This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323635373334.roa
File: 323830313a31613a333030303a3a2f34382d3438203d3e20323635373334.roa (raw, json)
Hash identifier: nA/E8xxAklRyRC8daX6eJnEfNioqKxPMM60rEetf42g=
Subject key identifier: 53:CC:94:37:25:37:BD:5C:8F:3B:92:93:C3:9B:D6:71:B3:7A:6A:01
Certificate issuer: /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial: 3D443C5CF846273860487AD44C8373C85B40DD7A
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323635373334.roa
Signing time: Tue 06 Jan 2026 19:32:02 +0000
ROA not before: Tue 06 Jan 2026 19:27:02 +0000
ROA not after: Tue 05 Jan 2027 19:32:02 +0000
asID: 265734
IP address blocks: 2801:1a:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 13:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:44:3c:5c:f8:46:27:38:60:48:7a:d4:4c:83:73:c8:5b:40:dd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Validity
Not Before: Jan 6 19:27:02 2026 GMT
Not After : Jan 5 19:32:02 2027 GMT
Subject: CN=53CC94372537BD5C8F3B9293C39BD671B37A6A01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:3d:ce:dd:8a:c2:ab:10:5a:db:8f:79:3c:
16:16:a2:a1:5e:f8:d8:53:11:80:e0:dc:aa:67:ad:
da:7a:eb:b5:6b:8d:2a:f2:bc:aa:df:06:5e:2a:60:
11:27:19:0e:d6:00:9c:05:f8:94:fa:b2:b1:cb:20:
a9:21:55:39:fd:19:c4:46:8b:c1:6c:83:1c:6d:ae:
8a:a3:4b:43:30:7b:aa:fe:c1:4b:e3:75:52:6e:01:
d1:54:62:93:f0:9c:68:d8:83:a1:94:d0:88:c2:0f:
cc:d3:48:73:c1:14:8c:a8:b0:b3:51:6f:f3:1f:cb:
fd:4f:0b:09:6e:1a:c5:fa:d2:68:19:a2:90:06:d6:
54:57:33:0e:26:88:ea:1c:e6:d6:02:7b:78:76:aa:
cc:70:89:b5:37:a0:bd:39:96:fe:a6:e9:03:c7:af:
bf:74:8d:f2:e2:f4:1c:4c:81:22:67:73:7a:f2:c9:
8d:18:ac:5b:81:fb:01:52:b4:d8:b0:2d:4f:92:4a:
78:f0:3e:03:03:a0:03:a5:a5:d5:6f:28:c5:57:d2:
9b:8d:6d:b4:c9:a9:51:87:3f:b5:54:1e:cc:96:b1:
93:50:c6:0f:f0:d6:4d:4a:35:0d:f1:b8:16:f8:c4:
e7:6d:37:0a:80:0b:16:9e:84:a1:9b:05:76:77:31:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CC:94:37:25:37:BD:5C:8F:3B:92:93:C3:9B:D6:71:B3:7A:6A:01
X509v3 Authority Key Identifier:
keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323635373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a:3000::/48
Signature Algorithm: sha256WithRSAEncryption
7a:6c:dd:94:7c:8b:82:07:b9:5e:30:c8:c6:63:f4:c8:fb:91:
e6:d5:c1:5c:30:56:14:33:ff:65:c6:ae:0e:ab:f7:2e:7b:51:
6f:5a:ae:4f:d9:5c:54:1c:7e:97:d9:da:4c:8d:70:55:5f:8e:
e3:9e:77:eb:7b:c6:23:17:01:c4:63:f9:dd:9f:99:e7:52:4e:
68:2d:52:5c:21:db:03:f2:9e:d8:29:31:cc:0c:27:0d:4e:c9:
be:5e:57:76:10:84:d5:bc:52:3e:31:df:7c:30:f9:d2:ab:59:
4e:4c:54:31:17:54:a6:83:e3:1f:4f:e9:a5:33:ea:01:77:7e:
6a:be:67:54:50:5e:7a:fb:61:37:63:28:49:b7:ce:17:e7:aa:
66:54:77:99:5b:4e:06:7f:0d:cd:a8:de:41:50:07:12:ce:b7:
76:24:a3:d4:be:93:7c:59:9b:21:c7:30:4e:e8:76:68:fc:34:
b4:db:94:91:0b:68:a7:23:5f:bf:2e:cf:b5:f0:43:58:89:4a:
94:68:4b:9e:10:f7:43:64:3b:34:f5:bf:fd:20:08:e4:0a:11:
31:6d:4e:7f:53:08:b8:a0:1a:20:a4:bb:a9:90:90:87:b2:52:
4c:ca:0e:58:f0:16:c8:16:eb:44:53:f4:34:dd:a8:5c:8b:42:
72:ed:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:19:13 2026 by rpki-client