This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa
File: 323830333a343663303a3a2f33322d3332203d3e20323635363537.roa (raw, json)
Hash identifier: bLHVRoGNL7q3mfYHrgcA1L/+6OjUFU97H3BdbGfAt6A=
Subject key identifier: CE:9F:55:EA:C7:4A:AA:93:74:14:0F:BD:0F:46:4F:9E:C8:A6:31:DE
Certificate issuer: /CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
Certificate serial: 474555484B720363F187F0EA7F6165E78807FA60
Authority key identifier: B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa
Signing time: Tue 06 Jan 2026 20:56:27 +0000
ROA not before: Tue 06 Jan 2026 20:51:27 +0000
ROA not after: Tue 05 Jan 2027 20:56:27 +0000
asID: 265657
IP address blocks: 2803:46c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl
rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:45:55:48:4b:72:03:63:f1:87:f0:ea:7f:61:65:e7:88:07:fa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
Validity
Not Before: Jan 6 20:51:27 2026 GMT
Not After : Jan 5 20:56:27 2027 GMT
Subject: CN=CE9F55EAC74AAA9374140FBD0F464F9EC8A631DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:82:cc:32:ad:3e:27:1e:d5:cf:c5:28:63:
af:1b:3e:73:71:a2:8b:88:8c:c6:12:f0:ff:a1:c4:
2f:d4:82:59:a5:bd:b3:ef:12:ca:19:5d:02:98:41:
c7:ba:c3:75:6a:cb:14:90:e2:75:3c:02:93:b5:58:
ee:8b:24:9d:01:cf:df:2e:49:28:ea:cf:ba:a1:05:
00:85:97:9b:32:00:37:12:1a:72:58:7f:c5:9b:18:
3b:f0:ef:b1:73:57:99:34:0c:5d:cf:1b:dd:7a:07:
e5:db:da:9a:f8:ca:2c:4c:5f:6a:ea:82:69:f0:3e:
24:a9:9c:0c:38:c0:bc:a9:c6:65:62:27:ef:8e:e6:
4d:9b:47:8f:db:11:0f:22:0d:cf:6c:61:62:87:b5:
07:f0:51:f3:6d:a0:22:66:df:0c:54:b9:f9:cd:27:
88:52:fd:5a:ce:b1:ca:b3:3c:ce:85:42:8d:6d:f0:
14:c2:62:b3:07:d8:4b:e1:f4:5b:f3:61:0a:b1:2d:
42:3a:a8:e8:e3:9e:95:ca:49:01:af:6a:0e:4e:b1:
72:a9:63:b6:ac:92:ec:9f:f4:86:bf:80:66:2f:bc:
ab:07:e8:ff:83:65:5c:76:13:81:85:3c:7e:fe:69:
6a:15:3f:16:7e:7b:ea:5c:e1:02:ed:4e:be:d0:b8:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9F:55:EA:C7:4A:AA:93:74:14:0F:BD:0F:46:4F:9E:C8:A6:31:DE
X509v3 Authority Key Identifier:
keyid:B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/323830333a343663303a3a2f33322d3332203d3e20323635363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:46c0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:82:46:fd:a9:35:c2:e8:85:b8:33:1c:06:f1:a4:b8:2a:c2:
1b:c0:95:41:de:9b:f8:34:68:51:31:b3:b8:d3:f5:7f:16:44:
ae:a1:42:31:90:8a:ae:b2:54:b3:1e:7c:98:f5:22:9f:c9:e8:
a7:2f:c7:86:86:af:b9:c6:74:ea:6d:f2:84:77:5a:14:e0:98:
1d:bf:e4:48:e2:c1:91:ec:93:f9:8c:89:ef:e6:94:af:e2:d5:
2d:65:94:42:70:48:94:6c:0f:48:78:2b:d5:06:81:3d:19:8d:
77:73:86:58:3f:00:33:32:8e:80:d8:60:6f:f2:d6:e8:bf:c0:
57:d6:0c:73:c4:32:aa:25:80:bc:5f:9b:58:11:d2:46:09:0b:
a9:98:eb:23:4e:bc:85:01:02:57:22:1a:cc:3a:78:21:2e:b9:
b0:05:f8:8c:c9:b9:9f:ad:09:c2:73:44:65:96:35:44:74:0c:
15:af:b3:e2:39:17:bd:f6:30:67:26:f7:b5:a5:46:2e:7b:91:
d0:e5:9a:20:df:04:f0:53:73:7c:80:0e:b2:c1:27:e6:73:95:
4b:51:93:d4:ff:25:13:8e:9b:dd:05:a9:19:7b:ce:1f:f9:eb:
0e:79:3d:f2:d6:32:e6:f3:71:5f:85:9c:d8:37:d3:a4:dd:30:
35:e4:c7:26
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUR0VVSEtyA2Pxh/Dqf2Fl54gH+mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA1RDJBODIyMjAxMUU4QkUwMkM4QjBDM0QxNUQ0QTk0
MzY2MTk2QzAeFw0yNjAxMDYyMDUxMjdaFw0yNzAxMDUyMDU2MjdaMDMxMTAvBgNV
BAMTKENFOUY1NUVBQzc0QUFBOTM3NDE0MEZCRDBGNDY0RjlFQzhBNjMxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP8ILMMq0+Jx7Vz8UoY68bPnNx
oouIjMYS8P+hxC/UglmlvbPvEsoZXQKYQce6w3VqyxSQ4nU8ApO1WO6LJJ0Bz98u
SSjqz7qhBQCFl5syADcSGnJYf8WbGDvw77FzV5k0DF3PG916B+Xb2pr4yixMX2rq
gmnwPiSpnAw4wLypxmViJ++O5k2bR4/bEQ8iDc9sYWKHtQfwUfNtoCJm3wxUufnN
J4hS/VrOscqzPM6FQo1t8BTCYrMH2Evh9FvzYQqxLUI6qOjjnpXKSQGvag5OsXKp
Y7askuyf9Ia/gGYvvKsH6P+DZVx2E4GFPH7+aWoVPxZ+e+pc4QLtTr7QuCiPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUzp9V6sdKqpN0FA+9D0ZPnsimMd4wHwYDVR0j
BBgwFoAUsF0qgiIBHovgLIsMPRXUqUNmGWwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRkYzM0VGOTlDOEY4QTZEOTNDQjk3MjU1OUI5MTJGOTA4
RjVGMzIwOEEyOTc5MjgyNjZDODEwQTc0NDUyRENCLzAvQjA1RDJBODIyMjAxMUU4
QkUwMkM4QjBDM0QxNUQ0QTk0MzY2MTk2Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMDVEMkE4MjIyMDExRThCRTAy
QzhCMEMzRDE1RDRBOTQzNjYxOTZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ZGMzNFRjk5QzhGOEE2RDkzQ0I5NzI1NTlCOTEyRjkwOEY1RjMyMDhB
Mjk3OTI4MjY2QzgxMEE3NDQ1MkRDQi8wLzMyMzgzMDMzM2EzNDM2NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM2MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDRsAw
DQYJKoZIhvcNAQELBQADggEBAKOCRv2pNcLohbgzHAbxpLgqwhvAlUHem/g0aFEx
s7jT9X8WRK6hQjGQiq6yVLMefJj1Ip/J6Kcvx4aGr7nGdOpt8oR3WhTgmB2/5Eji
wZHsk/mMie/mlK/i1S1llEJwSJRsD0h4K9UGgT0ZjXdzhlg/ADMyjoDYYG/y1ui/
wFfWDHPEMqolgLxfm1gR0kYJC6mY6yNOvIUBAlciGsw6eCEuubAF+IzJuZ+tCcJz
RGWWNUR0DBWvs+I5F732MGcm97WlRi57kdDlmiDfBPBTc3yADrLBJ+ZzlUtRk9T/
JROOm90FqRl7zh/56w55PfLWMubzcV+FnNg306TdMDXkxyY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:53 2026 by rpki-client