This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/323830333a663839303a3a2f33362d3336203d3e20323732383132.roa
File: 323830333a663839303a3a2f33362d3336203d3e20323732383132.roa (raw, json)
Hash identifier: PlDITkGPOq08OUeMa3lnw1sqjL4ik/zFQ8qYH0JDrXc=
Subject key identifier: 3C:35:16:05:48:9C:3D:FD:7E:86:A4:5C:95:31:E6:C0:68:1E:E5:DE
Certificate issuer: /CN=4F17FCC8C3EABBDF83117BBA41369D63983E96C4
Certificate serial: 64CA7D86A8D1EBFD67741061BDA7D26E95B08A00
Authority key identifier: 4F:17:FC:C8:C3:EA:BB:DF:83:11:7B:BA:41:36:9D:63:98:3E:96:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/323830333a663839303a3a2f33362d3336203d3e20323732383132.roa
Signing time: Sun 18 Jan 2026 17:26:02 +0000
ROA not before: Sun 18 Jan 2026 17:21:02 +0000
ROA not after: Sun 17 Jan 2027 17:26:02 +0000
asID: 272812
IP address blocks: 2803:f890::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.crl
rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 22:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ca:7d:86:a8:d1:eb:fd:67:74:10:61:bd:a7:d2:6e:95:b0:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F17FCC8C3EABBDF83117BBA41369D63983E96C4
Validity
Not Before: Jan 18 17:21:02 2026 GMT
Not After : Jan 17 17:26:02 2027 GMT
Subject: CN=3C351605489C3DFD7E86A45C9531E6C0681EE5DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:5e:4d:27:9c:47:0e:08:df:76:65:dd:a4:
aa:c0:ef:4d:87:e5:cf:74:19:7c:fa:91:26:10:b4:
f8:ce:4c:57:60:f4:ab:ef:4c:c9:8d:4d:89:e5:9c:
fd:f4:a2:f7:e0:6e:23:38:f2:52:ec:b6:dc:b2:90:
82:ba:0a:06:e3:63:a5:b2:5e:3a:d8:1b:b0:4c:f2:
17:60:2c:ce:48:e9:00:f6:46:cd:1e:41:ef:70:98:
df:52:19:81:57:9e:d9:15:70:9c:51:87:57:1e:3a:
d5:10:23:db:fc:fb:c4:a7:17:1e:72:2d:3a:07:21:
43:14:17:b0:8d:03:89:1b:c6:e0:db:24:a3:8d:6d:
dd:97:24:45:7e:96:21:81:ac:56:11:db:fe:a8:b8:
56:35:e3:c0:9f:ff:bb:ed:df:07:3c:41:2b:9c:52:
94:78:c8:ee:aa:07:6d:5e:88:0d:00:f6:6b:9f:de:
b1:94:08:82:91:9c:2b:bc:e8:45:03:d5:b0:de:47:
c4:71:e1:19:52:64:be:d9:54:9e:bc:c9:24:54:f8:
57:7a:51:97:16:5c:83:52:c9:b8:05:69:2a:2a:32:
8a:77:16:2d:de:c5:16:33:79:28:70:b7:2a:5c:8b:
f0:fd:0b:ae:37:db:df:3d:82:9a:59:99:ab:10:ae:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:35:16:05:48:9C:3D:FD:7E:86:A4:5C:95:31:E6:C0:68:1E:E5:DE
X509v3 Authority Key Identifier:
keyid:4F:17:FC:C8:C3:EA:BB:DF:83:11:7B:BA:41:36:9D:63:98:3E:96:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/323830333a663839303a3a2f33362d3336203d3e20323732383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f890::/36
Signature Algorithm: sha256WithRSAEncryption
a0:37:18:ca:52:84:60:bc:5f:fc:82:0d:b0:a6:f5:45:64:ab:
86:3d:36:ea:7c:ae:31:a4:c7:7b:25:70:bf:d2:16:9e:02:3f:
a1:0c:3d:b4:91:ed:72:e0:59:78:d9:c1:38:f6:da:46:e3:3c:
ac:40:4f:2e:10:96:d6:72:99:68:b3:32:d3:61:1e:72:87:a8:
44:a2:8a:99:98:d5:26:d3:7b:88:93:22:ad:b2:42:4f:53:7b:
6f:50:ff:d1:42:52:c9:af:f4:76:c7:b1:94:30:8b:9b:78:97:
ac:fa:e0:9a:d7:c3:d1:d5:3a:e6:9e:d1:20:49:a4:f3:79:69:
29:62:09:24:be:33:ce:e7:33:84:f4:db:4a:73:89:c9:cd:7f:
41:96:7d:e4:ef:cb:a9:54:fc:94:f9:c8:b5:17:59:03:9d:e7:
0d:f9:de:5e:3b:4f:6f:9d:d3:a4:cc:8f:80:d9:92:df:de:e3:
09:23:13:0b:bb:1c:06:d4:f0:f6:b6:0c:5c:9c:67:7a:9d:3d:
27:bb:14:28:cb:b1:a6:2c:d8:67:04:fb:ff:32:57:83:42:aa:
30:d8:37:48:91:6d:1f:76:51:80:aa:bc:46:b1:95:9a:8d:51:
aa:2d:c9:e8:68:77:ed:89:f2:43:55:c3:bb:5f:82:38:c5:0a:
7f:67:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:06 2026 by rpki-client