This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/323830333a633430303a3a2f33322d3332203d3e203532333038.roa
File: 323830333a633430303a3a2f33322d3332203d3e203532333038.roa (raw, json)
Hash identifier: fw+96Y4JxEjLkKv1s6n/gx3Fcwtq2c/uowOXHN9K6/w=
Subject key identifier: 50:45:AE:F5:F7:01:1D:22:A7:24:0A:5C:98:9E:93:74:D5:04:E6:FC
Certificate issuer: /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial: 33B7F5BC5434AB6D59537E098C63AA774D6526E6
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/323830333a633430303a3a2f33322d3332203d3e203532333038.roa
Signing time: Tue 06 Jan 2026 19:21:48 +0000
ROA not before: Tue 06 Jan 2026 19:16:48 +0000
ROA not after: Tue 05 Jan 2027 19:21:48 +0000
asID: 52308
IP address blocks: 2803:c400::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b7:f5:bc:54:34:ab:6d:59:53:7e:09:8c:63:aa:77:4d:65:26:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Validity
Not Before: Jan 6 19:16:48 2026 GMT
Not After : Jan 5 19:21:48 2027 GMT
Subject: CN=5045AEF5F7011D22A7240A5C989E9374D504E6FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:10:74:8f:ed:ba:79:43:34:d6:f9:81:95:
f2:ee:29:aa:9e:c4:eb:89:bb:4e:9c:72:8d:a7:ba:
54:6f:dc:59:4f:d4:b4:52:ef:8d:45:43:15:84:85:
d8:3d:91:0d:6e:2d:ca:ab:5a:14:9a:fd:b7:6b:ee:
e7:94:e8:81:89:0c:11:8d:03:3c:f2:ea:08:4c:fb:
fc:7f:90:b6:82:b2:d7:0f:09:4b:73:ad:17:32:b0:
f4:07:23:76:ab:0a:8a:84:f2:57:ad:a4:41:68:91:
66:5f:55:7e:cb:95:4a:17:19:99:75:67:c4:7b:b1:
13:d9:0e:66:06:6c:8c:39:e3:8c:30:2f:07:f7:60:
06:b7:fc:46:f6:49:a3:5c:76:86:02:86:bf:94:5e:
fc:a9:45:89:80:c0:fe:d2:66:c8:3e:ad:28:85:3f:
40:41:d7:b5:35:cb:ff:54:a9:02:88:1f:19:8c:15:
ad:54:c4:5c:b3:11:27:48:a8:5b:58:cc:03:98:73:
a0:b7:2a:46:5c:97:68:70:bc:33:39:68:1e:c3:86:
71:f9:7e:63:40:65:c3:00:89:63:ea:5e:38:51:33:
65:54:98:ac:6a:e6:79:f7:26:9d:eb:a1:d3:de:0a:
1b:f5:33:1b:3d:44:4a:d0:b6:d0:4e:81:1f:29:97:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:45:AE:F5:F7:01:1D:22:A7:24:0A:5C:98:9E:93:74:D5:04:E6:FC
X509v3 Authority Key Identifier:
keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/323830333a633430303a3a2f33322d3332203d3e203532333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c400::/32
Signature Algorithm: sha256WithRSAEncryption
dc:f6:e7:eb:53:98:99:f6:60:f9:c5:8b:c0:12:86:16:e1:72:
30:45:f4:c6:f0:53:97:9b:d3:a0:dc:b6:55:1a:ef:c1:74:f8:
c9:fe:44:0b:0d:0b:77:c0:db:e1:ff:ce:e5:a0:8a:67:2c:7d:
9d:38:db:d4:62:e4:f3:f0:a6:a1:30:de:f4:52:57:4b:a3:2f:
3c:ad:3f:8a:47:75:0c:c2:34:59:d0:ae:8d:6a:95:60:0b:8f:
33:a7:67:f8:92:6c:d0:23:e0:ac:00:e3:eb:1b:27:41:14:a5:
e5:37:da:60:ad:84:6c:2a:01:b1:67:44:04:8e:2c:f6:ff:2b:
73:99:e5:1e:66:78:fd:a9:d0:05:9b:5e:72:98:69:f3:28:1f:
32:05:7c:b8:97:dc:5b:fe:a5:09:7b:9a:5f:01:6f:50:0a:fa:
58:1b:8e:0f:1f:30:99:02:52:f9:fe:f5:7d:96:08:8a:ac:da:
81:42:31:bd:4e:10:c6:ef:13:e8:ff:3b:87:91:ac:89:f4:a3:
3a:7b:f6:14:b2:13:bc:68:d6:de:ac:ab:74:d9:d6:53:cf:fc:
37:16:ea:c9:f5:c0:2f:16:84:86:dd:a3:16:e9:b4:a1:37:37:
19:80:59:7d:7c:22:01:55:f2:71:28:2c:a6:06:b7:54:dd:11:
87:7d:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:25 2026 by rpki-client