This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/323830333a346665303a3a2f33322d3336203d3e20323731373735.roa
File: 323830333a346665303a3a2f33322d3336203d3e20323731373735.roa (raw, json)
Hash identifier: 3WGcR66i2C16p0s4kBjmeBRCmcf45T7GWyEcEbfGB5M=
Subject key identifier: CD:3A:B7:57:C7:9E:EB:87:23:5C:25:30:73:DF:95:0E:00:3B:EE:8B
Certificate issuer: /CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902
Certificate serial: 7A6406EFBAE89C5DBA35CDDC5E03A47DD4FD4C35
Authority key identifier: 22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/323830333a346665303a3a2f33322d3336203d3e20323731373735.roa
Signing time: Tue 06 Jan 2026 19:22:24 +0000
ROA not before: Tue 06 Jan 2026 19:17:24 +0000
ROA not after: Tue 05 Jan 2027 19:22:24 +0000
asID: 271775
IP address blocks: 2803:4fe0::/32 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.crl
rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Jan 2026 14:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:64:06:ef:ba:e8:9c:5d:ba:35:cd:dc:5e:03:a4:7d:d4:fd:4c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902
Validity
Not Before: Jan 6 19:17:24 2026 GMT
Not After : Jan 5 19:22:24 2027 GMT
Subject: CN=CD3AB757C79EEB87235C253073DF950E003BEE8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:27:20:00:43:48:17:aa:ef:41:59:fe:ea:
60:ab:77:ca:20:7a:65:36:8b:2d:35:bf:e4:b1:b3:
c6:30:d6:a2:0e:1d:22:00:a5:e2:e2:1f:59:27:13:
a0:0e:fc:eb:ba:7d:0a:d8:d9:f6:7f:6a:ce:47:5d:
04:a7:b1:63:44:9a:ce:64:82:34:ba:83:06:7b:d1:
35:3c:b0:98:4d:6f:6f:7e:66:c8:93:31:2b:ab:be:
71:a5:87:fd:e7:f3:a3:f2:d2:4e:12:25:ed:1a:86:
6d:36:a4:9d:c2:4c:10:68:77:d4:6a:1c:b9:86:de:
fc:db:64:42:4a:1c:f7:8d:1a:b4:0f:fb:a5:5b:8d:
10:53:93:89:89:fe:aa:77:4f:2c:8b:3f:56:4a:4a:
ae:14:96:1c:a7:7e:53:93:83:81:ba:20:55:c1:24:
39:10:fa:59:d9:93:74:6a:e6:32:42:eb:df:9e:9e:
58:79:eb:4f:93:4b:7d:5a:37:8f:64:ac:0d:c4:7b:
06:0e:b1:7e:29:09:d7:24:14:50:b1:51:2b:75:ab:
93:a3:7a:b9:da:b0:eb:7c:fe:66:86:f9:51:9c:1f:
ab:58:73:48:8e:06:9f:d8:f4:d5:1d:c9:e2:72:cb:
bd:2e:7f:5c:c0:07:28:67:d8:b7:97:34:5f:8f:b1:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:B7:57:C7:9E:EB:87:23:5C:25:30:73:DF:95:0E:00:3B:EE:8B
X509v3 Authority Key Identifier:
keyid:22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/323830333a346665303a3a2f33322d3336203d3e20323731373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4fe0::/32
Signature Algorithm: sha256WithRSAEncryption
53:44:54:5d:61:74:00:ae:d3:50:e8:66:be:21:3c:ad:18:8d:
0e:20:76:e1:aa:af:a1:87:49:38:3b:0b:55:e2:0f:a5:90:3f:
83:41:7f:eb:08:fa:7c:9f:24:71:71:21:d7:03:e7:ae:3c:f7:
c1:dd:6a:4e:81:62:82:79:c6:a7:4c:27:d1:55:6f:9d:44:0a:
d6:5e:22:2e:7a:c9:d8:83:9f:ee:36:47:ae:1a:60:a0:d6:98:
14:0d:88:0d:f9:34:60:d3:d2:cf:21:75:df:d4:33:a8:8d:c6:
b7:b9:9d:bf:8c:fd:11:ef:99:f8:18:e2:aa:4e:aa:96:e6:19:
49:72:78:67:7f:5c:5d:78:8e:79:9b:23:34:17:2f:00:da:27:
8b:7d:ff:27:4b:33:ca:03:b6:4c:75:bf:dc:d2:b3:a7:50:01:
cb:ca:78:4d:9c:5f:03:79:92:07:e6:7d:5c:e9:f2:28:94:1e:
3f:ed:e1:c7:b9:b0:74:0a:86:e1:94:6c:72:02:43:24:9e:10:
91:a5:f4:2e:de:05:0c:5b:a6:54:60:90:22:43:61:58:b3:32:
3a:85:0c:23:0d:87:b6:b7:cd:61:89:e3:4e:f0:60:79:c5:8f:
21:af:9a:ae:4a:68:92:d3:15:7d:8f:2a:19:e0:e4:ea:0f:f1:
35:99:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:12:45 2026 by rpki-client