This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/323830313a31343a623030303a3a2f34382d3438203d3e203532333138.roa
File: 323830313a31343a623030303a3a2f34382d3438203d3e203532333138.roa (raw, json)
Hash identifier: 7fWqhJ7LRXsW7pHXlIkB5USwC4IELa8feBe7ssh5SVI=
Subject key identifier: 89:FD:1F:FF:89:7C:88:E1:68:F5:E7:6B:4B:37:1D:63:ED:37:30:61
Certificate issuer: /CN=D4F1585FADC5386D18707CA8C82245CBAE06969F
Certificate serial: 073290678DEBD8236D4D798105BC1EC41B65BDE0
Authority key identifier: D4:F1:58:5F:AD:C5:38:6D:18:70:7C:A8:C8:22:45:CB:AE:06:96:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/323830313a31343a623030303a3a2f34382d3438203d3e203532333138.roa
Signing time: Tue 06 Jan 2026 19:46:12 +0000
ROA not before: Tue 06 Jan 2026 19:41:12 +0000
ROA not after: Tue 05 Jan 2027 19:46:12 +0000
asID: 52318
IP address blocks: 2801:14:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.crl
rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 11:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:32:90:67:8d:eb:d8:23:6d:4d:79:81:05:bc:1e:c4:1b:65:bd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F1585FADC5386D18707CA8C82245CBAE06969F
Validity
Not Before: Jan 6 19:41:12 2026 GMT
Not After : Jan 5 19:46:12 2027 GMT
Subject: CN=89FD1FFF897C88E168F5E76B4B371D63ED373061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:bf:84:3d:ba:c2:cc:f9:1b:89:a8:67:d6:
d5:0f:c2:6a:ae:c6:1b:24:64:c0:e8:c4:14:10:f7:
7d:5f:c6:cd:29:48:0f:d2:1f:fe:b5:3d:83:d1:88:
eb:69:c2:eb:ce:57:0a:e5:c0:cb:cd:8a:8b:68:9a:
e3:a1:71:fa:dc:44:12:74:4b:58:9e:14:07:c2:97:
4a:5f:0d:24:05:40:dd:9d:69:46:c6:6f:bc:8c:1a:
5b:b1:12:3c:e4:0c:9b:85:15:cb:1c:2a:3d:f6:43:
eb:c8:9f:71:dc:dd:cc:bc:e2:85:c0:27:6e:c0:6f:
de:22:74:9c:53:d5:c8:01:02:93:49:88:c7:b1:4f:
30:22:b4:10:13:42:21:43:80:06:44:13:c2:bb:6c:
6a:8a:cb:00:f9:d5:f4:42:d7:b9:be:ae:9a:b8:fa:
4e:ff:33:c2:b2:42:9b:81:1b:c5:9d:78:58:fe:c2:
f5:04:00:d7:a0:37:77:3e:55:a9:30:2c:27:24:1f:
57:2d:5e:54:f7:19:33:35:b6:71:33:50:fd:8d:e4:
0c:6b:eb:f3:76:39:fb:b5:17:13:81:7e:eb:d0:c8:
c7:db:67:24:d1:b5:7e:cb:ca:45:24:6e:1c:69:1c:
52:02:10:47:e0:4b:48:de:ba:7e:ee:51:9a:ce:72:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FD:1F:FF:89:7C:88:E1:68:F5:E7:6B:4B:37:1D:63:ED:37:30:61
X509v3 Authority Key Identifier:
keyid:D4:F1:58:5F:AD:C5:38:6D:18:70:7C:A8:C8:22:45:CB:AE:06:96:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/323830313a31343a623030303a3a2f34382d3438203d3e203532333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:14:b000::/48
Signature Algorithm: sha256WithRSAEncryption
98:ec:c4:cc:99:9e:d0:84:06:99:42:82:9e:3b:2e:ba:ed:3d:
9a:f5:7f:f5:3d:bd:a1:f4:04:7d:fd:95:ef:1f:87:ce:9b:a2:
f9:86:b7:af:fe:c6:d9:51:79:b5:3d:0a:0d:d2:42:3e:73:f5:
19:be:e9:71:06:e5:33:73:e3:0c:d6:f7:80:d1:15:20:18:a0:
5c:86:8f:9a:c4:4e:00:4c:5c:a2:8b:15:12:32:8a:fc:48:0d:
fb:1f:51:c8:4b:42:05:55:e1:c0:d1:ca:bc:d4:53:5f:38:ea:
2c:05:f0:79:54:b5:52:98:7c:9a:4b:f4:82:2e:3c:b9:64:a6:
58:b1:22:74:b7:27:01:3f:b2:5b:3b:da:6a:79:29:40:11:9b:
b6:6b:30:82:9d:32:8e:09:59:c7:1b:1e:96:38:f1:eb:70:88:
6f:5f:03:b3:46:62:e0:b4:e7:e7:bd:5e:68:40:01:7f:cf:8b:
3d:06:82:30:b9:4b:b4:f6:1c:6b:cf:fc:13:4e:39:cd:e2:f2:
49:b1:d7:ce:18:e8:0f:81:34:19:d3:5d:2d:43:17:ea:63:8d:
d8:38:ec:c9:13:9a:4e:e8:e2:1d:f5:32:97:42:e7:a9:b8:a2:
6d:18:9f:19:7d:c0:42:6e:73:fc:4a:d5:f4:4e:41:67:dd:1b:
67:9c:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:07:26 2026 by rpki-client