This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa
File: 323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa (raw, json)
Hash identifier: iJNZQl22umCGmrT2n8SK0adiuqvu0OmZm3yzoD1lM8I=
Subject key identifier: B3:0E:29:45:80:F6:EF:02:42:2D:CE:9C:D6:A5:B9:D0:8A:E6:61:BE
Certificate issuer: /CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
Certificate serial: 4306EB49CED13755583AC479A70C4687D789F879
Authority key identifier: 4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa
Signing time: Tue 06 Jan 2026 19:43:10 +0000
ROA not before: Tue 06 Jan 2026 19:38:10 +0000
ROA not after: Tue 05 Jan 2027 19:43:10 +0000
asID: 262201
IP address blocks: 2801:0:290::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl
rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:06:eb:49:ce:d1:37:55:58:3a:c4:79:a7:0c:46:87:d7:89:f8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
Validity
Not Before: Jan 6 19:38:10 2026 GMT
Not After : Jan 5 19:43:10 2027 GMT
Subject: CN=B30E294580F6EF02422DCE9CD6A5B9D08AE661BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:93:0a:da:58:de:33:2e:ee:aa:84:e4:5a:
9d:51:7b:40:cb:82:35:85:85:96:0b:20:c5:9b:9f:
6d:80:db:81:0d:e8:33:a5:a4:1b:d5:11:83:27:0f:
6b:aa:5f:e1:53:17:29:71:33:c8:c9:cc:a6:5e:6d:
b1:4d:b3:74:16:43:81:80:84:36:ba:8e:8e:bf:ad:
d7:23:e4:ea:b6:e9:d2:2e:57:0b:17:80:43:17:1e:
f4:6f:3a:30:da:62:80:d4:da:84:85:57:f2:4a:3e:
3a:da:8a:ff:a6:d5:cf:8e:b5:32:e6:69:3d:15:0c:
fd:03:be:f0:54:cb:41:b8:50:fd:11:32:f2:ae:50:
f9:06:f5:64:20:27:82:39:ff:57:89:0c:00:7c:8a:
c5:f5:ac:e8:ba:40:0e:94:78:fd:d4:99:fc:1e:8d:
96:a8:2e:63:4c:be:e1:e5:26:d4:3f:82:42:27:66:
f1:63:d3:d1:a1:19:4a:4d:37:d5:fc:8d:0f:c3:99:
ff:5b:4c:b8:8d:00:b9:23:0a:03:4e:aa:7a:ab:f4:
d6:a6:be:d2:31:f5:c5:cd:96:ad:a3:f7:d3:f8:f4:
1f:08:50:41:4b:1d:d6:31:dd:70:14:a9:c6:6e:8d:
5e:92:03:67:a8:54:32:44:45:4d:01:34:a5:47:da:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0E:29:45:80:F6:EF:02:42:2D:CE:9C:D6:A5:B9:D0:8A:E6:61:BE
X509v3 Authority Key Identifier:
keyid:4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:0:290::/48
Signature Algorithm: sha256WithRSAEncryption
85:c5:37:eb:71:73:bf:e6:9b:a1:e5:4b:27:20:7e:12:20:04:
57:39:a9:74:45:db:46:7a:91:58:54:45:e8:2d:9a:1e:9e:17:
50:3f:f8:e7:58:2a:3e:c4:bb:bb:40:87:40:f0:63:64:59:7e:
7a:ac:a4:64:c5:fd:c5:17:88:ca:4f:fc:4b:b9:bc:e1:88:30:
d8:42:0d:44:40:e2:29:9a:93:cc:72:56:34:73:68:96:49:bf:
3f:f8:d7:41:d5:35:a5:95:81:27:4b:e9:f7:db:25:e0:70:a6:
83:24:81:e0:c9:0c:a4:7a:4e:01:26:4b:3a:40:82:c9:52:54:
75:1b:5c:e9:08:db:6b:d6:a6:1f:e3:87:ca:ba:87:d2:ed:69:
b7:02:49:f6:a6:35:db:95:c5:55:7a:3c:ff:4a:f6:ad:13:1f:
e1:4f:78:a3:0e:cf:32:86:5a:4d:c1:9b:ba:91:39:f8:ea:43:
da:29:72:e4:13:05:50:86:75:9a:c3:b1:87:91:f4:8c:d1:77:
c4:35:dd:dd:35:22:e1:7a:e2:c9:7c:fc:06:73:07:fc:f7:22:
52:a3:90:ad:8f:89:62:a4:69:5e:62:7e:36:b8:a0:ac:f9:40:
6d:9d:8c:0a:82:a2:2d:92:bb:9f:e9:39:b3:29:f7:61:c3:56:
d6:04:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:15:46 2026 by rpki-client