This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/323830313a31623a623030303a3a2f34382d3438203d3e20323636373131.roa
File: 323830313a31623a623030303a3a2f34382d3438203d3e20323636373131.roa (raw, json)
Hash identifier: w59cnuXBmFbHylZ8vL82j2CuMdIbYY6V1va9i/5oSh4=
Subject key identifier: 8C:2C:C6:A9:2E:BF:B4:BE:06:0F:1A:61:76:32:04:76:8F:F6:E1:70
Certificate issuer: /CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Certificate serial: 4945BE31CAC8C5AD27F5FABC066B2873E8DD2340
Authority key identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/323830313a31623a623030303a3a2f34382d3438203d3e20323636373131.roa
Signing time: Tue 06 Jan 2026 19:37:48 +0000
ROA not before: Tue 06 Jan 2026 19:32:48 +0000
ROA not after: Tue 05 Jan 2027 19:37:48 +0000
asID: 266711
IP address blocks: 2801:1b:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 01:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:45:be:31:ca:c8:c5:ad:27:f5:fa:bc:06:6b:28:73:e8:dd:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Validity
Not Before: Jan 6 19:32:48 2026 GMT
Not After : Jan 5 19:37:48 2027 GMT
Subject: CN=8C2CC6A92EBFB4BE060F1A61763204768FF6E170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:72:85:19:4a:b0:cd:1c:e8:08:86:55:f5:
27:97:c3:87:53:14:03:a2:bb:79:20:3d:82:cc:20:
bc:c2:96:f4:06:cf:5a:78:f0:b8:d8:ea:4c:fd:e2:
3f:cb:cc:f4:97:34:78:18:5f:a9:44:32:6d:da:51:
48:cc:ea:1d:64:4d:30:d8:18:d0:40:4d:9a:92:a1:
7e:78:c2:90:cd:08:80:7f:7f:d8:c7:fb:3b:43:7e:
a4:ff:0a:c8:9f:20:63:96:d3:7f:cd:3d:ef:2b:8b:
6a:48:51:22:ed:c1:30:98:e1:47:b3:51:24:82:1f:
8a:4e:c9:89:11:13:87:19:71:5f:12:67:ee:a6:3b:
00:07:32:82:32:d5:a7:95:20:f4:91:d2:42:b7:ae:
c1:e3:0e:9f:df:aa:ee:c1:51:c5:42:70:17:7f:77:
13:28:f1:39:86:16:89:b1:63:b0:e8:dd:ee:00:52:
9c:5f:e7:13:52:e0:44:fe:4a:73:54:4a:7d:d1:d3:
5a:0b:31:ac:ab:c5:e2:b1:40:16:f5:f4:8d:3e:76:
12:f2:3d:84:fa:cb:d8:a4:92:b3:09:eb:6d:df:f9:
70:40:62:29:92:e5:51:27:ec:0b:d8:94:4b:e4:65:
76:4b:0c:74:1a:d6:8b:02:5c:80:11:38:b1:53:32:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:C6:A9:2E:BF:B4:BE:06:0F:1A:61:76:32:04:76:8F:F6:E1:70
X509v3 Authority Key Identifier:
keyid:8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/323830313a31623a623030303a3a2f34382d3438203d3e20323636373131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1b:b000::/48
Signature Algorithm: sha256WithRSAEncryption
4e:e3:83:1d:8f:41:19:c7:bd:78:5b:c8:ba:54:81:ce:73:e4:
43:e3:2f:75:05:28:08:21:fd:53:5c:13:7b:82:0e:2b:b6:72:
97:5c:cb:a9:a0:a8:ff:79:c5:59:cb:b0:56:a2:af:d7:e0:ab:
60:17:28:20:fc:a2:03:5d:41:39:d8:a4:12:4f:3c:d2:b0:5e:
dd:58:b6:39:61:9f:48:c4:43:d0:df:d5:27:90:aa:17:8d:9a:
34:a3:31:fc:73:ed:e0:fc:87:a3:13:b6:76:27:9d:29:b3:97:
46:3d:9e:17:dc:29:bf:a0:33:fe:9b:dd:9c:eb:3e:aa:50:60:
63:0a:6d:0a:a7:c6:23:68:67:a3:60:67:5f:f4:f5:c2:01:93:
8b:50:b1:0c:2e:e2:e6:17:2d:c9:51:44:33:ba:a0:75:2b:8c:
01:0e:de:ad:7a:90:ff:a0:e6:ee:47:09:87:95:41:a1:45:48:
98:4a:4e:dc:d9:bd:b8:03:64:bb:01:43:bd:1f:89:69:5a:17:
00:38:02:a8:d1:c9:ea:e0:58:80:91:e9:72:a6:3d:67:87:ca:
80:46:77:d3:02:78:84:a6:ef:c8:96:a8:50:b9:55:d0:87:4b:
c5:d3:7f:d2:ac:0c:59:8c:a2:38:73:67:47:8b:05:7b:4e:cf:
ee:f2:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:38:39 2026 by rpki-client