This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa
File: 323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa (raw, json)
Hash identifier: u0X6UO++JLk5ozmMBV9jHxZaq+RAXDmVXdePX+H5UNE=
Subject key identifier: 10:7B:E8:37:C6:D2:9D:24:69:0A:F9:7A:8E:B9:D8:97:DD:68:28:5E
Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial: 5DC021A485DA76ED479496B3654B8DBE4E3D22B5
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa
Signing time: Tue 06 Jan 2026 20:48:47 +0000
ROA not before: Tue 06 Jan 2026 20:43:47 +0000
ROA not after: Tue 05 Jan 2027 20:48:47 +0000
asID: 27951
IP address blocks: 2800:490:e800::/39 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 18:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c0:21:a4:85:da:76:ed:47:94:96:b3:65:4b:8d:be:4e:3d:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Validity
Not Before: Jan 6 20:43:47 2026 GMT
Not After : Jan 5 20:48:47 2027 GMT
Subject: CN=107BE837C6D29D24690AF97A8EB9D897DD68285E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:41:c9:a6:68:5e:13:93:21:c7:30:d6:b9:
44:11:c5:f0:55:22:28:62:5b:0b:da:09:96:5f:34:
41:d8:41:eb:9d:16:ef:94:d2:31:06:58:bd:40:68:
5f:b0:22:f1:f9:98:24:a9:c5:ed:2c:64:b4:82:af:
7e:9b:d7:ac:d0:9d:ec:f2:eb:b6:c9:6b:34:d3:67:
fe:2d:35:87:75:21:b0:7b:d8:a9:d3:10:37:af:7b:
69:c6:96:91:85:98:5d:0f:f1:b1:a6:22:8d:68:16:
93:0e:fe:73:22:5c:51:0f:41:7b:95:f8:19:a4:24:
c6:ca:e6:c1:03:bc:31:46:b5:1c:5b:b5:5c:c2:bd:
a8:e6:f9:f3:36:a5:3e:81:1b:92:57:86:c2:8c:c2:
36:15:d7:8a:96:98:a0:81:60:9b:ca:f3:9e:0e:dc:
b2:51:fc:a7:fb:cd:09:57:cc:05:b8:0f:05:ba:e7:
81:a9:14:d4:05:b2:73:91:b3:7d:bd:29:c9:5a:7b:
5a:0e:ca:b6:55:36:8c:01:b1:e9:e6:81:38:6b:75:
07:f6:73:e3:f0:79:9b:d4:e9:71:9f:c7:c6:29:2b:
41:2f:21:78:55:8b:bc:b4:47:fb:fc:b2:4e:8b:89:
c9:84:27:74:0d:59:8b:fc:af:7f:41:15:77:87:68:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:E8:37:C6:D2:9D:24:69:0A:F9:7A:8E:B9:D8:97:DD:68:28:5E
X509v3 Authority Key Identifier:
keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:490:e800::/39
Signature Algorithm: sha256WithRSAEncryption
b4:93:3d:ad:9c:a0:47:93:3d:2a:d2:39:d2:6b:28:fb:f6:e9:
0b:c1:9c:fb:b3:5d:59:94:18:da:88:23:20:61:da:fe:43:fd:
63:92:1a:63:ef:e4:2d:25:7f:b9:d7:b5:f9:f3:15:99:4d:20:
75:36:fd:45:fe:c0:a6:2b:58:a0:6f:54:30:17:8b:68:e2:f0:
3b:ef:d9:15:85:83:f8:cd:ef:79:8d:48:22:30:76:80:e5:24:
b9:3f:8c:26:82:c0:b7:af:7d:ca:cf:cb:cb:cf:fb:a3:01:f8:
8b:fd:d3:c7:d2:a1:b1:0c:94:c0:ad:fa:65:49:86:9f:42:62:
0d:cd:92:ab:c8:d8:12:e6:1d:55:68:1f:65:97:9f:f1:5a:8a:
98:96:14:43:ba:d7:c1:0c:b1:84:d1:71:ba:36:d4:a8:1c:76:
a6:d6:52:be:bc:6b:ff:5a:be:25:94:8c:d8:56:b1:e8:32:22:
68:bd:fa:7e:b9:d7:a9:a1:4f:8b:b6:87:b1:85:7a:7e:41:ce:
a5:d7:98:d8:c6:8c:be:80:86:e8:27:8f:b6:0f:20:a1:b5:56:
0a:ed:67:a6:33:77:c3:94:7d:ca:9e:31:ac:58:5d:27:48:8e:
2e:15:0c:f3:fb:3b:38:f5:c5:7d:ae:86:02:06:ce:92:d5:07:
40:62:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:28:13 2026 by rpki-client