This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/323830333a613065303a3a2f33322d3332203d3e20323639393131.roa
File: 323830333a613065303a3a2f33322d3332203d3e20323639393131.roa (raw, json)
Hash identifier: qUDW8Kiz2f2nSd7SPMQL8zCwDwGlLvBgSP8RYPL5cw0=
Subject key identifier: CA:65:1E:EC:B2:37:F4:3C:05:BF:27:73:00:50:44:6E:3B:8F:55:46
Certificate issuer: /CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2
Certificate serial: 0E2EFC86080C1150F91BA2D475D60B490E1E4979
Authority key identifier: 9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/323830333a613065303a3a2f33322d3332203d3e20323639393131.roa
Signing time: Tue 06 Jan 2026 20:48:50 +0000
ROA not before: Tue 06 Jan 2026 20:43:50 +0000
ROA not after: Tue 05 Jan 2027 20:48:50 +0000
asID: 269911
IP address blocks: 2803:a0e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl
rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 23:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2e:fc:86:08:0c:11:50:f9:1b:a2:d4:75:d6:0b:49:0e:1e:49:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2
Validity
Not Before: Jan 6 20:43:50 2026 GMT
Not After : Jan 5 20:48:50 2027 GMT
Subject: CN=CA651EECB237F43C05BF27730050446E3B8F5546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:7e:f8:1f:c3:f2:9c:25:8f:c5:3e:3e:94:
3a:91:c9:25:2e:7a:f3:ad:74:60:5a:1e:97:be:9d:
d1:52:d3:7e:c7:f6:67:89:ac:48:95:ab:4d:05:3d:
1e:aa:f8:80:59:03:92:f6:f4:fd:5d:2e:07:21:9b:
b3:59:53:8c:64:d3:d1:6e:be:01:04:82:a4:3e:ff:
26:18:e9:21:ba:34:c0:2c:26:e6:6e:69:85:85:58:
a7:41:38:22:2b:0c:80:1a:fd:d6:1c:0c:0d:5e:de:
94:b4:1d:b8:52:82:c0:1e:d7:01:fd:d9:74:7a:a7:
23:10:8e:ab:63:31:2f:97:78:7f:22:0b:d9:cb:d2:
6c:b2:66:78:ae:c6:81:1c:46:d1:80:12:62:22:df:
67:8a:a2:1c:67:e1:16:6c:eb:00:b7:77:84:2d:9a:
7e:f8:44:85:38:0a:38:3e:55:71:a6:9f:96:85:b6:
f4:72:35:c3:a6:42:e5:32:5b:93:ed:23:1a:22:f5:
43:8c:4f:21:f0:3e:fb:41:97:fc:e4:4a:c5:e0:fd:
f3:56:f1:f3:b1:38:92:07:2e:cf:c2:69:0a:08:67:
11:b6:06:ac:23:1b:a8:4e:3c:ec:52:31:05:70:a6:
74:12:39:b7:49:a4:80:ed:bf:50:3c:54:c7:82:78:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:65:1E:EC:B2:37:F4:3C:05:BF:27:73:00:50:44:6E:3B:8F:55:46
X509v3 Authority Key Identifier:
keyid:9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/323830333a613065303a3a2f33322d3332203d3e20323639393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:a0e0::/32
Signature Algorithm: sha256WithRSAEncryption
68:82:81:55:05:23:cb:14:f8:a9:27:0a:cb:65:37:46:c3:23:
bc:c3:45:6a:d0:f9:51:80:81:1f:49:60:fe:9d:85:73:a5:80:
6c:71:e5:fa:a8:b2:84:39:0b:1d:cb:36:71:c6:c5:72:4b:a2:
09:f0:77:61:d2:f6:b1:6e:7e:7f:d2:eb:d3:da:94:77:27:8d:
b0:69:2b:af:84:bb:8c:6f:17:7b:ae:8d:85:74:9a:b5:74:20:
80:d8:8e:70:db:e8:e1:11:ef:c4:d9:63:89:87:14:c9:4e:c5:
5f:fe:db:65:49:7d:4f:9a:9f:ee:7b:de:0f:7e:80:2f:f1:fc:
46:35:9d:3b:18:fb:94:09:07:87:30:36:d4:a8:63:1f:ea:f4:
c0:36:84:1c:03:7c:f8:fb:45:24:44:82:6d:7b:00:dd:9a:d2:
49:79:46:3e:43:be:b8:e0:87:bd:1d:95:ef:8d:b2:03:42:1b:
4f:29:92:69:90:99:c1:65:da:c8:4c:2c:4b:70:49:59:62:7b:
3c:8b:ef:ae:d9:5d:be:9c:52:e2:42:49:e8:9d:3c:c1:24:ce:
19:dc:ac:83:5c:2d:19:21:7b:80:90:99:a1:33:4a:86:b9:5a:
0e:93:6b:f0:93:51:7d:a9:ed:b7:02:40:ce:84:e2:5d:1b:da:
07:43:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:30 2026 by rpki-client