This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/323830363a3266343a3a2f33322d3438203d3e20323635353430.roa
File: 323830363a3266343a3a2f33322d3438203d3e20323635353430.roa (raw, json)
Hash identifier: MIlukVRSAMaadnmPLmjsiN5xzpZn5ju79NBoqsTs4ZY=
Subject key identifier: 99:AE:A9:70:42:90:F5:09:23:52:3F:80:C7:AE:C6:28:4E:41:CE:D6
Certificate issuer: /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial: 787EEF388C3412B53A53511EC3798DC56E5B6FB8
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/323830363a3266343a3a2f33322d3438203d3e20323635353430.roa
Signing time: Tue 06 Jan 2026 19:42:41 +0000
ROA not before: Tue 06 Jan 2026 19:37:41 +0000
ROA not after: Tue 05 Jan 2027 19:42:41 +0000
asID: 265540
IP address blocks: 2806:2f4::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:7e:ef:38:8c:34:12:b5:3a:53:51:1e:c3:79:8d:c5:6e:5b:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Validity
Not Before: Jan 6 19:37:41 2026 GMT
Not After : Jan 5 19:42:41 2027 GMT
Subject: CN=99AEA9704290F50923523F80C7AEC6284E41CED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:e2:8d:f4:e5:47:54:61:ce:6e:4d:9c:bc:
03:26:73:91:ef:00:8a:81:de:05:ec:1a:aa:46:99:
1b:87:f0:5d:d7:80:ef:19:6b:09:77:2f:95:9b:eb:
d0:37:d4:15:97:1b:fc:c3:94:1c:28:38:85:0a:08:
54:13:95:af:39:40:6e:a2:90:a5:1b:97:1c:d6:25:
a0:e3:fc:44:57:2c:6e:58:ed:13:89:e2:2c:73:28:
78:2d:19:55:08:12:6b:e8:53:d6:46:b4:de:c4:71:
fb:2e:d6:83:df:19:a6:40:18:30:47:74:13:9d:4b:
af:bc:97:3e:ce:c9:2a:fd:10:34:82:d9:80:a1:7f:
14:4e:5b:c7:fb:d8:ad:5d:5e:1b:a0:74:58:87:4b:
2b:2a:29:cd:c8:ba:c0:5d:5a:30:4c:81:00:47:c6:
d3:75:c4:30:b1:1e:1a:0a:1c:09:93:12:41:0a:01:
2d:20:3f:af:83:b6:8a:9d:51:da:f9:63:00:db:b4:
18:82:d3:93:dd:ce:4e:52:f1:90:e3:ad:ef:8a:d7:
0e:67:23:89:4d:01:c1:af:ab:21:0f:e2:5b:bf:5f:
b7:b6:af:a5:74:82:a2:8b:1c:ca:d7:ec:b8:f0:2f:
1c:cb:1f:f0:67:fa:9c:ad:47:a2:25:e6:ff:15:2d:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:A9:70:42:90:F5:09:23:52:3F:80:C7:AE:C6:28:4E:41:CE:D6
X509v3 Authority Key Identifier:
keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/323830363a3266343a3a2f33322d3438203d3e20323635353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:2f4::/32
Signature Algorithm: sha256WithRSAEncryption
56:51:2a:bb:d4:42:ed:88:d3:c5:58:b7:99:9e:56:b0:b6:a1:
b5:4b:6d:a2:0b:23:3e:ef:53:6e:63:1e:08:93:8b:cf:ab:80:
07:0a:8d:80:14:9a:e2:b5:d7:62:c2:6f:a1:4c:70:c4:57:6a:
93:3f:65:45:7e:a6:ea:d7:45:04:e1:3d:92:ea:27:88:34:bc:
1f:c9:8a:0e:3d:68:76:11:d4:2a:e6:b2:50:81:37:b9:0e:07:
29:5e:7c:0a:d2:fd:6c:b4:e2:3d:2a:54:7d:13:be:a3:2f:e3:
91:d0:43:2d:13:9f:54:44:b1:f7:30:86:d4:7d:7b:6a:a5:8f:
50:6c:2b:8a:c3:72:4f:e4:5b:8d:e1:ed:d5:93:a1:6c:74:2f:
c1:14:a6:63:9a:c0:83:6f:ad:d8:bc:26:4a:40:d5:59:94:6b:
ac:03:09:c3:10:21:d4:9f:35:c0:bc:aa:f3:f0:c6:84:64:fd:
2c:4b:31:53:c4:b2:ad:20:96:a2:05:8d:7a:78:cf:ce:e8:dc:
5b:c7:dc:74:e0:ff:26:31:8b:7b:fe:75:40:b9:be:21:fc:41:
cc:86:d9:92:5d:3a:ad:a4:87:5f:89:c9:60:ba:9b:d2:87:b1:
e8:dc:8d:93:7e:e7:63:56:ec:f8:f1:6c:56:2a:53:d9:be:91:
24:cb:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:16:06 2026 by rpki-client