This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/211EE358EA4E33C0C167B3D2F850C227A1CA0E559C9789B6E3F14D64B07DB839/0/323830333a383034303a3a2f33322d3438203d3e20323633373439.roa
File: 323830333a383034303a3a2f33322d3438203d3e20323633373439.roa (raw, json)
Hash identifier: c0bcCQldw6pQ/xxvSRrAlraInlgGoOubH1SF8gcfDvI=
Subject key identifier: 34:60:00:67:57:9D:E4:C5:9E:E8:6C:E1:CC:97:C3:0B:96:B7:6F:74
Certificate issuer: /CN=B3AF192C35B7408D928890C27D4328D12D1620D6
Certificate serial: 6C9A24B4DE40A91EE9052D025A8CD5E13D839CD8
Authority key identifier: B3:AF:19:2C:35:B7:40:8D:92:88:90:C2:7D:43:28:D1:2D:16:20:D6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AF192C35B7408D928890C27D4328D12D1620D6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/211EE358EA4E33C0C167B3D2F850C227A1CA0E559C9789B6E3F14D64B07DB839/0/323830333a383034303a3a2f33322d3438203d3e20323633373439.roa
Signing time: Tue 06 Jan 2026 20:54:39 +0000
ROA not before: Tue 06 Jan 2026 20:49:39 +0000
ROA not after: Tue 05 Jan 2027 20:54:39 +0000
asID: 263749
IP address blocks: 2803:8040::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/211EE358EA4E33C0C167B3D2F850C227A1CA0E559C9789B6E3F14D64B07DB839/0/B3AF192C35B7408D928890C27D4328D12D1620D6.crl
rsync://repository.lacnic.net/rpki/lacnic/211EE358EA4E33C0C167B3D2F850C227A1CA0E559C9789B6E3F14D64B07DB839/0/B3AF192C35B7408D928890C27D4328D12D1620D6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AF192C35B7408D928890C27D4328D12D1620D6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:9a:24:b4:de:40:a9:1e:e9:05:2d:02:5a:8c:d5:e1:3d:83:9c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3AF192C35B7408D928890C27D4328D12D1620D6
Validity
Not Before: Jan 6 20:49:39 2026 GMT
Not After : Jan 5 20:54:39 2027 GMT
Subject: CN=34600067579DE4C59EE86CE1CC97C30B96B76F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:ed:ee:9d:79:95:99:fc:1f:2a:a4:2d:ed:
84:95:12:00:da:0c:cd:fa:cf:ee:a1:c4:a6:d8:1e:
69:b4:c5:02:ba:16:35:b2:e4:ba:80:2f:06:d9:0c:
c5:da:40:a1:6f:1f:f1:02:d5:f2:c1:17:85:b6:ae:
e8:f0:45:b5:b5:bc:34:4b:e1:03:f2:5b:42:fc:4a:
c9:cd:08:a8:a7:61:bb:7a:62:94:ed:e0:bb:67:e8:
2a:50:68:48:fe:ae:43:a0:b1:6d:4e:3c:6e:60:d9:
66:70:d9:67:5c:06:1f:ef:22:9e:fa:74:bf:c3:f3:
7b:51:91:9a:b4:36:00:55:35:e5:51:8e:82:e6:e0:
4f:71:f9:48:51:eb:82:db:9d:40:27:37:af:2c:25:
37:fe:cd:a1:fb:b3:17:8a:61:4b:30:cb:f0:b9:e8:
2e:ce:22:1d:a0:66:2e:b6:2a:19:df:d8:49:14:ed:
da:3c:5c:c4:dc:b2:9d:41:2a:69:15:c4:24:f4:e6:
18:4e:99:84:df:43:37:f0:e3:83:f1:27:7e:e0:e1:
12:02:a0:9f:f6:21:1e:2b:3e:4f:34:b9:a3:5e:1e:
7c:fc:73:07:99:7f:8e:97:23:8b:2e:05:70:d9:c6:
03:52:bd:81:4a:74:d9:35:65:f3:86:c3:ed:a6:84:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:00:67:57:9D:E4:C5:9E:E8:6C:E1:CC:97:C3:0B:96:B7:6F:74
X509v3 Authority Key Identifier:
keyid:B3:AF:19:2C:35:B7:40:8D:92:88:90:C2:7D:43:28:D1:2D:16:20:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/211EE358EA4E33C0C167B3D2F850C227A1CA0E559C9789B6E3F14D64B07DB839/0/B3AF192C35B7408D928890C27D4328D12D1620D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AF192C35B7408D928890C27D4328D12D1620D6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/211EE358EA4E33C0C167B3D2F850C227A1CA0E559C9789B6E3F14D64B07DB839/0/323830333a383034303a3a2f33322d3438203d3e20323633373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8040::/32
Signature Algorithm: sha256WithRSAEncryption
4e:c8:02:b2:a7:3a:17:84:17:5a:0b:e2:0c:01:31:1f:2d:26:
3b:ce:a7:df:cc:12:e1:0e:08:48:c4:c7:7e:83:20:e6:4f:de:
59:20:82:f8:5e:ec:89:93:60:58:5d:49:16:41:97:c7:dd:09:
e2:a8:3b:b1:1c:04:89:69:03:22:b4:c2:79:0a:64:a2:f8:b6:
95:86:09:59:b9:f6:c2:8d:c8:57:b0:db:b2:a8:a0:99:6e:c5:
a7:6c:3d:ef:b2:7d:92:8e:3e:3a:0a:35:e1:8e:3a:7d:ef:6a:
d0:5c:f3:15:31:80:00:c3:f4:ed:0c:74:77:62:b0:03:ef:53:
8f:20:ea:60:11:a2:a3:7e:18:28:7d:87:33:35:ae:58:6b:c4:
7a:0c:2c:53:67:62:ac:03:ed:29:58:5a:7a:97:34:4c:4c:c6:
6a:a7:a9:c8:e9:21:ff:6f:b8:9b:cd:20:ae:80:c4:d3:e1:bb:
f0:e5:2b:81:cd:e0:4f:67:19:4b:a9:0b:5e:71:7f:82:22:1a:
2a:ca:01:83:21:f9:aa:04:b2:01:d6:f2:be:35:f7:2f:d0:8b:
67:69:3d:b8:9b:d1:b0:e8:9f:4f:0d:7e:97:b2:0b:a8:88:ac:
4e:b1:bd:3a:5d:28:ec:4c:67:d3:7a:48:47:d5:11:de:74:63:
a3:f9:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:15:21 2026 by rpki-client