This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/323830333a343732303a3a2f33322d3438203d3e203532333431.roa
File: 323830333a343732303a3a2f33322d3438203d3e203532333431.roa (raw, json)
Hash identifier: 6NO+V5J1+fqsZ9W/4JPJMzvmi82z3ufg6kYS99aCt3o=
Subject key identifier: 04:7A:73:5B:ED:FF:59:A0:5A:3D:EC:95:A7:6E:AE:0C:38:9D:56:7B
Certificate issuer: /CN=31F3439B94DD2FA758654AE121FAFA811BA0BC06
Certificate serial: 5FF3B41AF5E0FA609214DAE59936D69F35522A48
Authority key identifier: 31:F3:43:9B:94:DD:2F:A7:58:65:4A:E1:21:FA:FA:81:1B:A0:BC:06
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/323830333a343732303a3a2f33322d3438203d3e203532333431.roa
Signing time: Tue 06 Jan 2026 19:17:05 +0000
ROA not before: Tue 06 Jan 2026 19:12:05 +0000
ROA not after: Tue 05 Jan 2027 19:17:05 +0000
asID: 52341
IP address blocks: 2803:4720::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.crl
rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f3:b4:1a:f5:e0:fa:60:92:14:da:e5:99:36:d6:9f:35:52:2a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F3439B94DD2FA758654AE121FAFA811BA0BC06
Validity
Not Before: Jan 6 19:12:05 2026 GMT
Not After : Jan 5 19:17:05 2027 GMT
Subject: CN=047A735BEDFF59A05A3DEC95A76EAE0C389D567B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:93:5c:73:8a:6e:77:40:15:9a:dd:85:7f:29:
4d:d0:0a:60:4d:d0:64:6e:1c:cf:dd:03:63:9e:9f:
5a:28:be:66:96:2d:12:18:30:ea:af:2e:d4:44:d0:
b0:ea:f8:e7:9a:90:30:6a:35:c6:13:51:3d:21:77:
4a:c8:7e:16:93:e6:93:47:d9:73:16:a5:f9:9d:2b:
40:a6:73:1b:fc:bf:7a:35:be:90:58:a8:bc:69:76:
37:6d:5d:32:33:54:61:b0:e3:3a:13:8a:64:ff:25:
6b:b8:18:d6:e0:aa:e4:47:18:11:c2:5c:bf:7b:c3:
b0:d2:4d:72:92:cd:9a:05:a4:20:e0:e1:f5:60:f7:
f8:17:e5:43:f2:6a:cf:0c:f0:cf:70:10:e6:38:70:
e8:10:90:76:5d:ad:c1:82:1e:45:79:e6:e4:60:8f:
83:72:67:9b:90:5c:62:45:ed:ee:f9:c0:01:cb:d3:
89:23:62:b8:52:6c:f3:b0:5c:23:d5:c9:d6:1b:82:
89:fc:3d:09:24:1a:5d:9c:ca:a9:06:57:d5:43:5a:
70:91:8f:12:e4:b5:4f:17:5c:7a:7c:fe:dd:77:f1:
a8:01:e7:c2:5e:71:f3:f4:1b:3b:1c:66:10:30:1d:
95:3f:f2:23:3c:91:b3:ee:8e:c8:c3:12:40:81:2f:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7A:73:5B:ED:FF:59:A0:5A:3D:EC:95:A7:6E:AE:0C:38:9D:56:7B
X509v3 Authority Key Identifier:
keyid:31:F3:43:9B:94:DD:2F:A7:58:65:4A:E1:21:FA:FA:81:1B:A0:BC:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/323830333a343732303a3a2f33322d3438203d3e203532333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4720::/32
Signature Algorithm: sha256WithRSAEncryption
39:53:25:5f:83:f2:a3:83:37:60:95:4e:bd:a1:f8:ec:f9:36:
86:13:ee:02:66:d3:36:e9:6d:96:8b:7b:5e:2e:c9:fb:61:1d:
53:17:31:72:5b:08:7a:fe:3b:93:07:26:3a:e4:2e:38:3d:7f:
f3:0b:b9:11:b3:0f:75:9c:f9:ad:d8:27:c3:ef:47:72:b5:c1:
a0:16:3c:e0:df:da:b3:5e:22:8d:08:e4:4f:ac:e0:a0:90:b1:
91:29:f3:d6:99:2a:87:8e:6c:08:e4:f5:e6:07:7d:88:48:65:
80:43:ff:4a:cb:ce:4a:ea:ae:bf:80:c2:16:2f:94:14:a4:83:
a2:17:ed:55:3a:f0:33:47:30:8d:f8:e5:ae:e7:e4:f5:39:dd:
fa:59:b7:d7:c8:26:44:3e:0e:56:87:25:50:42:de:79:98:97:
fa:7f:61:4b:e4:3b:74:ed:15:d3:24:57:bb:67:07:5f:b1:01:
84:3e:57:c9:16:25:cc:9c:4d:c0:65:4e:92:85:01:51:4c:e0:
89:19:9c:e9:86:14:7b:23:c2:99:11:e2:67:fb:0d:6f:38:c4:
bd:2c:49:dc:62:ec:d1:1a:db:4a:17:35:15:b0:ec:c6:46:f8:
c1:22:ce:54:99:51:df:a9:8a:23:38:3b:61:9d:da:7f:e4:ea:
95:96:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:23 2026 by rpki-client