This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/323830303a6364303a3a2f33322d3438203d3e2036353638.roa
File: 323830303a6364303a3a2f33322d3438203d3e2036353638.roa (raw, json)
Hash identifier: WlBoMqtYaHvosp5uH6ljL5XAcxCTr7Brjhl5SG1l9/w=
Subject key identifier: D1:1D:88:54:7A:D4:F8:56:DD:58:C8:A4:26:EB:15:1F:7E:15:5E:3A
Certificate issuer: /CN=677CEC9F1C4060755422FE75661CBC3718515578
Certificate serial: 2ADC530D2C454DE918DF82F115953ADB87F70983
Authority key identifier: 67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/323830303a6364303a3a2f33322d3438203d3e2036353638.roa
Signing time: Tue 06 Jan 2026 19:38:28 +0000
ROA not before: Tue 06 Jan 2026 19:33:28 +0000
ROA not after: Tue 05 Jan 2027 19:38:28 +0000
asID: 6568
IP address blocks: 2800:cd0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl
rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:dc:53:0d:2c:45:4d:e9:18:df:82:f1:15:95:3a:db:87:f7:09:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677CEC9F1C4060755422FE75661CBC3718515578
Validity
Not Before: Jan 6 19:33:28 2026 GMT
Not After : Jan 5 19:38:28 2027 GMT
Subject: CN=D11D88547AD4F856DD58C8A426EB151F7E155E3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:c9:08:dc:27:14:93:2d:f9:19:82:e3:5d:
89:ed:b1:a3:fd:a7:15:2e:d3:16:af:e2:2f:c1:c4:
35:f8:e3:7c:25:9c:84:a1:ea:71:38:bd:2c:d2:49:
e8:e0:68:73:0c:d4:a8:b3:01:00:6e:05:3f:75:b6:
54:8a:96:95:a7:57:4a:52:0a:3b:23:09:51:04:29:
20:58:e6:91:ce:8f:b8:36:d0:54:a6:13:96:c1:eb:
af:71:6f:77:c1:af:34:93:61:63:80:c4:15:e4:f5:
d8:bc:14:fb:ec:74:7f:35:87:6a:a8:3e:6e:23:ed:
4e:10:36:37:54:e0:ed:b8:6c:ad:d9:80:90:aa:17:
4c:6a:b9:3c:e9:d6:0f:5d:eb:fe:37:e4:fd:34:36:
48:36:55:e9:61:f3:f2:cb:d2:4c:e7:13:f5:68:05:
3e:7d:36:71:03:2a:91:da:72:41:60:1b:a5:31:7e:
f2:27:12:47:30:02:1e:44:b3:c5:35:3d:cc:34:33:
17:80:cf:8a:1a:fe:fa:0a:96:8b:a5:68:66:dc:9f:
ef:15:5e:38:3c:b8:d9:4c:ca:ef:c7:ee:87:f4:97:
c7:5d:e0:9e:7a:01:47:7a:25:a6:05:9a:a3:ac:ad:
64:5a:e9:3a:52:d1:cd:7a:5b:9d:ed:88:5e:0f:ec:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:88:54:7A:D4:F8:56:DD:58:C8:A4:26:EB:15:1F:7E:15:5E:3A
X509v3 Authority Key Identifier:
keyid:67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/323830303a6364303a3a2f33322d3438203d3e2036353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:cd0::/32
Signature Algorithm: sha256WithRSAEncryption
43:24:61:9e:75:69:9f:f0:d3:93:08:6f:6b:5e:08:ee:04:f0:
9b:0d:4c:4e:1f:df:19:2f:e4:0b:b9:11:1d:a8:91:62:6b:a3:
62:1e:26:d0:3f:5b:dd:ff:4e:57:0c:4b:71:b0:27:8b:16:56:
3c:0f:42:3a:cd:c4:8c:71:e2:2c:97:f6:ff:c3:ff:fb:cb:33:
70:66:59:2b:d0:cf:e9:4e:12:74:1e:e2:08:23:fe:c8:e7:81:
70:4d:51:0a:a6:e3:04:10:ba:4d:51:9b:63:a0:f2:a5:73:7f:
56:d5:29:dd:5a:3b:02:2f:6e:30:16:d0:78:82:7d:4d:23:46:
6c:10:4a:95:ed:d1:36:13:6b:09:74:5e:8c:18:a0:ce:06:da:
eb:b9:67:c3:4f:89:f8:5a:cb:d9:52:8d:64:01:49:a3:6a:bb:
a5:8c:3e:b7:7c:0d:7f:70:33:d9:77:07:59:15:bd:b4:5f:95:
8c:14:34:77:5c:1f:b1:70:97:e9:51:ff:d1:1d:f9:c8:10:1b:
83:35:2d:9f:8f:60:fd:2f:4e:60:f7:d8:d3:8a:31:52:30:47:
de:89:56:de:9e:ac:b3:60:93:ac:91:c1:0f:1a:22:4c:6f:18:
1c:13:c4:c3:c7:6e:20:e8:d3:37:09:0a:05:56:fc:79:01:92:
79:30:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:11:15 2026 by rpki-client