This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/323830333a316563303a3a2f33322d3332203d3e20323635363731.roa
File: 323830333a316563303a3a2f33322d3332203d3e20323635363731.roa (raw, json)
Hash identifier: Bt2sa5SKakuyNZb2kELLPL/IoLS5YttelSswZmuJwq4=
Subject key identifier: 1F:CE:CD:3B:75:9E:8B:C0:16:F7:FE:5C:33:04:15:3C:94:DA:53:AE
Certificate issuer: /CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Certificate serial: 3749E50E6D0C21E02AB0610B66014498103D4E51
Authority key identifier: B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/323830333a316563303a3a2f33322d3332203d3e20323635363731.roa
Signing time: Tue 06 Jan 2026 19:17:38 +0000
ROA not before: Tue 06 Jan 2026 19:12:38 +0000
ROA not after: Tue 05 Jan 2027 19:17:38 +0000
asID: 265671
IP address blocks: 2803:1ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl
rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 02:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:49:e5:0e:6d:0c:21:e0:2a:b0:61:0b:66:01:44:98:10:3d:4e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Validity
Not Before: Jan 6 19:12:38 2026 GMT
Not After : Jan 5 19:17:38 2027 GMT
Subject: CN=1FCECD3B759E8BC016F7FE5C3304153C94DA53AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:c3:5e:f7:2e:e8:de:d3:53:58:e7:23:86:
49:7f:a4:91:4c:8e:c5:3e:df:e3:48:fe:d2:a7:c0:
0e:d3:15:12:f9:f0:4d:84:e0:10:23:6a:71:d5:35:
10:c8:e1:3a:55:dc:33:18:ac:2b:b8:90:16:99:bf:
03:41:a4:19:4e:2e:81:7b:bf:dc:48:67:d8:35:29:
f1:be:b9:31:c8:28:d0:80:11:5b:4d:a2:ee:ce:7d:
8f:25:7e:5e:d6:dd:b8:28:98:8b:7b:7a:17:f3:97:
20:fd:f0:79:f0:d4:ca:d7:aa:4e:d3:98:a1:ad:f0:
d8:cc:dc:ef:53:06:8c:b6:26:50:05:c1:ff:5c:ce:
1b:3c:73:a3:af:0d:19:1b:64:f6:d6:af:d9:24:98:
f1:f0:6a:48:3e:81:9b:87:9e:50:fe:79:5d:d4:e8:
04:15:14:66:a5:e8:9a:e6:63:52:8e:89:55:69:af:
08:72:26:83:41:48:42:1a:16:e7:a9:2f:3b:e1:54:
3a:9a:05:db:ec:a0:b1:db:71:76:27:a0:d6:80:ef:
24:6d:29:04:c0:50:62:f9:f4:34:27:1b:69:a2:c1:
ba:3f:c5:1a:12:68:3f:01:f2:1c:94:c0:8f:24:1d:
62:b9:ba:27:8f:b3:cf:37:3e:94:6d:26:09:41:4f:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CE:CD:3B:75:9E:8B:C0:16:F7:FE:5C:33:04:15:3C:94:DA:53:AE
X509v3 Authority Key Identifier:
keyid:B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/323830333a316563303a3a2f33322d3332203d3e20323635363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1ec0::/32
Signature Algorithm: sha256WithRSAEncryption
83:5b:73:21:0b:9c:b1:0b:5c:3d:bd:2f:16:d8:e5:3b:96:c5:
7c:25:d6:cc:29:b7:60:11:29:7d:e9:bd:3a:7b:a9:35:0c:06:
69:36:39:12:ce:ce:cd:d0:bc:f8:96:2d:f0:7b:c3:31:c0:0f:
62:1c:c1:5e:13:c8:0f:cf:58:2d:5f:f2:52:1a:64:c2:e1:04:
ba:ba:8f:ec:78:a1:f7:60:25:7b:aa:e2:4d:8d:22:ed:95:6e:
ec:ac:93:f6:32:33:cf:c0:34:63:7e:4d:32:1c:8c:b5:ae:95:
2c:d0:2a:86:29:e3:28:cd:a5:07:d9:4e:e8:e1:8c:d0:78:91:
90:bb:da:64:9b:11:9c:5c:1f:6e:79:d8:bd:de:6f:57:95:22:
55:95:43:12:4d:59:54:39:b9:f1:4e:f6:bc:cb:6e:af:27:70:
82:3a:d7:51:f1:8d:2e:bb:5c:8f:08:d6:40:cb:81:c8:82:d9:
c2:29:59:a4:09:cb:ee:d8:74:0a:bb:6f:d5:c1:68:3a:1e:14:
61:0e:17:40:a1:5e:d5:2d:8f:bd:02:94:3b:fa:a7:44:0b:d2:
04:d0:51:c5:7a:aa:a6:76:eb:62:b4:81:89:63:18:a8:7b:66:
68:23:af:4d:55:6b:67:7b:e6:cc:12:55:94:86:49:62:85:dc:
5d:ff:7a:5d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUN0nlDm0MIeAqsGELZgFEmBA9TlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRDRjk0RUM3MTU0RDJCQzUxMDY2RDVCQjU1NkE3NTg5
NTE0QTVDNjAeFw0yNjAxMDYxOTEyMzhaFw0yNzAxMDUxOTE3MzhaMDMxMTAvBgNV
BAMTKDFGQ0VDRDNCNzU5RThCQzAxNkY3RkU1QzMzMDQxNTNDOTREQTUzQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+cNe9y7o3tNTWOcjhkl/pJFM
jsU+3+NI/tKnwA7TFRL58E2E4BAjanHVNRDI4TpV3DMYrCu4kBaZvwNBpBlOLoF7
v9xIZ9g1KfG+uTHIKNCAEVtNou7OfY8lfl7W3bgomIt7ehfzlyD98Hnw1MrXqk7T
mKGt8NjM3O9TBoy2JlAFwf9czhs8c6OvDRkbZPbWr9kkmPHwakg+gZuHnlD+eV3U
6AQVFGal6JrmY1KOiVVprwhyJoNBSEIaFuepLzvhVDqaBdvsoLHbcXYnoNaA7yRt
KQTAUGL59DQnG2miwbo/xRoSaD8B8hyUwI8kHWK5uiePs883PpRtJglBT4ndAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUH87NO3Wei8AW9/5cMwQVPJTaU64wHwYDVR0j
BBgwFoAUtM+U7HFU0rxRBm1btVanWJUUpcYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80REI3QzVBQUU5Njc2Q0E4MjA4QjNEODcyMUQxMzE0NTUz
RjFGQzRCRTVCNTAwQjNBODk1NUU5MzYyRThDMDBGLzAvQjRDRjk0RUM3MTU0RDJC
QzUxMDY2RDVCQjU1NkE3NTg5NTE0QTVDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNENGOTRFQzcxNTREMkJDNTEw
NjZENUJCNTU2QTc1ODk1MTRBNUM2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNERCN0M1QUFFOTY3NkNBODIwOEIzRDg3MjFEMTMxNDU1M0YxRkM0QkU1
QjUwMEIzQTg5NTVFOTM2MkU4QzAwRi8wLzMyMzgzMDMzM2EzMTY1NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM2MzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDHsAw
DQYJKoZIhvcNAQELBQADggEBAINbcyELnLELXD29LxbY5TuWxXwl1swpt2ARKX3p
vTp7qTUMBmk2ORLOzs3QvPiWLfB7wzHAD2IcwV4TyA/PWC1f8lIaZMLhBLq6j+x4
ofdgJXuq4k2NIu2Vbuysk/YyM8/ANGN+TTIcjLWulSzQKoYp4yjNpQfZTujhjNB4
kZC72mSbEZxcH2552L3eb1eVIlWVQxJNWVQ5ufFO9rzLbq8ncII611HxjS67XI8I
1kDLgciC2cIpWaQJy+7YdAq7b9XBaDoeFGEOF0ChXtUtj70ClDv6p0QL0gTQUcV6
qqZ262K0gYljGKh7Zmgjr01Va2d75swSVZSGSWKF3F3/el0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:19:00 2026 by rpki-client