This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e20323632353839.roa
File: 323830303a3635303a343a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier: 3YemuzYrxV9gVnHVHsEXsd+Q0MkN/g/IpJchDOektaE=
Subject key identifier: 8B:2F:61:3B:34:52:3F:29:BE:AD:01:1A:62:5F:5B:68:BC:CB:53:ED
Certificate issuer: /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial: 28B5200FA717229BD2614E2932101CC6707B3817
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e20323632353839.roa
Signing time: Tue 06 Jan 2026 19:26:16 +0000
ROA not before: Tue 06 Jan 2026 19:21:16 +0000
ROA not after: Tue 05 Jan 2027 19:26:16 +0000
asID: 262589
IP address blocks: 2800:650:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Jan 2026 20:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b5:20:0f:a7:17:22:9b:d2:61:4e:29:32:10:1c:c6:70:7b:38:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
Validity
Not Before: Jan 6 19:21:16 2026 GMT
Not After : Jan 5 19:26:16 2027 GMT
Subject: CN=8B2F613B34523F29BEAD011A625F5B68BCCB53ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:78:b8:a4:9c:44:0c:62:28:6d:64:fe:e2:
56:fe:a9:a7:a0:f0:d9:7c:a9:04:a2:36:b0:8c:e6:
0c:2f:36:00:dc:b5:8f:93:4e:c1:77:15:8b:93:c8:
6e:f8:ab:19:35:e4:42:b9:9a:3d:f8:45:df:59:de:
32:1b:10:69:a7:f8:95:15:89:d1:9a:b9:fc:09:6e:
a3:5d:2b:63:a6:ce:7d:ca:43:6f:0f:2f:bd:ea:87:
b7:0e:3e:58:5e:6d:f2:6f:c1:df:3d:30:74:16:68:
2a:c1:00:3e:d0:fa:16:8f:02:20:65:7c:a7:ce:46:
b4:bc:64:db:db:ab:ae:dc:77:85:ab:62:af:ac:a1:
db:64:bb:e9:e8:df:ea:d2:9e:9d:8e:5c:04:57:45:
f7:c6:8e:00:2a:92:94:fe:c8:e4:07:2a:82:fb:50:
37:2d:a4:5a:d7:b9:38:a2:03:32:b6:ab:69:33:23:
d5:79:32:c9:af:38:f2:80:62:6b:05:59:06:a7:0b:
d7:b6:b4:d5:23:f9:74:41:93:58:32:8c:0e:62:dd:
d8:1b:f7:00:fa:bd:a4:9f:e4:ba:49:31:3c:33:32:
c8:33:8e:c8:dc:88:05:0e:61:fa:4a:6d:74:61:e6:
cd:fe:53:28:b2:eb:01:4a:23:95:67:c5:87:66:76:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2F:61:3B:34:52:3F:29:BE:AD:01:1A:62:5F:5B:68:BC:CB:53:ED
X509v3 Authority Key Identifier:
keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:650:4::/48
Signature Algorithm: sha256WithRSAEncryption
11:8f:eb:aa:b2:b3:b2:74:60:2f:14:73:f2:59:26:67:06:84:
4a:dc:e5:b8:f3:b0:1f:64:39:fd:dc:1c:fe:c3:73:45:07:43:
70:75:4c:9e:b7:01:1e:62:2b:36:b8:48:2c:b8:f2:9f:dd:b1:
79:89:7b:ce:7a:51:bc:15:dd:41:ee:b2:0b:61:f4:0b:cd:a5:
b2:d1:26:3f:03:1e:36:32:67:51:56:66:dd:aa:53:43:48:d0:
f7:9e:1e:07:59:f9:40:69:68:7a:55:8d:14:d5:0a:19:52:16:
33:86:2e:96:0a:da:b8:2a:e1:13:4f:0f:69:3d:93:b0:1c:3f:
7a:0b:fe:b0:8f:c2:63:8f:85:e9:2f:15:c5:2b:13:1c:54:c8:
2c:0f:e9:e8:b5:65:b8:20:92:0d:b3:3c:2f:7b:52:ab:ab:bc:
72:46:1e:85:57:c8:2f:fb:5c:b4:e7:4b:51:cd:0a:e4:e7:9e:
89:1b:98:fe:b4:79:22:3d:a4:a7:e6:90:98:55:92:da:02:05:
84:b8:85:d3:fa:0e:c9:f3:5b:c6:fb:79:6b:a1:fd:ee:bd:c3:
f5:06:05:21:94:84:96:89:33:af:e9:55:19:2d:0c:c3:f1:15:
d3:b9:5c:d5:dd:3d:30:82:d8:98:06:e2:a3:7a:94:9c:76:a5:
36:65:00:3d
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUKLUgD6cXIpvSYU4pMhAcxnB7OBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUyMjU5MzUyNjBC
ODM3RTc0RDAeFw0yNjAxMDYxOTIxMTZaFw0yNzAxMDUxOTI2MTZaMDMxMTAvBgNV
BAMTKDhCMkY2MTNCMzQ1MjNGMjlCRUFEMDExQTYyNUY1QjY4QkNDQjUzRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JHi4pJxEDGIobWT+4lb+qaeg
8Nl8qQSiNrCM5gwvNgDctY+TTsF3FYuTyG74qxk15EK5mj34Rd9Z3jIbEGmn+JUV
idGaufwJbqNdK2Omzn3KQ28PL73qh7cOPlhebfJvwd89MHQWaCrBAD7Q+haPAiBl
fKfORrS8ZNvbq67cd4WrYq+sodtku+no3+rSnp2OXARXRffGjgAqkpT+yOQHKoL7
UDctpFrXuTiiAzK2q2kzI9V5MsmvOPKAYmsFWQanC9e2tNUj+XRBk1gyjA5i3dgb
9wD6vaSf5LpJMTwzMsgzjsjciAUOYfpKbXRh5s3+Uyiy6wFKI5VnxYdmdvuHAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUiy9hOzRSPym+rQEaYl9baLzLU+0wHwYDVR0j
BBgwFoAUjp6Jat+AQeB6tnNSJZNSYLg3500wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQy
RUUyRDlCQTIzNDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFF
MDdBQjY3MzUyMjU5MzUyNjBCODM3RTc0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTlFODk2QURGODA0MUUwN0FC
NjczNTIyNTkzNTI2MEI4MzdFNzRELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFCNkVBNDE0RTk0MkVFMkQ5QkEy
MzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzMyMzgzMDMwM2EzNjM1MzAzYTM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzUzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAAG
UAAEMA0GCSqGSIb3DQEBCwUAA4IBAQARj+uqsrOydGAvFHPyWSZnBoRK3OW487Af
ZDn93Bz+w3NFB0NwdUyetwEeYis2uEgsuPKf3bF5iXvOelG8Fd1B7rILYfQLzaWy
0SY/Ax42MmdRVmbdqlNDSND3nh4HWflAaWh6VY0U1QoZUhYzhi6WCtq4KuETTw9p
PZOwHD96C/6wj8Jjj4XpLxXFKxMcVMgsD+notWW4IJINszwve1Krq7xyRh6FV8gv
+1y050tRzQrk556JG5j+tHkiPaSn5pCYVZLaAgWEuIXT+g7J81vG+3lrof3uvcP1
BgUhlISWiTOv6VUZLQzD8RXTuVzV3T0wgtiYBuKjepScdqU2ZQA9
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:00:40 2026 by rpki-client