5 19:43:33 2027 GMT
Subject: CN=22323F717FCD272AAD4820B84D73E1FDB44EAC56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:83:f0:74:98:e0:bd:b0:56:ed:b7:fb:61:
5a:ad:ea:45:65:ae:ed:10:07:6f:20:d8:8d:45:16:
e5:29:6b:91:57:d0:64:c4:5e:21:ef:49:e6:0b:85:
0d:6f:40:cd:9e:c1:e3:e5:0a:06:c2:10:90:31:da:
1d:82:b8:be:28:e7:27:39:af:5c:de:af:dd:1f:06:
7a:c4:4a:65:36:a1:3c:96:cf:9a:56:a9:7f:77:ea:
2a:dc:96:d9:d0:cc:88:00:07:39:10:90:10:fa:e4:
3d:59:7c:46:0d:93:da:6d:42:92:fc:8c:80:11:9b:
3a:4c:9c:bc:38:37:e9:22:bf:70:25:e2:d0:d3:e6:
7a:26:79:35:38:a5:72:62:d8:e2:1f:ff:75:92:0c:
63:c2:ac:44:1c:89:48:a0:68:9d:bc:80:8f:2d:49:
eb:8d:14:7a:5b:f7:06:1c:79:09:c3:e3:5e:be:87:
b8:dd:e4:76:00:3b:8b:04:f5:79:e4:a9:a9:b7:03:
88:bf:72:9c:fe:2f:74:90:1a:5b:5a:03:7f:6e:64:
31:d2:fa:77:96:2a:c2:38:1d:ec:88:7e:a4:1d:9d:
cd:52:5c:b9:6d:29:bc:a3:6d:00:f0:44:a8:1e:f9:
fd:5e:1c:64:a6:4c:d0:45:0f:19:93:22:88:b2:95:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:3F:71:7F:CD:27:2A:AD:48:20:B8:4D:73:E1:FD:B4:4E:AC:56
X509v3 Authority Key Identifier:
keyid:D2:50:CE:79:28:21:FD:0F:56:C8:D8:2D:CB:69:EE:4C:56:79:1C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1f:3800::/48
Signature Algorithm: sha256WithRSAEncryption
71:9a:51:d8:9c:aa:ad:fb:2c:8e:09:a5:f6:2a:be:27:b9:1b:
38:e8:99:06:a2:5b:8e:67:91:21:96:6c:72:c4:2d:a6:aa:f4:
6e:9c:6f:83:5a:a6:44:a4:7c:d9:35:0d:d4:39:f2:0d:d4:74:
78:d3:d6:85:3f:30:33:a0:2b:19:2f:39:6f:10:eb:fa:73:8a:
8c:01:a6:94:f3:60:eb:91:cd:d1:89:71:c0:f7:cc:f7:2c:25:
d5:9f:3f:43:13:a1:06:cd:48:df:d8:53:b4:1c:da:2e:26:fc:
b2:5c:82:a8:a1:ed:d3:0a:12:1e:35:94:75:3f:71:08:9a:04:
f6:43:82:be:56:c0:5b:16:cd:e2:fc:12:cf:81:97:72:d2:fa:
5c:3c:73:8e:09:b2:9b:4d:a9:9d:bd:8f:4a:a7:b8:ac:24:7e:
04:15:b4:eb:a5:be:e7:da:5a:fa:e4:89:d0:06:a4:c2:83:bc:
e5:c5:60:97:a5:c5:e4:4a:5d:9b:22:bb:87:11:1c:cf:69:af:
1a:ce:76:6b:af:5a:f5:6c:0a:cd:1e:29:27:86:c3:cb:de:bb:
b4:a7:4a:6f:5b:89:4a:65:cd:99:a2:77:bc:1a:41:15:e2:fc:
e1:de:c3:d5:c8:9a:4c:0a:39:51:26:37:6a:4b:c8:9b:a3:1a:
1b:7e:8b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:40:17 2026 by rpki-client