This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237393836.roa
File: 323830303a3330303a3a2f33322d313238203d3e203237393836.roa (raw, json)
Hash identifier: sQBgjwANeu5vG1uTklznzGi5kIjIs9e2iWYqENAjwDE=
Subject key identifier: E1:BE:8C:6F:7A:9A:4B:3A:D6:98:F6:DB:97:D3:5F:5C:4E:58:50:8D
Certificate issuer: /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial: 29A122C7BD738EC393B0625AF0D5376368A533FB
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237393836.roa
Signing time: Tue 06 Jan 2026 20:48:14 +0000
ROA not before: Tue 06 Jan 2026 20:43:14 +0000
ROA not after: Tue 05 Jan 2027 20:48:14 +0000
asID: 27986
IP address blocks: 2800:300::/32 maxlen: 128
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 14:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a1:22:c7:bd:73:8e:c3:93:b0:62:5a:f0:d5:37:63:68:a5:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Validity
Not Before: Jan 6 20:43:14 2026 GMT
Not After : Jan 5 20:48:14 2027 GMT
Subject: CN=E1BE8C6F7A9A4B3AD698F6DB97D35F5C4E58508D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:e9:49:4d:7e:ba:25:27:ca:b5:37:dd:65:
e9:04:d8:a0:f9:6c:2e:91:7e:ee:1f:9a:75:80:b2:
71:93:41:31:56:84:87:55:0a:ab:0d:59:69:a0:27:
42:18:f6:b9:0d:c4:d2:02:43:13:0a:b5:93:32:11:
d5:49:b5:6e:bf:07:c7:e0:96:e3:47:ae:3d:a2:fc:
c2:e4:a2:ce:71:f7:3f:20:9f:0b:50:dc:6b:41:c4:
98:86:cc:6a:b4:ed:0d:a4:fe:7f:29:5d:af:62:9d:
08:68:39:e4:e7:82:ef:03:73:e2:33:dd:d2:f7:8f:
5e:ce:aa:ef:2a:35:00:d1:8d:6d:b7:c9:9b:b5:ec:
bf:21:63:b8:35:f9:1b:0e:2c:43:5a:fe:e6:c7:04:
55:7f:85:04:1c:3d:c7:bd:5e:89:8e:36:97:67:16:
60:ad:ea:64:b7:2b:d5:1f:f8:7a:6a:80:ae:28:03:
d4:ca:2f:4a:20:d2:02:d8:43:4c:95:8f:9d:3a:99:
96:5f:7a:51:68:23:a1:c0:26:5a:a8:81:71:4f:a6:
94:94:16:ca:81:2f:86:ae:c2:48:d2:69:ff:51:50:
56:bc:9d:ea:19:04:19:86:f7:95:4c:6b:ce:6f:f4:
3f:e5:d1:fe:28:27:dc:82:04:a5:a6:18:b0:90:c1:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BE:8C:6F:7A:9A:4B:3A:D6:98:F6:DB:97:D3:5F:5C:4E:58:50:8D
X509v3 Authority Key Identifier:
keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237393836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:300::/32
Signature Algorithm: sha256WithRSAEncryption
a1:61:4d:da:04:2d:3c:35:cf:d9:07:70:b3:e9:37:3d:d2:e5:
6d:39:d9:35:83:12:da:ac:f5:d0:91:5d:10:cf:4b:54:4a:e4:
ca:3c:f1:5f:78:c4:f3:ae:fe:f4:32:f9:3a:5c:f4:3c:e7:c1:
cc:7f:d6:40:f8:01:66:b7:e7:9e:24:46:6b:7f:76:ef:46:e1:
6d:34:33:bd:5c:10:c6:55:6d:83:c8:0e:fe:06:db:d3:64:af:
9f:41:7b:25:dc:9c:e5:02:49:8a:93:0e:26:fa:41:90:29:a1:
77:66:d8:5c:0b:11:a0:71:39:7f:6f:ce:b8:e0:4e:9e:63:99:
28:97:47:3a:c7:5f:90:f4:1a:fc:84:b0:9d:ff:b0:54:6c:60:
16:6a:99:fb:7f:a8:33:78:61:ce:0c:81:15:ff:10:57:fc:6c:
3a:70:9d:2f:b9:6c:46:65:49:b0:10:62:87:fc:85:ee:be:46:
c3:f5:23:9a:72:6d:ce:34:08:9e:0f:17:25:60:cf:53:6f:57:
1e:3a:7e:ea:6c:0a:4c:83:fe:30:41:9b:e2:a8:1c:f2:14:64:
b0:a7:af:56:05:8b:e8:c7:d5:3d:c7:30:93:17:41:44:ac:00:
6c:42:16:25:92:1f:24:6e:15:76:45:b2:58:49:4f:72:7e:e6:
1c:84:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:20:08 2026 by rpki-client