This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34362d3436203d3e203237383735.roa
File: 323830313a3165303a3a2f34362d3436203d3e203237383735.roa (raw, json)
Hash identifier: kB7i0PYZ4QC5PNw0WTjdZDoi9gipEfKCTvxhRFrE2dg=
Subject key identifier: 78:BF:31:D9:DB:65:83:55:73:A7:68:F3:0B:AF:1A:EC:81:5A:7F:2D
Certificate issuer: /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial: 141A3DD571272F1E45FACA96194384BB44FCE46F
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34362d3436203d3e203237383735.roa
Signing time: Tue 06 Jan 2026 19:03:14 +0000
ROA not before: Tue 06 Jan 2026 18:58:14 +0000
ROA not after: Tue 05 Jan 2027 19:03:14 +0000
asID: 27875
IP address blocks: 2801:1e0::/46 maxlen: 46
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 06:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1a:3d:d5:71:27:2f:1e:45:fa:ca:96:19:43:84:bb:44:fc:e4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Validity
Not Before: Jan 6 18:58:14 2026 GMT
Not After : Jan 5 19:03:14 2027 GMT
Subject: CN=78BF31D9DB65835573A768F30BAF1AEC815A7F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:ad:f5:30:92:7d:d6:65:1a:81:67:ee:ca:
3a:a4:bb:ce:3c:3e:cb:58:47:05:84:0b:41:cf:22:
ed:9d:40:9a:d8:35:19:67:f7:79:53:b3:55:43:79:
dc:02:38:b1:f4:66:1f:9e:72:fb:dd:44:e1:0b:35:
c6:59:ed:75:96:76:54:ee:18:e3:4d:e7:ba:26:2a:
a3:7b:e6:03:34:27:a6:5b:97:ad:da:83:ee:a7:ef:
e6:8a:50:ec:5a:4d:a4:38:34:54:d5:b8:03:3f:ac:
92:04:fe:15:5a:f3:33:13:cc:87:14:25:19:43:ce:
37:16:bc:2f:45:72:df:1e:1c:e1:7c:65:14:3e:8e:
ea:bb:2e:e0:95:d6:a7:fe:51:88:34:af:6e:0b:b5:
cb:d4:aa:7c:9a:c8:8c:22:87:19:e6:20:18:17:ed:
84:f9:c1:0d:21:a5:d5:ab:3c:92:00:ae:3e:69:63:
1e:e5:12:bb:cf:63:76:c1:6b:3c:af:69:81:70:3e:
c2:76:da:d5:69:88:8d:e8:ee:fe:f2:0d:1d:d1:e8:
c8:df:b2:ea:27:2b:3b:14:68:ab:ad:ab:20:5a:a2:
65:e0:6b:aa:55:97:8b:1b:28:81:15:2b:0c:56:51:
89:0d:dc:ed:f8:4c:64:35:08:fd:2a:6e:dc:12:30:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:31:D9:DB:65:83:55:73:A7:68:F3:0B:AF:1A:EC:81:5A:7F:2D
X509v3 Authority Key Identifier:
keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34362d3436203d3e203237383735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e0::/46
Signature Algorithm: sha256WithRSAEncryption
2b:64:df:c2:c8:a2:39:0c:e4:bf:46:44:1a:f0:5f:15:e8:a6:
49:44:2c:2a:80:c3:c9:69:9c:37:5b:7c:04:13:1a:4e:60:ab:
98:fa:a3:c1:43:b1:9b:52:fc:a9:a2:1d:f9:cb:fc:59:e0:97:
23:0e:5c:b6:54:46:79:8a:a8:c0:bd:9a:ae:e1:a9:98:62:a2:
76:13:2c:df:c6:2b:cc:13:80:b3:b6:62:43:07:d5:dd:71:be:
5a:42:59:d4:1f:7f:e1:ae:32:80:e2:4b:ed:f0:8b:0e:0b:cf:
dc:a0:53:47:fa:65:c7:bf:85:0b:ba:9a:73:83:a7:ed:71:8c:
6a:0b:00:83:42:72:f5:2a:29:ce:11:9c:67:af:7d:cd:59:c9:
8d:fb:3b:4f:cc:74:fc:10:98:0d:d8:05:f4:a9:c0:c2:bc:5d:
f6:3c:ec:93:43:59:69:cf:c8:51:3b:d9:ce:9f:7b:a3:56:2a:
dd:cb:8b:9e:e3:46:93:8a:d6:1f:94:fe:54:c2:6c:18:5a:bb:
d4:6c:75:66:1e:70:be:28:50:c1:34:73:85:26:4d:39:11:ae:
2e:dc:c3:26:0d:b2:20:a2:7c:37:ac:17:14:9f:ad:95:a4:73:
8e:1f:e3:b4:9e:82:6a:5b:96:7e:3b:fd:dc:ac:87:b6:f2:bb:
0a:79:4e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:11:39 2026 by rpki-client