This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/323830333a323134303a3a2f33322d3430203d3e20323634363235.roa
File: 323830333a323134303a3a2f33322d3430203d3e20323634363235.roa (raw, json)
Hash identifier: 7n6AXUFUSnB3Xl3C/xjx9ESHtV8MLIJsSISorvIHCNI=
Subject key identifier: 15:F5:67:23:17:36:2D:56:2D:F9:C8:67:8D:DD:E9:4B:4B:F7:1D:7F
Certificate issuer: /CN=456C96D39E784B660220D0B1C98F59D8823024A7
Certificate serial: 4CE639EB6C23BE7C85DEA4DC5E81D1EBB137C0FB
Authority key identifier: 45:6C:96:D3:9E:78:4B:66:02:20:D0:B1:C9:8F:59:D8:82:30:24:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/456C96D39E784B660220D0B1C98F59D8823024A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/323830333a323134303a3a2f33322d3430203d3e20323634363235.roa
Signing time: Tue 06 Jan 2026 18:57:41 +0000
ROA not before: Tue 06 Jan 2026 18:52:41 +0000
ROA not after: Tue 05 Jan 2027 18:57:41 +0000
asID: 264625
IP address blocks: 2803:2140::/32 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/456C96D39E784B660220D0B1C98F59D8823024A7.crl
rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/456C96D39E784B660220D0B1C98F59D8823024A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/456C96D39E784B660220D0B1C98F59D8823024A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e6:39:eb:6c:23:be:7c:85:de:a4:dc:5e:81:d1:eb:b1:37:c0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456C96D39E784B660220D0B1C98F59D8823024A7
Validity
Not Before: Jan 6 18:52:41 2026 GMT
Not After : Jan 5 18:57:41 2027 GMT
Subject: CN=15F5672317362D562DF9C8678DDDE94B4BF71D7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:ea:49:d6:18:e2:a2:6e:a4:5d:eb:70:5c:
0f:28:76:63:a0:44:1e:a6:36:78:50:f7:9b:69:4e:
ca:1c:c3:3d:37:b1:71:70:d4:91:b9:ec:3d:fa:93:
6f:fd:1b:18:7e:d5:42:86:58:5d:7c:0a:ea:39:95:
e9:01:05:38:3e:2f:81:a7:6c:f5:9b:5d:4e:ba:75:
ac:64:9c:c6:58:68:90:19:18:64:12:80:ec:d5:2a:
72:e8:fd:74:19:c4:9d:cf:b2:e3:da:31:59:ac:f3:
c3:f7:1d:c7:9f:aa:cf:fa:aa:c1:52:2a:17:93:fb:
fe:84:8f:ff:8f:fe:cc:02:16:9c:f5:6c:16:97:67:
bf:09:4b:b1:8d:91:6d:62:e7:91:3b:50:fe:6a:16:
27:17:86:55:88:bd:7a:d6:01:44:eb:a2:39:c6:e3:
05:57:e1:12:bd:e7:4a:44:40:9d:33:cd:44:0e:2e:
5b:0c:e9:ea:cf:84:d1:71:42:93:1e:59:ed:06:2d:
a6:63:a1:81:7f:d7:a1:89:1a:48:53:5b:38:aa:25:
76:b0:2b:8a:28:fd:40:1f:2a:71:7d:3c:e7:7c:08:
f0:04:9b:0d:d9:c4:63:18:44:bf:05:41:6d:3d:4f:
21:8d:d2:cb:10:f5:1e:18:4f:f1:66:c7:2b:5a:1c:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:67:23:17:36:2D:56:2D:F9:C8:67:8D:DD:E9:4B:4B:F7:1D:7F
X509v3 Authority Key Identifier:
keyid:45:6C:96:D3:9E:78:4B:66:02:20:D0:B1:C9:8F:59:D8:82:30:24:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/456C96D39E784B660220D0B1C98F59D8823024A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/456C96D39E784B660220D0B1C98F59D8823024A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D0F09C3612F67F1EEB88ABC34DC91241C1D6D5C5C8A24B0377B19D0250566F0/0/323830333a323134303a3a2f33322d3430203d3e20323634363235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2140::/32
Signature Algorithm: sha256WithRSAEncryption
a1:1d:eb:d5:00:ac:9a:cc:d3:0e:f2:18:76:e6:1d:a6:0c:d3:
d0:99:e9:4d:b0:03:b1:60:a9:9d:e3:50:ab:35:0c:2a:43:0a:
56:8e:21:23:f0:cc:af:63:73:73:21:81:e4:38:0f:95:23:1a:
8f:36:c2:f8:94:62:8b:30:e7:b7:65:80:6b:cf:29:64:1b:fe:
a4:2c:28:9f:f7:e6:4d:ba:e7:d7:0d:89:d3:48:c1:f0:4c:03:
d1:8b:f9:e8:da:c2:17:51:56:a3:df:c5:5c:b8:9e:36:46:38:
12:05:75:a2:e3:08:7b:03:17:ee:65:1a:ba:b3:61:7e:fa:8c:
50:bc:6e:be:7f:02:15:97:14:86:34:7b:1d:2a:cc:49:3e:f7:
06:0d:97:95:3b:4d:24:89:ca:8c:43:d7:8a:f9:44:01:97:9b:
2c:ce:75:7a:ed:d8:5c:a9:e9:bd:b6:16:b0:5d:11:74:e3:b9:
ac:62:92:4c:16:62:25:15:fd:ee:09:00:bb:9b:49:21:7e:82:
26:66:7b:5b:fb:e6:2b:88:e8:82:78:d8:eb:e4:5b:09:dd:61:
5d:5a:9d:ae:0b:b4:5b:45:e7:11:da:9e:0f:be:d7:ed:7e:8f:
d0:05:95:f1:0a:d8:8f:9c:af:92:0f:27:a2:20:9f:79:bb:8c:
42:07:f5:4e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUTOY562wjvnyF3qTcXoHR67E3wPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU2Qzk2RDM5RTc4NEI2NjAyMjBEMEIxQzk4RjU5RDg4
MjMwMjRBNzAeFw0yNjAxMDYxODUyNDFaFw0yNzAxMDUxODU3NDFaMDMxMTAvBgNV
BAMTKDE1RjU2NzIzMTczNjJENTYyREY5Qzg2NzhERERFOTRCNEJGNzFEN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEepJ1hjiom6kXetwXA8odmOg
RB6mNnhQ95tpTsocwz03sXFw1JG57D36k2/9Gxh+1UKGWF18Cuo5lekBBTg+L4Gn
bPWbXU66daxknMZYaJAZGGQSgOzVKnLo/XQZxJ3PsuPaMVms88P3Hcefqs/6qsFS
KheT+/6Ej/+P/swCFpz1bBaXZ78JS7GNkW1i55E7UP5qFicXhlWIvXrWAUTrojnG
4wVX4RK950pEQJ0zzUQOLlsM6erPhNFxQpMeWe0GLaZjoYF/16GJGkhTWziqJXaw
K4oo/UAfKnF9POd8CPAEmw3ZxGMYRL8FQW09TyGN0ssQ9R4YT/FmxytaHGXnAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUFfVnIxc2LVYt+chnjd3pS0v3HX8wHwYDVR0j
BBgwFoAURWyW0554S2YCINCxyY9Z2IIwJKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRDBGMDlDMzYxMkY2N0YxRUVCODhBQkMzNERDOTEyNDFD
MUQ2RDVDNUM4QTI0QjAzNzdCMTlEMDI1MDU2NkYwLzAvNDU2Qzk2RDM5RTc4NEI2
NjAyMjBEMEIxQzk4RjU5RDg4MjMwMjRBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NTZDOTZEMzlFNzg0QjY2MDIy
MEQwQjFDOThGNTlEODgyMzAyNEE3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUQwRjA5QzM2MTJGNjdGMUVFQjg4QUJDMzREQzkxMjQxQzFENkQ1QzVD
OEEyNEIwMzc3QjE5RDAyNTA1NjZGMC8wLzMyMzgzMDMzM2EzMjMxMzQzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzNDM2MzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDIUAw
DQYJKoZIhvcNAQELBQADggEBAKEd69UArJrM0w7yGHbmHaYM09CZ6U2wA7FgqZ3j
UKs1DCpDClaOISPwzK9jc3MhgeQ4D5UjGo82wviUYosw57dlgGvPKWQb/qQsKJ/3
5k2659cNidNIwfBMA9GL+ejawhdRVqPfxVy4njZGOBIFdaLjCHsDF+5lGrqzYX76
jFC8br5/AhWXFIY0ex0qzEk+9wYNl5U7TSSJyoxD14r5RAGXmyzOdXrt2Fyp6b22
FrBdEXTjuaxikkwWYiUV/e4JALubSSF+giZme1v75iuI6IJ42OvkWwndYV1ana4L
tFtF5xHang++1+1+j9AFlfEK2I+cr5IPJ6Ign3m7jEIH9U4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:05 2026 by rpki-client