This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/323830333a313964303a3a2f33322d3438203d3e20323734313535.roa
File: 323830333a313964303a3a2f33322d3438203d3e20323734313535.roa (raw, json)
Hash identifier: Ls+wSc9mMc51JYv7V7CE2KaaxoT2KSGQGApgDheOCQg=
Subject key identifier: EF:64:9B:3A:E8:6B:DD:83:B5:45:FF:2A:9B:7D:E9:B4:A1:E8:CA:F6
Certificate issuer: /CN=C18F84ED385BAB6702DD1D316568FB19C7EB8CED
Certificate serial: 3F6A7C19A5B61651E2EE06898089A8EA6267C8D0
Authority key identifier: C1:8F:84:ED:38:5B:AB:67:02:DD:1D:31:65:68:FB:19:C7:EB:8C:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18F84ED385BAB6702DD1D316568FB19C7EB8CED.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/323830333a313964303a3a2f33322d3438203d3e20323734313535.roa
Signing time: Tue 18 Nov 2025 20:00:00 +0000
ROA not before: Tue 18 Nov 2025 19:55:00 +0000
ROA not after: Tue 17 Nov 2026 20:00:00 +0000
asID: 274155
IP address blocks: 2803:19d0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/C18F84ED385BAB6702DD1D316568FB19C7EB8CED.crl
rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/C18F84ED385BAB6702DD1D316568FB19C7EB8CED.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18F84ED385BAB6702DD1D316568FB19C7EB8CED.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6a:7c:19:a5:b6:16:51:e2:ee:06:89:80:89:a8:ea:62:67:c8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C18F84ED385BAB6702DD1D316568FB19C7EB8CED
Validity
Not Before: Nov 18 19:55:00 2025 GMT
Not After : Nov 17 20:00:00 2026 GMT
Subject: CN=EF649B3AE86BDD83B545FF2A9B7DE9B4A1E8CAF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:b5:6e:91:e4:0b:13:ad:44:0c:23:ca:ee:
ea:71:41:06:96:92:03:07:8b:c2:47:73:35:0e:bb:
bb:d2:94:92:53:36:7f:79:60:4f:32:e7:52:67:07:
90:fa:ac:c7:9c:f6:2c:38:9b:b3:9b:47:42:15:56:
45:ba:d7:5a:81:31:76:12:50:4a:6a:3b:ad:ed:8d:
65:af:f5:ee:07:3f:ef:5b:42:f5:d2:9e:91:1b:76:
b0:bf:7a:66:f7:5c:0d:11:b9:8a:ba:49:a5:73:49:
95:2d:d8:41:0f:46:a9:52:ba:17:21:ec:45:69:b6:
ad:cd:8c:46:83:b9:4a:bd:1f:a9:55:48:40:da:be:
ba:5d:e7:f0:61:4f:7a:39:4d:07:9b:00:e4:4d:b8:
da:0e:41:be:6c:28:a9:18:d5:2c:ae:b1:14:3e:df:
dd:20:e8:cc:f0:12:3b:a6:9b:b4:0d:41:88:ec:71:
89:98:95:0e:ab:da:58:0b:fb:09:28:e4:cb:d1:48:
35:29:50:4f:49:d1:9f:31:92:1a:04:97:04:4c:e3:
15:16:23:50:03:fe:ae:dd:c2:c6:ec:bb:38:da:b7:
80:ba:2c:58:78:6e:72:7f:14:c9:d4:f2:04:0a:dc:
15:eb:21:d8:23:42:15:a7:4c:3b:1f:61:5e:89:7b:
d9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:64:9B:3A:E8:6B:DD:83:B5:45:FF:2A:9B:7D:E9:B4:A1:E8:CA:F6
X509v3 Authority Key Identifier:
keyid:C1:8F:84:ED:38:5B:AB:67:02:DD:1D:31:65:68:FB:19:C7:EB:8C:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/C18F84ED385BAB6702DD1D316568FB19C7EB8CED.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18F84ED385BAB6702DD1D316568FB19C7EB8CED.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/323830333a313964303a3a2f33322d3438203d3e20323734313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:19d0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:23:8d:3b:7a:5b:1b:01:c7:09:df:e6:ea:0f:e2:30:62:50:
f8:09:1a:f3:67:02:ed:aa:28:bc:c3:33:51:f2:41:8e:67:43:
fd:5e:22:81:14:32:6f:5c:0d:16:69:84:6c:80:05:04:90:a4:
80:27:a3:bf:a6:10:23:c5:20:e7:cc:43:43:d0:41:1c:d9:ea:
1f:76:f5:ef:b0:56:25:da:24:47:af:8f:02:d0:58:7c:09:b3:
6e:76:3e:09:f1:26:cf:56:e2:b7:02:31:f7:f9:f2:df:35:d7:
93:a1:c3:c8:c3:4d:a6:c9:4d:84:ff:8f:9b:59:dd:77:64:a1:
40:23:17:74:5d:19:73:72:27:85:72:4c:16:39:00:81:cf:ed:
3c:9f:53:69:76:f5:5d:d4:eb:e8:14:48:da:88:bb:2f:a2:59:
95:f6:7d:95:9a:9e:91:8c:d3:f7:57:ac:74:fc:5e:21:81:09:
17:03:7d:2f:0c:9e:c1:df:6b:ac:2d:4e:c6:74:0e:4d:a7:16:
cf:3e:d4:1e:22:e5:e8:00:bc:49:30:a5:00:b5:6f:bd:9b:ac:
86:97:21:31:12:14:f7:d4:99:76:49:d7:56:b0:a5:ec:6d:64:
87:07:8d:3f:5c:62:fd:b2:1f:d0:c2:b6:ff:79:cc:a8:1d:af:
4a:a6:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:40:59 2025 by rpki-client