This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa
File: 323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier: nRvVhST0i5f91Ofap0Icq3mjOohw8lt0b+w0eE/tK6U=
Subject key identifier: BF:0D:FB:E7:07:29:87:4C:55:60:5A:F6:45:6F:F3:88:29:3F:AD:4C
Certificate issuer: /CN=2D7C9588134926F30E67EDE409C53B875B5CF047
Certificate serial: 43C10FC7F5991715D0BF631FFD6162AFDA9CE69C
Authority key identifier: 2D:7C:95:88:13:49:26:F3:0E:67:ED:E4:09:C5:3B:87:5B:5C:F0:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa
Signing time: Tue 06 Jan 2026 20:49:48 +0000
ROA not before: Tue 06 Jan 2026 20:44:48 +0000
ROA not after: Tue 05 Jan 2027 20:49:48 +0000
asID: 14080
IP address blocks: 2801:1a:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.crl
rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c1:0f:c7:f5:99:17:15:d0:bf:63:1f:fd:61:62:af:da:9c:e6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7C9588134926F30E67EDE409C53B875B5CF047
Validity
Not Before: Jan 6 20:44:48 2026 GMT
Not After : Jan 5 20:49:48 2027 GMT
Subject: CN=BF0DFBE70729874C55605AF6456FF388293FAD4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:f4:f3:91:28:99:df:aa:27:a3:57:b4:46:
fd:ea:ba:6c:30:96:6a:8c:79:b5:bc:90:7b:24:b1:
91:11:4f:05:45:e1:9d:0d:dc:35:0b:c7:99:bf:66:
59:ca:ad:32:7c:9c:96:df:36:b0:18:ee:6b:f3:36:
c9:b6:79:f8:63:62:86:1d:08:c8:c0:61:d5:88:00:
9d:0d:d8:fd:7a:d1:c8:d2:87:f0:1c:2d:92:e5:16:
99:c5:00:e0:7a:d4:45:8e:5f:16:2c:4f:7d:6a:1d:
67:f6:75:df:2b:a3:2b:11:ce:b2:db:ab:b1:8c:42:
aa:48:15:04:ec:de:8a:0c:b3:75:24:99:eb:c9:3b:
cb:82:ae:20:7d:e9:28:6b:52:02:d1:a1:52:49:3f:
79:17:82:05:56:ff:30:b4:c3:36:56:e7:f2:6f:4c:
ff:01:22:fd:4c:1d:21:ba:3b:65:84:41:31:92:24:
45:c3:95:a1:6e:0f:7c:fd:bb:94:fa:a0:5b:e0:4c:
fd:35:c6:8e:4e:ea:9c:1c:11:f1:ff:22:1b:20:a0:
2b:eb:18:ad:d4:17:5d:78:89:4f:3b:22:3f:b8:64:
b9:cf:31:a7:5c:e1:c7:da:59:39:44:de:5e:0e:bc:
f9:58:ac:15:a5:c2:3f:16:ca:3e:e0:5e:59:89:a3:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0D:FB:E7:07:29:87:4C:55:60:5A:F6:45:6F:F3:88:29:3F:AD:4C
X509v3 Authority Key Identifier:
keyid:2D:7C:95:88:13:49:26:F3:0E:67:ED:E4:09:C5:3B:87:5B:5C:F0:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/323830313a31613a633030303a3a2f34382d3438203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a:c000::/48
Signature Algorithm: sha256WithRSAEncryption
88:14:81:9e:f6:a8:d0:6d:7c:ce:d0:d1:bb:7f:aa:cd:cf:ca:
ce:7c:2b:9a:04:e1:d9:07:2a:b3:ed:18:41:bc:be:ff:53:19:
4e:c6:e6:a0:6d:34:fe:8e:b5:19:52:2d:de:6e:52:63:5a:00:
f6:e2:a3:d4:93:f0:e7:3b:5d:56:14:33:d7:ec:ac:b7:f5:d6:
f1:3a:ff:34:54:8d:f0:f6:80:22:b6:e2:a7:1b:0e:6f:91:ab:
18:36:39:45:b1:41:39:11:ce:ba:63:f1:70:3f:00:61:98:85:
2f:e6:0d:9b:35:f6:d2:13:68:fa:c2:e8:ab:a9:32:33:b8:27:
eb:2d:7f:54:45:08:e1:9e:7d:e3:58:00:b5:e1:2e:54:1e:ca:
5d:11:d8:a7:65:94:da:cc:18:1a:3b:d0:88:45:1f:87:47:dd:
15:e9:65:58:59:2d:2f:a3:bd:a4:70:c4:a5:2f:73:23:f2:e0:
2f:a2:2b:a6:58:36:2e:5b:35:c5:ae:72:c8:1d:83:0b:3d:09:
33:d3:0d:d7:54:32:1f:86:6d:ff:20:67:e7:2f:72:11:8d:50:
f4:fb:43:00:de:c4:0e:bd:e1:9f:4a:fd:b1:c3:62:e4:1a:70:
46:ea:67:d6:c6:ff:cb:1c:22:27:a2:3e:8b:eb:83:d0:cd:59:
55:a4:9d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:33:50 2026 by rpki-client