This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a31303a3a2f34382d3438203d3e203432.roa
File: 323830303a3131303a31303a3a2f34382d3438203d3e203432.roa (raw, json)
Hash identifier: PS5uWgmemODaTXl7yGSH4NtyPr2maZBH4/DIFa9u+rc=
Subject key identifier: 2D:57:96:26:6E:F5:C4:88:5C:29:EF:C8:EE:37:E2:BF:DB:7B:1C:A4
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 6CEA78D0A29B1FAF3D50E43442987C4325002555
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a31303a3a2f34382d3438203d3e203432.roa
Signing time: Tue 06 Jan 2026 19:22:12 +0000
ROA not before: Tue 06 Jan 2026 19:17:12 +0000
ROA not after: Tue 05 Jan 2027 19:22:12 +0000
asID: 42
IP address blocks: 2800:110:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Jan 2026 05:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ea:78:d0:a2:9b:1f:af:3d:50:e4:34:42:98:7c:43:25:00:25:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Jan 6 19:17:12 2026 GMT
Not After : Jan 5 19:22:12 2027 GMT
Subject: CN=2D5796266EF5C4885C29EFC8EE37E2BFDB7B1CA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d2:b0:aa:b3:a9:d1:fe:b6:42:78:c7:98:cc:
e0:18:36:ea:6f:d2:d1:ab:c0:75:79:a3:56:ee:35:
56:05:33:88:53:04:8a:6f:0c:47:13:20:45:5a:92:
c8:a8:54:27:cc:52:6e:bd:84:ad:e1:df:01:0f:7c:
b0:f5:c7:1a:18:75:04:76:72:c0:89:1f:88:bd:22:
96:f5:a2:be:21:4f:a3:29:5f:dd:08:1f:be:65:89:
0a:9a:65:6f:32:db:c3:70:50:15:ab:7b:7a:a8:06:
64:22:8e:12:ba:67:a7:eb:a4:cb:8e:2c:60:ec:ed:
61:e6:1c:9f:e9:b5:37:b8:d4:84:3f:01:c2:33:3d:
51:6f:94:f8:39:40:9f:88:ed:4a:44:57:28:2a:b7:
15:7e:02:40:45:d4:75:e0:4c:07:73:02:08:86:76:
f7:75:70:7d:9c:81:ea:36:49:c0:6b:0b:08:49:13:
64:44:de:6d:97:b4:fc:bd:c0:28:ac:1a:71:38:cb:
58:01:b5:fa:0c:aa:68:e7:7e:74:2f:e9:ea:b0:fa:
67:d7:52:63:f6:e3:8a:11:ff:99:ee:44:9c:34:18:
49:35:77:32:b2:78:ad:02:55:d7:cd:7d:e8:1a:ea:
59:da:74:cd:ba:2e:a3:a0:52:ca:1c:ed:22:36:f6:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:96:26:6E:F5:C4:88:5C:29:EF:C8:EE:37:E2:BF:DB:7B:1C:A4
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a31303a3a2f34382d3438203d3e203432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:110:10::/48
Signature Algorithm: sha256WithRSAEncryption
49:e4:65:57:ab:f2:9d:62:ce:6e:e8:db:bc:3f:3c:d1:fa:df:
ce:d9:49:2c:3a:0f:dc:12:32:7d:3a:b0:2f:c2:8c:62:c0:0e:
d0:3c:3d:eb:8d:0f:84:25:b3:4a:75:f3:29:b1:a5:06:59:07:
35:ec:de:7b:03:a0:2c:a0:3c:1a:fc:79:58:60:a7:be:09:a2:
d8:a4:26:5b:29:79:bb:97:af:f0:7c:82:19:45:ad:41:85:19:
b0:dd:67:48:20:be:d0:a4:e2:10:bf:3e:14:f9:f3:48:75:f6:
ed:4c:e8:25:47:1a:31:e5:8e:e6:d0:07:1e:2d:3b:ae:db:ca:
6e:ff:28:c3:1f:ff:7a:9c:87:10:f8:c9:f1:bb:7b:78:ce:a4:
b4:18:5c:5c:23:55:bc:37:6d:28:c7:e7:5a:b1:81:0b:cc:b1:
f0:ae:c0:db:9c:48:f0:0c:37:dd:61:de:0a:22:ad:0a:a5:a9:
ab:40:31:11:f0:f2:78:f3:99:e6:7f:a1:7d:bc:e5:0f:85:f3:
42:99:47:28:ca:39:25:88:56:18:31:87:82:de:75:d7:ba:10:
12:4d:a0:f1:99:54:2f:d0:c2:90:39:5a:f5:43:13:18:d1:14:
3f:81:91:9b:35:53:3d:09:a4:55:66:b1:dd:62:db:d0:26:cc:
20:22:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:52:13 2026 by rpki-client