This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa
File: 323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier: H+UzLJ+JwLP/Qp64A25TAGp/JXg9vWhmm6j2UyxvZsM=
Subject key identifier: DA:F0:E1:0E:39:AF:40:25:DC:F2:22:08:D1:70:C1:83:D5:7F:38:77
Certificate issuer: /CN=9E00446F94CC33DA37B373FAFF13F7E5B22B8813
Certificate serial: 6DBDBE66428A73B4748891924360CB9D5FDD5E70
Authority key identifier: 9E:00:44:6F:94:CC:33:DA:37:B3:73:FA:FF:13:F7:E5:B2:2B:88:13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa
Signing time: Mon 15 Dec 2025 14:55:02 +0000
ROA not before: Mon 15 Dec 2025 14:50:02 +0000
ROA not after: Mon 14 Dec 2026 14:55:02 +0000
asID: 13489
IP address blocks: 2801:1d:8800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.crl
rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 04:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:bd:be:66:42:8a:73:b4:74:88:91:92:43:60:cb:9d:5f:dd:5e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E00446F94CC33DA37B373FAFF13F7E5B22B8813
Validity
Not Before: Dec 15 14:50:02 2025 GMT
Not After : Dec 14 14:55:02 2026 GMT
Subject: CN=DAF0E10E39AF4025DCF22208D170C183D57F3877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:7e:83:10:a0:3a:ae:46:aa:73:44:39:ec:
35:79:0f:9c:86:17:1b:b4:6f:40:e2:57:bc:3a:a1:
d3:e1:d4:98:e3:ff:9b:7b:b6:a2:a8:00:5a:75:66:
b8:83:8b:48:3f:ab:d7:ce:4f:33:d1:53:97:42:7a:
7c:1f:d8:25:fd:aa:6d:e0:67:80:00:c8:a9:f7:bf:
e4:31:be:f0:9f:e9:d0:50:1b:70:d9:ea:6d:50:e0:
04:ed:68:1a:ad:18:83:08:b4:84:bd:57:2c:fc:30:
8c:1d:b1:76:11:4c:37:9c:36:68:58:56:78:6e:21:
c6:ac:54:ea:27:3b:d9:a1:44:48:c5:52:4a:6e:29:
b9:47:d2:2c:fe:59:f8:b2:51:e2:a0:d6:fb:a1:1a:
68:39:e1:68:12:49:fd:4c:c7:fd:ec:b7:a0:de:26:
6c:3a:07:31:23:9c:c3:ae:6b:b4:58:c8:e1:ca:7a:
67:c5:f9:fa:b6:9b:57:2d:4a:ef:3f:c4:c0:c2:c1:
c2:4d:22:e2:07:79:d9:70:ca:13:61:cd:b8:db:30:
44:d9:1e:de:9b:9a:98:85:f7:c1:84:29:93:bf:e0:
27:98:15:0c:43:c2:ca:dc:34:8f:af:2a:84:f9:65:
de:80:d3:d4:26:d2:ff:90:c8:68:80:84:d7:76:77:
77:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:E1:0E:39:AF:40:25:DC:F2:22:08:D1:70:C1:83:D5:7F:38:77
X509v3 Authority Key Identifier:
keyid:9E:00:44:6F:94:CC:33:DA:37:B3:73:FA:FF:13:F7:E5:B2:2B:88:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1d:8800::/48
Signature Algorithm: sha256WithRSAEncryption
8d:48:f8:18:36:84:37:e5:cd:b2:67:dd:bd:1b:ff:dd:39:fd:
47:16:bd:57:5a:41:06:45:26:c7:eb:66:5e:40:b6:f2:bf:48:
c9:f0:8e:df:2d:62:31:c0:b2:bc:e0:b3:d7:cb:86:93:92:9d:
f3:39:66:2a:4b:8b:21:d3:82:f4:77:3b:95:a4:19:bb:36:f6:
cf:d0:10:a7:62:c0:06:64:c6:33:27:26:d7:72:a7:ef:dc:55:
00:99:cb:a2:3d:c4:1e:d6:f2:26:38:e5:18:02:9e:30:27:83:
dc:a1:99:c6:82:9e:58:3b:39:38:4f:2b:6c:e0:fe:80:31:af:
e4:a5:8b:96:38:57:ae:f3:f5:4d:a1:2a:6f:14:b0:7d:f3:b8:
be:75:14:7b:c9:8f:ff:84:55:9f:3e:87:7b:68:a7:f0:56:9a:
11:1b:f2:b4:6c:c0:d9:7b:b2:9d:09:d4:39:50:34:02:55:29:
54:a1:34:ac:87:f8:8f:8f:6a:7a:0a:c2:cd:93:85:5c:79:b3:
c7:fb:38:c3:76:ed:2a:56:f9:03:b0:35:32:17:e5:e7:13:4e:
79:44:d4:3e:e9:1e:9a:9e:8e:d2:16:17:36:4a:f2:43:6e:11:
7c:97:ad:cc:85:bb:fd:81:4c:75:ac:8c:2e:ca:58:64:a4:1f:
81:3e:80:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:16:30 2025 by rpki-client