This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/323830333a366130303a3a2f33322d3332203d3e203532333737.roa
File: 323830333a366130303a3a2f33322d3332203d3e203532333737.roa (raw, json)
Hash identifier: KZQXwG6BAA0o7or9Lq3tUDjrVSgtivxVuduCj/93k3E=
Subject key identifier: DE:58:0E:55:03:70:F8:99:FF:0A:FE:CC:0A:B8:BA:C9:85:46:33:65
Certificate issuer: /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial: 3E08961B0B28490CF888091516A347F4EA88C88D
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/323830333a366130303a3a2f33322d3332203d3e203532333737.roa
Signing time: Tue 06 Jan 2026 19:07:13 +0000
ROA not before: Tue 06 Jan 2026 19:02:13 +0000
ROA not after: Tue 05 Jan 2027 19:07:13 +0000
asID: 52377
IP address blocks: 2803:6a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:08:96:1b:0b:28:49:0c:f8:88:09:15:16:a3:47:f4:ea:88:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Validity
Not Before: Jan 6 19:02:13 2026 GMT
Not After : Jan 5 19:07:13 2027 GMT
Subject: CN=DE580E550370F899FF0AFECC0AB8BAC985463365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:95:14:20:43:a6:73:3c:27:bd:09:4c:29:
42:2a:50:46:28:56:0a:c3:2a:19:6a:e3:f7:e9:7f:
2b:5a:dc:40:5d:c1:51:4f:01:06:e8:cc:89:ed:83:
dd:bb:c5:8e:35:a3:72:6d:4e:a7:74:a0:33:77:0c:
70:2e:2e:2a:6f:13:b6:80:0c:72:68:43:e5:43:7f:
fa:6e:12:8c:7b:09:25:73:6c:0b:6c:f8:05:51:95:
05:96:83:89:2d:30:36:29:b0:41:1b:21:f0:17:e8:
4c:f2:58:d4:66:0a:14:87:81:cf:5e:5a:b2:86:0f:
f0:a4:2f:53:9a:dd:e7:92:48:19:8a:a0:53:ad:28:
18:ca:f7:13:bf:94:ea:4a:9f:57:31:6b:7b:74:82:
0f:e9:73:eb:1e:5c:16:8b:39:87:df:a1:eb:00:5a:
06:5a:3e:5e:2f:88:97:c9:c1:d9:2c:41:6e:da:ec:
f1:2b:22:9d:b8:69:18:a0:c4:9d:a9:a8:f1:f8:ad:
b0:dc:72:2e:eb:35:8e:68:4c:16:cf:03:af:1f:ca:
43:b5:9d:73:32:ba:91:d1:68:c8:66:88:8b:2b:6a:
23:84:15:f8:a2:18:8c:72:a5:a5:94:3a:6a:ce:f6:
52:b9:bd:d4:91:4b:a9:a4:30:10:ad:89:0c:d6:7b:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:58:0E:55:03:70:F8:99:FF:0A:FE:CC:0A:B8:BA:C9:85:46:33:65
X509v3 Authority Key Identifier:
keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/323830333a366130303a3a2f33322d3332203d3e203532333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6a00::/32
Signature Algorithm: sha256WithRSAEncryption
29:5d:98:07:0f:19:a0:6e:f4:68:73:d7:49:22:f8:cd:bf:25:
c0:c2:72:da:b8:95:04:d2:9b:2f:79:0c:36:63:65:98:14:0f:
6f:17:e8:12:00:14:43:47:16:7a:1d:24:00:54:3b:ad:a2:37:
b4:a4:4d:4e:83:38:8e:4f:c8:3c:01:2a:79:39:48:86:47:4f:
e5:46:fe:8b:bc:f8:b4:17:52:08:6a:3a:15:3c:fe:02:29:80:
ae:cd:3b:48:2b:b8:b9:d1:a6:0e:f9:15:d0:0a:74:69:93:57:
fc:ec:cf:48:a4:f4:55:ca:a6:6f:a2:83:b3:bb:8d:49:4f:2e:
fa:a2:c7:24:71:be:ae:f3:df:ad:6e:dd:a1:59:ef:71:28:39:
e9:1c:9e:32:3b:93:70:c4:7c:3a:dc:4a:1d:42:46:e3:0d:f8:
92:dd:2c:6a:9f:70:06:5d:73:19:65:53:b6:e7:d0:c6:3c:85:
37:98:7d:e3:a1:02:76:4c:d5:16:27:8a:1e:47:b1:26:77:1a:
06:82:e3:1d:94:9e:6a:7d:c2:80:7e:67:7f:34:1a:8d:61:7b:
78:19:78:27:3b:d7:5c:1c:a5:4b:6d:5c:50:01:ad:9b:8b:8e:
88:66:92:6a:65:c4:29:63:b5:80:c9:08:33:e3:d7:2f:28:76:
63:07:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:43:40 2026 by rpki-client