This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a333030303a3a2f33362d3336203d3e20323639383039.roa
File: 323830333a633465303a333030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier: m8rJ7CGmRfiLgQNbl4keNIDEFtIxSbFIHr06sV0dxKE=
Subject key identifier: 80:48:8B:37:4E:B7:FD:37:BE:F3:D3:AF:53:78:53:48:1B:FC:CB:9F
Certificate issuer: /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial: 368BD168F06F03A691C4ADCF308BA92B64D2EB05
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a333030303a3a2f33362d3336203d3e20323639383039.roa
Signing time: Tue 04 Feb 2025 20:02:48 +0000
ROA not before: Tue 04 Feb 2025 19:57:48 +0000
ROA not after: Tue 03 Feb 2026 20:02:48 +0000
asID: 269809
IP address blocks: 2803:c4e0:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 19:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8b:d1:68:f0:6f:03:a6:91:c4:ad:cf:30:8b:a9:2b:64:d2:eb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Validity
Not Before: Feb 4 19:57:48 2025 GMT
Not After : Feb 3 20:02:48 2026 GMT
Subject: CN=80488B374EB7FD37BEF3D3AF537853481BFCCB9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:ca:92:00:fb:9d:c0:71:2c:31:fc:08:8f:
e6:81:a9:ff:74:aa:2e:e6:e9:f2:ed:c9:84:26:19:
46:4e:4f:f6:ff:1c:93:4f:73:40:69:53:e6:0a:d9:
8c:f2:ca:03:37:2a:a3:bd:f3:5c:23:25:04:90:fc:
5e:56:28:1a:71:ca:62:e4:a9:50:c8:27:9f:b7:4c:
56:81:71:43:a6:96:35:3f:05:b1:c9:38:1d:7d:f0:
19:52:f3:e2:e1:9e:ca:3d:06:a8:76:ca:e9:d3:ab:
e6:76:f5:a6:44:0c:6a:13:97:3c:6d:f5:18:7d:0b:
81:46:99:03:35:ef:9f:f2:43:71:9b:8c:bd:63:21:
90:64:a7:cf:fe:0c:60:8e:d0:5b:6a:63:49:90:cb:
e4:b7:9f:f0:b1:72:2b:91:2a:8c:23:14:0d:57:20:
84:16:a8:45:55:99:fe:84:96:14:80:a1:35:39:4c:
60:b8:83:8a:08:98:e7:35:d7:92:91:59:3a:8b:ba:
66:df:46:26:db:02:75:09:a1:88:25:76:c7:12:3b:
8d:da:9d:41:31:8b:09:8c:69:a9:13:43:b0:55:95:
56:96:ae:d6:b3:79:0c:e8:11:25:01:54:c4:75:66:
82:11:89:b0:7c:72:ba:a4:16:ca:53:72:51:34:f7:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:48:8B:37:4E:B7:FD:37:BE:F3:D3:AF:53:78:53:48:1B:FC:CB:9F
X509v3 Authority Key Identifier:
keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a333030303a3a2f33362d3336203d3e20323639383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c4e0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
5e:5b:64:81:4f:a4:3e:db:5f:7e:a8:5f:61:f8:bd:95:ee:3d:
41:08:5c:67:95:c2:63:59:e4:30:de:be:6b:72:a4:cd:da:3c:
bf:ca:ae:91:78:30:df:f9:26:20:7f:f4:0c:a3:28:9a:a7:c5:
d4:28:54:a1:1f:53:fe:19:f1:1a:9f:31:29:9b:0a:77:2d:4f:
f5:3a:22:04:28:41:5c:e8:22:7b:dd:86:8a:aa:5c:9a:a4:42:
69:b0:9a:19:d9:5d:d9:22:e3:75:23:ac:f7:b7:b1:59:3b:d6:
fd:5b:ea:95:d7:4a:11:4a:c0:7d:6e:2c:22:3d:cc:a3:bb:91:
57:6b:8b:2e:20:7c:cc:25:7f:e5:67:9d:00:7e:e5:e6:f9:bb:
ba:ab:77:c2:e1:e4:89:1f:b2:6e:d0:ff:e7:23:a4:08:c1:1d:
17:04:53:85:e0:55:12:2f:62:a5:f8:e6:de:ac:ba:52:d0:27:
4e:98:51:54:3b:51:45:34:ab:43:7d:ea:41:16:7d:88:4d:1b:
46:aa:a9:60:be:11:91:6c:0f:7a:fa:f3:6c:8b:70:3b:7c:38:
25:5c:a4:66:e5:73:46:68:c7:b1:61:af:0d:e4:c8:c4:03:a1:
a5:94:3d:e5:e6:72:99:b4:2b:1f:e8:6d:db:28:83:bc:30:95:
0a:34:9a:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 7 14:18:33 2025 by rpki-client