This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e20323635353334.roa
File: 323830363a3331313a3a2f33322d3332203d3e20323635353334.roa (raw, json)
Hash identifier: Jc6MXflikrKzRla0j77J8aKhzT7fY9ST7NmF+yr11Qs=
Subject key identifier: 2E:A2:0E:AD:B2:D1:E7:A5:C2:1A:EB:88:C3:C0:63:94:CC:77:19:A0
Certificate issuer: /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial: 719EF9771497C39D22F985A0CE8AA7DD8FC1AE40
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e20323635353334.roa
Signing time: Tue 06 Jan 2026 19:01:45 +0000
ROA not before: Tue 06 Jan 2026 18:56:45 +0000
ROA not after: Tue 05 Jan 2027 19:01:45 +0000
asID: 265534
IP address blocks: 2806:311::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 09:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9e:f9:77:14:97:c3:9d:22:f9:85:a0:ce:8a:a7:dd:8f:c1:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Validity
Not Before: Jan 6 18:56:45 2026 GMT
Not After : Jan 5 19:01:45 2027 GMT
Subject: CN=2EA20EADB2D1E7A5C21AEB88C3C06394CC7719A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:7e:70:27:22:90:85:d7:dc:e8:53:15:44:
df:ae:70:76:7e:d2:ac:e4:55:24:7c:ca:70:f7:37:
97:44:00:85:24:88:6c:4c:a2:e9:35:eb:fb:30:12:
bd:d2:14:cf:99:cd:7e:7c:5c:96:aa:bb:51:7b:ac:
68:bc:88:4e:4d:78:d3:66:45:05:5f:91:27:26:46:
ce:c7:0a:10:b1:cb:70:12:a7:7d:a5:4f:08:ff:ce:
b6:43:c9:26:9a:44:db:65:69:1c:98:6a:1e:c9:77:
b3:82:00:45:16:60:c4:1f:fb:5f:97:c7:90:ba:b0:
b7:ed:96:d5:60:40:6d:a1:0a:e1:1a:82:73:a3:45:
f8:e7:56:65:6e:ea:a6:40:20:11:40:68:dc:98:68:
c1:ae:8d:54:d1:ef:9f:ec:96:85:db:70:53:c9:01:
8d:00:3a:9e:16:97:fb:75:03:d4:7d:04:4f:da:87:
81:91:0b:c1:8e:36:ec:f7:8b:d8:72:97:53:c6:ba:
9f:25:88:3d:dd:99:96:e3:d7:b2:f8:13:0f:c1:38:
9b:ed:82:29:ae:dc:37:0a:47:19:a2:87:5b:03:1c:
9e:d7:f6:8e:bf:f6:b7:8e:2b:5d:41:ec:68:05:99:
6e:11:1a:99:44:51:0d:20:c6:74:4e:60:03:6d:ff:
50:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A2:0E:AD:B2:D1:E7:A5:C2:1A:EB:88:C3:C0:63:94:CC:77:19:A0
X509v3 Authority Key Identifier:
keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e20323635353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:311::/32
Signature Algorithm: sha256WithRSAEncryption
16:ed:5b:ae:35:04:b4:5a:db:3a:72:96:87:9d:81:b5:3b:ed:
00:d2:22:dc:ea:57:ae:bd:3c:c0:55:7a:e9:e6:51:c5:67:a1:
09:0f:df:2c:4e:88:f2:0c:5c:da:c8:ea:ea:75:a2:04:36:23:
d3:09:67:70:37:75:b7:3a:65:be:c5:9c:a1:b8:b5:b6:df:d7:
48:db:78:d2:a4:62:72:0c:56:34:5c:4a:97:ca:b1:04:45:87:
3d:6b:1f:f5:fd:e8:d9:c1:44:e9:f9:c3:77:ed:ab:c4:9c:54:
70:bd:f9:d4:f6:eb:8d:39:e8:9e:17:7c:34:6c:6c:9e:a5:25:
c7:78:be:43:2d:33:62:d4:4c:4b:f4:8d:2c:15:1f:8c:40:f0:
2e:40:83:14:46:38:6c:79:3e:2c:4d:b8:4e:74:d0:5f:af:fb:
b3:5f:6f:6b:a5:bf:6b:ed:60:f5:ba:8a:3e:b7:7c:26:09:8e:
24:51:63:09:37:89:36:94:55:b7:15:c8:89:ad:88:00:00:ac:
a1:ef:3d:32:6a:f1:23:87:e1:7b:a0:d6:ff:cc:d8:9b:ee:55:
2a:dd:bd:9a:05:15:34:1f:76:a2:fd:39:db:1c:eb:04:f5:a6:
d0:a4:45:bb:41:87:4d:90:bb:48:ea:d6:be:43:d9:86:ab:47:
e6:ee:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:38:28 2026 by rpki-client