This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a3a2f33322d3332203d3e203634313334.roa
File: 323830333a383931303a3a2f33322d3332203d3e203634313334.roa (raw, json)
Hash identifier: kYzO4eyfgMIiS9XXS9uBh5bRVONRKTGwRX/opGDzL84=
Subject key identifier: 46:59:9D:50:6F:4F:0F:4D:D8:47:CE:7A:09:0D:54:BB:7E:1F:1F:B2
Certificate issuer: /CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
Certificate serial: 2DDDBFEF83C410152DD92D0DD870072F6F744DFB
Authority key identifier: 5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a3a2f33322d3332203d3e203634313334.roa
Signing time: Sat 27 Dec 2025 20:56:22 +0000
ROA not before: Sat 27 Dec 2025 20:51:22 +0000
ROA not after: Sat 26 Dec 2026 20:56:22 +0000
asID: 64134
IP address blocks: 2803:8910::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.crl
rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 11:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:dd:bf:ef:83:c4:10:15:2d:d9:2d:0d:d8:70:07:2f:6f:74:4d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
Validity
Not Before: Dec 27 20:51:22 2025 GMT
Not After : Dec 26 20:56:22 2026 GMT
Subject: CN=46599D506F4F0F4DD847CE7A090D54BB7E1F1FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:cd:3e:2b:fb:b5:ed:b1:2a:ec:be:cc:a6:
71:e9:66:3c:14:ca:fc:b9:be:f4:e6:29:3a:f5:0d:
84:42:d6:07:e1:84:a1:79:f2:0e:f4:56:1d:ab:52:
9a:13:44:0a:d7:b4:1d:24:5e:ba:30:c0:69:33:f9:
a4:7f:19:3b:c6:e3:47:a6:09:54:39:77:b9:f2:38:
88:2f:4c:0f:e1:19:20:da:19:c7:cb:a1:fa:45:07:
3d:4a:58:f2:8e:f2:61:f4:ec:f6:80:87:0e:95:f5:
39:a4:bd:b6:2c:cf:4a:89:52:64:55:b4:83:6b:d6:
07:6d:6b:34:ce:1f:bc:5f:50:f8:1f:be:a5:8b:65:
d9:6b:3f:b0:43:c0:9f:ab:78:e8:3c:bc:d9:83:28:
32:8d:7a:0e:d8:a8:ce:47:ec:b3:ba:f8:e3:d9:9f:
61:f1:9e:07:2e:9f:7a:f3:44:e9:f7:c5:6d:be:c6:
9e:83:ea:0a:d4:6c:2f:9d:12:83:38:9c:3d:e4:52:
a9:ba:08:bd:6f:85:38:0d:ac:9c:bf:35:2f:70:d3:
35:aa:bd:94:4a:98:bf:fa:63:74:bf:90:63:e8:3d:
5d:29:87:8a:84:f6:e9:72:f5:9e:d6:1f:c7:a7:6d:
a3:33:73:d1:f4:4a:b7:dd:89:b9:91:17:b7:45:8d:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:59:9D:50:6F:4F:0F:4D:D8:47:CE:7A:09:0D:54:BB:7E:1F:1F:B2
X509v3 Authority Key Identifier:
keyid:5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a3a2f33322d3332203d3e203634313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8910::/32
Signature Algorithm: sha256WithRSAEncryption
4f:02:12:6d:3d:b2:31:c4:c9:9b:1d:b6:6d:a2:83:5e:88:51:
93:3f:d0:18:e5:8a:6b:8a:db:82:be:9f:d4:d2:80:e3:32:42:
6d:4e:ea:8b:0f:8b:c1:b3:6e:c6:da:1d:7e:bb:2e:c9:3a:93:
1c:ce:7a:09:35:93:27:f2:e0:30:58:b3:27:a0:37:49:38:1b:
27:1f:f9:18:16:93:40:22:f8:aa:bb:45:bb:a2:4b:0e:47:59:
75:0c:fa:36:68:ee:79:dd:7d:f7:99:39:3d:c4:d1:ec:88:e1:
a8:f4:9a:38:3c:c7:7e:3c:56:76:44:5c:db:0b:88:c1:f5:5d:
0d:fa:a5:2e:f9:4d:09:12:22:58:08:e9:d0:42:6a:42:73:ca:
de:40:d7:b6:2c:60:d7:5c:26:27:92:a7:ff:c6:c5:41:b4:2e:
e3:6a:70:dc:43:1e:13:05:30:4e:28:b8:34:5a:f4:2d:ec:e1:
99:a8:b2:8c:a4:4d:57:82:10:ac:d7:38:11:35:b7:e5:3b:21:
56:15:a9:0b:8d:8f:37:a2:8c:58:cd:bf:c3:ac:70:9f:aa:f8:
d8:23:5f:96:c9:09:6c:5f:6c:94:20:04:8b:e4:e4:82:28:59:
6a:63:ee:4b:5a:02:57:2c:34:1c:af:e6:bd:15:c1:b0:0a:75:
39:62:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:20 2026 by rpki-client