This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/323830333a623661303a3a2f33322d3438203d3e20323636393035.roa
File: 323830333a623661303a3a2f33322d3438203d3e20323636393035.roa (raw, json)
Hash identifier: vrcTTaW0gjJF1EGhWC+RtWa2lOCjtyJKbnmk9SZ1FT0=
Subject key identifier: BC:DA:14:12:63:28:A7:DB:07:84:1E:0D:5F:DE:DF:C6:E0:AF:A8:C6
Certificate issuer: /CN=23FD7D3F5EBB7058156B4568BF40261FE4747941
Certificate serial: 070F8F3A1EAEB6652EA88F83F64D27D69C72B835
Authority key identifier: 23:FD:7D:3F:5E:BB:70:58:15:6B:45:68:BF:40:26:1F:E4:74:79:41
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/323830333a623661303a3a2f33322d3438203d3e20323636393035.roa
Signing time: Tue 06 Jan 2026 19:06:46 +0000
ROA not before: Tue 06 Jan 2026 19:01:46 +0000
ROA not after: Tue 05 Jan 2027 19:06:46 +0000
asID: 266905
IP address blocks: 2803:b6a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.crl
rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 10:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0f:8f:3a:1e:ae:b6:65:2e:a8:8f:83:f6:4d:27:d6:9c:72:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23FD7D3F5EBB7058156B4568BF40261FE4747941
Validity
Not Before: Jan 6 19:01:46 2026 GMT
Not After : Jan 5 19:06:46 2027 GMT
Subject: CN=BCDA14126328A7DB07841E0D5FDEDFC6E0AFA8C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:82:92:b6:93:3a:5c:72:95:fa:d2:0f:86:
8d:81:d5:29:79:d6:00:c6:03:7d:29:46:69:0f:07:
d8:10:9d:0c:02:98:38:78:c2:b1:db:54:6c:97:be:
44:2c:62:06:24:7a:13:fd:f0:69:42:f8:9a:c1:75:
73:30:92:1d:f2:0d:40:52:b9:c5:85:91:ef:f8:73:
a7:3f:ec:a2:94:89:04:34:ff:1e:43:4a:43:d1:00:
90:78:31:cf:d2:1a:b7:ce:c2:5c:75:d0:30:05:f6:
15:e4:d9:23:de:38:c2:69:14:aa:3d:98:50:90:bc:
be:a4:a9:0d:d7:3d:9e:24:19:84:4e:82:fc:fe:71:
9b:22:81:33:be:f5:66:7a:d1:9a:d4:ac:5c:0d:be:
89:45:40:e0:9a:cf:99:a2:f5:ad:f6:a8:5d:3a:d8:
e9:bd:8c:fb:2a:30:61:56:3d:80:8e:61:18:32:65:
d4:55:dc:fd:f1:ff:68:55:d0:53:d2:89:8d:0e:d1:
e3:e1:ae:7b:c6:a1:e2:b1:5c:4a:be:1b:c3:3a:83:
2f:88:97:8b:d5:da:e9:61:bb:4a:67:58:5a:f5:c0:
16:e7:2e:14:26:19:e2:b7:e4:04:b4:fe:e3:3f:bc:
e4:0c:d9:06:b7:2e:98:88:9a:f8:1c:f3:57:e9:f5:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DA:14:12:63:28:A7:DB:07:84:1E:0D:5F:DE:DF:C6:E0:AF:A8:C6
X509v3 Authority Key Identifier:
keyid:23:FD:7D:3F:5E:BB:70:58:15:6B:45:68:BF:40:26:1F:E4:74:79:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/323830333a623661303a3a2f33322d3438203d3e20323636393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b6a0::/32
Signature Algorithm: sha256WithRSAEncryption
79:73:8c:00:c8:df:d9:75:94:b5:67:ff:c1:71:12:31:ad:5a:
12:cd:b0:96:91:b8:eb:6f:d6:fb:c8:60:85:cc:18:57:47:d5:
88:bf:44:48:42:8f:03:33:93:54:cc:33:95:52:39:f4:64:a9:
b4:c7:3f:e7:ff:e6:52:e7:a4:5e:ac:9b:09:f8:a4:e8:01:3f:
54:f0:72:9c:0c:13:1a:19:d1:07:bc:67:6f:0e:d2:f5:5f:e1:
ff:3d:2e:9e:98:e3:dd:94:87:8c:98:ad:36:94:4b:a2:55:74:
34:a4:cb:59:27:6f:a1:70:c0:cf:c8:47:b8:0b:7f:77:a3:91:
2f:e2:e3:23:da:de:29:89:f5:d0:32:5b:b3:2c:07:ec:fc:0b:
43:01:b9:d2:1d:92:83:15:aa:cb:4f:39:15:70:19:e2:4e:26:
1a:8a:5c:37:9a:1b:17:24:35:ed:7c:a5:ac:08:47:2d:55:73:
be:bb:2b:f8:71:16:ec:a3:7e:77:03:2a:57:6e:b4:31:c1:6a:
ea:b8:8d:00:a0:f5:90:87:f0:7c:5d:99:05:ad:f8:4e:2d:b5:
33:8b:96:4c:0d:66:af:a1:2f:b5:59:38:2d:24:a6:16:37:1a:
de:88:0f:4d:b5:21:33:95:e4:99:81:10:01:63:c4:b2:b3:4c:
2a:4a:ab:6e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBw+POh6utmUuqI+D9k0n1pxyuDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNGRDdEM0Y1RUJCNzA1ODE1NkI0NTY4QkY0MDI2MUZF
NDc0Nzk0MTAeFw0yNjAxMDYxOTAxNDZaFw0yNzAxMDUxOTA2NDZaMDMxMTAvBgNV
BAMTKEJDREExNDEyNjMyOEE3REIwNzg0MUUwRDVGREVERkM2RTBBRkE4QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMYKStpM6XHKV+tIPho2B1Sl5
1gDGA30pRmkPB9gQnQwCmDh4wrHbVGyXvkQsYgYkehP98GlC+JrBdXMwkh3yDUBS
ucWFke/4c6c/7KKUiQQ0/x5DSkPRAJB4Mc/SGrfOwlx10DAF9hXk2SPeOMJpFKo9
mFCQvL6kqQ3XPZ4kGYROgvz+cZsigTO+9WZ60ZrUrFwNvolFQOCaz5mi9a32qF06
2Om9jPsqMGFWPYCOYRgyZdRV3P3x/2hV0FPSiY0O0ePhrnvGoeKxXEq+G8M6gy+I
l4vV2ulhu0pnWFr1wBbnLhQmGeK35AS0/uM/vOQM2Qa3LpiImvgc81fp9XRbAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUvNoUEmMop9sHhB4NX97fxuCvqMYwHwYDVR0j
BBgwFoAUI/19P167cFgVa0Vov0AmH+R0eUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzFFRUE0QzZENTI4NzNCMDcyQjFGNEU1QzQ3MjM2QkVD
RTcyREM4NEU3MTc1NzJDRjhDQzg5NkUxM0U2RjUzLzAvMjNGRDdEM0Y1RUJCNzA1
ODE1NkI0NTY4QkY0MDI2MUZFNDc0Nzk0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yM0ZEN0QzRjVFQkI3MDU4MTU2
QjQ1NjhCRjQwMjYxRkU0NzQ3OTQxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjcxRUVBNEM2RDUyODczQjA3MkIxRjRFNUM0NzIzNkJFQ0U3MkRDODRF
NzE3NTcyQ0Y4Q0M4OTZFMTNFNkY1My8wLzMyMzgzMDMzM2E2MjM2NjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM5MzAzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDtqAw
DQYJKoZIhvcNAQELBQADggEBAHlzjADI39l1lLVn/8FxEjGtWhLNsJaRuOtv1vvI
YIXMGFdH1Yi/REhCjwMzk1TMM5VSOfRkqbTHP+f/5lLnpF6smwn4pOgBP1TwcpwM
ExoZ0Qe8Z28O0vVf4f89Lp6Y492Uh4yYrTaUS6JVdDSky1knb6FwwM/IR7gLf3ej
kS/i4yPa3imJ9dAyW7MsB+z8C0MBudIdkoMVqstPORVwGeJOJhqKXDeaGxckNe18
pawIRy1Vc767K/hxFuyjfncDKldutDHBauq4jQCg9ZCH8HxdmQWt+E4ttTOLlkwN
Zq+hL7VZOC0kphY3Gt6ID021ITOV5JmBEAFjxLKzTCpKq24=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:35 2026 by rpki-client