This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa
File: 323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier: dWsuRBpPTwhIk2yZzIgwE/AGc5C08Bg5n4bfSgKdVQs=
Subject key identifier: 50:E4:9B:A5:2D:74:A0:B6:03:DD:A5:4F:34:91:D0:56:B3:40:4A:B1
Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial: 1E76A7DF14F259AEBD22B51C2EAA39AB59E9877B
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa
Signing time: Tue 06 Jan 2026 19:47:42 +0000
ROA not before: Tue 06 Jan 2026 19:42:42 +0000
ROA not after: Tue 05 Jan 2027 19:47:42 +0000
asID: 273041
IP address blocks: 2801:1a5:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:76:a7:df:14:f2:59:ae:bd:22:b5:1c:2e:aa:39:ab:59:e9:87:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Validity
Not Before: Jan 6 19:42:42 2026 GMT
Not After : Jan 5 19:47:42 2027 GMT
Subject: CN=50E49BA52D74A0B603DDA54F3491D056B3404AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:9b:c2:54:78:23:0d:03:6b:fe:c4:72:7e:
4c:82:c6:37:48:c7:6a:97:e2:40:f0:5a:63:f1:ef:
7f:f3:41:39:a8:ef:04:31:de:68:30:fd:de:d2:aa:
60:74:18:5f:18:1a:e5:e9:eb:cd:60:e0:c5:82:9a:
d6:db:9f:f5:63:bb:fa:ff:93:d3:1c:bb:00:cc:79:
c8:14:09:43:9b:cf:5c:99:9b:34:69:57:8a:cc:e5:
06:06:39:cf:b6:58:2f:9a:e5:e0:97:e2:16:04:a0:
7c:59:2c:a2:43:1f:cc:cb:40:92:50:9d:6b:9c:75:
a0:d9:87:16:57:2b:4b:e6:b0:0b:39:0a:a5:44:0a:
17:8e:10:33:32:20:07:50:bd:19:d6:a6:8a:eb:71:
6c:f5:44:e9:9d:6e:9b:04:99:4e:90:a3:e6:60:da:
22:89:ed:2d:af:1d:8a:f8:e1:0f:99:dd:d0:5d:44:
d4:9e:dc:8d:f5:67:36:14:3c:d5:e8:17:7e:36:97:
87:23:fd:87:9d:27:25:95:82:37:e1:d3:7d:e6:a9:
0f:fb:17:7b:ef:b1:10:00:5b:93:b4:85:cb:08:5a:
d5:e6:b6:5e:be:96:92:63:c3:69:a9:81:d8:c4:71:
f8:54:ca:fa:2b:88:25:f2:1d:6e:8c:0d:af:ef:ea:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E4:9B:A5:2D:74:A0:B6:03:DD:A5:4F:34:91:D0:56:B3:40:4A:B1
X509v3 Authority Key Identifier:
keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a5:9::/48
Signature Algorithm: sha256WithRSAEncryption
7f:6b:2b:a4:9d:e5:a1:00:03:5d:35:58:5d:c9:95:54:9e:79:
95:df:b2:e0:7a:f4:36:f2:0d:9b:04:02:e8:e7:76:ce:8f:f5:
87:77:5c:3b:15:6b:f1:e0:19:d9:97:35:49:36:f1:18:ce:02:
f6:bc:7f:84:a2:cb:07:0a:eb:54:76:11:51:28:dd:71:57:76:
31:c8:3c:54:a4:74:b7:52:f5:a5:0c:f7:2a:2e:58:e2:dd:40:
70:33:52:46:07:39:71:f4:19:8d:56:b7:f5:34:68:b5:bc:32:
8a:df:d5:31:4c:d4:06:39:69:c7:6e:f2:21:e5:59:72:50:df:
18:09:ee:c4:c1:1f:8d:4a:6a:12:92:90:bd:f6:7b:1b:54:7d:
ba:f8:a4:19:0b:10:b5:31:28:d7:45:85:0b:95:7f:20:ad:64:
20:00:b2:0c:fb:ff:10:dd:4b:65:a7:7f:4b:5a:4f:bc:58:10:
05:1f:69:ca:23:e4:79:64:b5:d8:10:d3:bb:50:2f:e8:60:59:
bd:0a:ef:ae:b7:38:70:f7:5b:22:4e:e4:1d:0d:61:3f:19:1a:
59:e3:99:13:83:38:04:52:6d:26:ed:89:96:2a:1f:c9:2f:3d:
8e:1c:e2:9b:4e:35:d9:3f:9f:37:6d:92:f6:58:10:ec:7e:2f:
65:77:fb:bb
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUHnan3xTyWa69IrUcLqo5q1nph3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCMjJGMDMzM0I4RjY0QUVGNEY5NUQ3NkEyM0U0NUQ5
RDUzMEQxRTAeFw0yNjAxMDYxOTQyNDJaFw0yNzAxMDUxOTQ3NDJaMDMxMTAvBgNV
BAMTKDUwRTQ5QkE1MkQ3NEEwQjYwM0REQTU0RjM0OTFEMDU2QjM0MDRBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDG5vCVHgjDQNr/sRyfkyCxjdI
x2qX4kDwWmPx73/zQTmo7wQx3mgw/d7SqmB0GF8YGuXp681g4MWCmtbbn/Vju/r/
k9McuwDMecgUCUObz1yZmzRpV4rM5QYGOc+2WC+a5eCX4hYEoHxZLKJDH8zLQJJQ
nWucdaDZhxZXK0vmsAs5CqVECheOEDMyIAdQvRnWporrcWz1ROmdbpsEmU6Qo+Zg
2iKJ7S2vHYr44Q+Z3dBdRNSe3I31ZzYUPNXoF342l4cj/YedJyWVgjfh033mqQ/7
F3vvsRAAW5O0hcsIWtXmtl6+lpJjw2mpgdjEcfhUyvoriCXyHW6MDa/v6j5JAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUUOSbpS10oLYD3aVPNJHQVrNASrEwHwYDVR0j
BBgwFoAU2LIvAzO49krvT5XXaiPkXZ1TDR4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjRBQTY4QjE4MUFBMTI0RTI4MzNEODZCMEFCQzE2MEMy
Q0U3NkM4MUM2OTU2OEFCMEU3ODRGQkY2NDRFNDg2LzAvRDhCMjJGMDMzM0I4RjY0
QUVGNEY5NUQ3NkEyM0U0NUQ5RDUzMEQxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEIyMkYwMzMzQjhGNjRBRUY0
Rjk1RDc2QTIzRTQ1RDlENTMwRDFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0QUE2OEIxODFBQTEyNEUyODMzRDg2QjBBQkMxNjBDMkNFNzZDODFD
Njk1NjhBQjBFNzg0RkJGNjQ0RTQ4Ni8wLzMyMzgzMDMxM2EzMTYxMzUzYTM5M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
pQAJMA0GCSqGSIb3DQEBCwUAA4IBAQB/ayukneWhAANdNVhdyZVUnnmV37LgevQ2
8g2bBALo53bOj/WHd1w7FWvx4BnZlzVJNvEYzgL2vH+EossHCutUdhFRKN1xV3Yx
yDxUpHS3UvWlDPcqLlji3UBwM1JGBzlx9BmNVrf1NGi1vDKK39UxTNQGOWnHbvIh
5VlyUN8YCe7EwR+NSmoSkpC99nsbVH26+KQZCxC1MSjXRYULlX8grWQgALIM+/8Q
3Utlp39LWk+8WBAFH2nKI+R5ZLXYENO7UC/oYFm9Cu+utzhw91siTuQdDWE/GRpZ
45kTgzgEUm0m7YmWKh/JLz2OHOKbTjXZP583bZL2WBDsfi9ld/u7
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:01:26 2026 by rpki-client