This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa
File: 323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa (raw, json)
Hash identifier: /S9FBjdHdDmKM4gkrFWARETkkqiMpiMv1Mp8IdLNqsU=
Subject key identifier: 8C:A0:5A:D9:B4:89:77:A6:24:25:42:E5:A6:42:FF:51:CF:F0:83:CC
Certificate issuer: /CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E
Certificate serial: 1C46F263331CD668406731317CBEF70BF24BD68D
Authority key identifier: 3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa
Signing time: Tue 06 Jan 2026 19:37:53 +0000
ROA not before: Tue 06 Jan 2026 19:32:53 +0000
ROA not after: Tue 05 Jan 2027 19:37:53 +0000
asID: 270127
IP address blocks: 2801:c4:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl
rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:46:f2:63:33:1c:d6:68:40:67:31:31:7c:be:f7:0b:f2:4b:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E
Validity
Not Before: Jan 6 19:32:53 2026 GMT
Not After : Jan 5 19:37:53 2027 GMT
Subject: CN=8CA05AD9B48977A6242542E5A642FF51CFF083CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:2e:46:ed:bf:13:7f:b1:47:25:34:75:68:
58:fb:db:2d:3a:8c:60:69:46:99:eb:18:b5:30:d5:
a4:84:ef:a8:bb:4a:61:ad:fa:fd:ed:20:04:f6:0a:
d4:24:7a:b0:21:c5:fd:45:30:77:0c:d8:b7:3c:61:
1c:71:89:d2:53:60:37:69:af:5c:fa:b6:18:28:8b:
36:cc:1e:d4:11:2b:ff:a4:37:b1:93:bb:1c:66:8f:
a6:32:29:08:0a:71:06:75:16:a5:21:f7:ba:57:66:
82:41:7c:bf:c4:5f:74:bd:ab:9c:75:94:dc:30:d4:
eb:04:8d:de:7f:42:60:69:57:e6:1d:aa:d2:9a:a7:
ce:77:60:8b:d0:fd:7f:da:c2:8d:78:ce:1f:f4:d1:
d6:ab:15:d2:21:68:c3:27:3d:88:aa:9a:a8:c8:b1:
8e:67:04:12:78:81:15:8b:15:e9:57:b0:6c:3a:de:
ae:9c:12:e5:06:6d:4f:d7:07:8c:31:02:65:20:3b:
ec:22:d8:ab:04:67:ef:7e:36:21:a2:1a:5c:42:67:
f4:ca:ea:41:30:2a:fc:5f:5c:23:8b:c6:df:e5:85:
f3:05:3e:88:29:f9:b4:95:a2:84:5a:c9:1a:d1:8b:
d4:d3:de:e3:3b:f0:41:8d:b4:89:7f:47:a3:50:6a:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:5A:D9:B4:89:77:A6:24:25:42:E5:A6:42:FF:51:CF:F0:83:CC
X509v3 Authority Key Identifier:
keyid:3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:c4:2a::/48
Signature Algorithm: sha256WithRSAEncryption
1f:71:93:e2:8f:71:7b:f1:a7:87:16:3c:19:07:8f:b9:57:05:
9a:8e:62:d7:b9:ba:44:eb:17:b7:81:83:a6:31:3b:98:46:5e:
00:c7:14:7b:41:01:39:99:a1:dd:95:f0:5c:ec:26:84:13:af:
0a:c0:d7:b5:e8:45:6d:5b:14:c9:d7:e0:5c:e5:36:3e:10:38:
82:61:67:23:bd:c7:7f:0a:7a:74:0a:a1:a5:65:d9:db:cd:a7:
94:f3:76:65:cc:e9:7a:4d:46:2e:5c:96:93:31:92:a8:3c:a0:
3e:76:6d:fe:54:54:75:5a:ee:4b:49:4c:a8:32:ee:e3:e7:a9:
b4:d5:c6:1f:4a:16:3c:b6:1f:50:5e:57:85:1d:57:ae:02:cc:
ca:d2:85:19:a1:e1:4f:55:8f:7a:c4:33:6b:08:c3:95:5d:ea:
d1:81:59:87:ff:01:6b:d8:31:a8:9b:75:aa:8c:fe:4b:8d:a6:
42:90:e3:b1:12:a7:ff:af:07:5b:1e:51:92:d5:fc:40:9f:96:
09:29:15:54:a1:00:01:d2:9f:56:71:80:c9:91:f2:e3:b8:27:
95:7e:c2:30:a2:14:be:cd:53:f6:e5:a9:e4:7e:3d:c9:72:ab:
17:f3:bc:6a:bb:6a:af:cb:43:e3:66:72:dd:02:37:4e:cb:99:
bb:6c:5e:8c
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUHEbyYzMc1mhAZzExfL73C/JL1o0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGM0U0MzVDN0FGMTQ4OTJDQUExQ0IzNzUxNEU0RDE1
RjZEODUyRTAeFw0yNjAxMDYxOTMyNTNaFw0yNzAxMDUxOTM3NTNaMDMxMTAvBgNV
BAMTKDhDQTA1QUQ5QjQ4OTc3QTYyNDI1NDJFNUE2NDJGRjUxQ0ZGMDgzQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11y5G7b8Tf7FHJTR1aFj72y06
jGBpRpnrGLUw1aSE76i7SmGt+v3tIAT2CtQkerAhxf1FMHcM2Lc8YRxxidJTYDdp
r1z6thgoizbMHtQRK/+kN7GTuxxmj6YyKQgKcQZ1FqUh97pXZoJBfL/EX3S9q5x1
lNww1OsEjd5/QmBpV+YdqtKap853YIvQ/X/awo14zh/00darFdIhaMMnPYiqmqjI
sY5nBBJ4gRWLFelXsGw63q6cEuUGbU/XB4wxAmUgO+wi2KsEZ+9+NiGiGlxCZ/TK
6kEwKvxfXCOLxt/lhfMFPogp+bSVooRayRrRi9TT3uM78EGNtIl/R6NQauXzAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUjKBa2bSJd6YkJULlpkL/Uc/wg8wwHwYDVR0j
BBgwFoAUPPPkNcevFIksqhyzdRTk0V9thS4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81N0UzRTk0OTA3QTRENTI0QTU2REE0MUQ3MjM1QUUxRjU1
QzE0RDBCOTcxQkFFMzlGMTc0MTA0MTc5QTFCRDBGLzAvM0NGM0U0MzVDN0FGMTQ4
OTJDQUExQ0IzNzUxNEU0RDE1RjZEODUyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0YzRTQzNUM3QUYxNDg5MkNB
QTFDQjM3NTE0RTREMTVGNkQ4NTJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTdFM0U5NDkwN0E0RDUyNEE1NkRBNDFENzIzNUFFMUY1NUMxNEQwQjk3
MUJBRTM5RjE3NDEwNDE3OUExQkQwRi8wLzMyMzgzMDMxM2E2MzM0M2EzMjYxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMwMzEzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEA
xAAqMA0GCSqGSIb3DQEBCwUAA4IBAQAfcZPij3F78aeHFjwZB4+5VwWajmLXubpE
6xe3gYOmMTuYRl4AxxR7QQE5maHdlfBc7CaEE68KwNe16EVtWxTJ1+Bc5TY+EDiC
YWcjvcd/Cnp0CqGlZdnbzaeU83ZlzOl6TUYuXJaTMZKoPKA+dm3+VFR1Wu5LSUyo
Mu7j56m01cYfShY8th9QXleFHVeuAszK0oUZoeFPVY96xDNrCMOVXerRgVmH/wFr
2DGom3WqjP5LjaZCkOOxEqf/rwdbHlGS1fxAn5YJKRVUoQAB0p9WcYDJkfLjuCeV
fsIwohS+zVP25ankfj3JcqsX87xqu2qvy0PjZnLdAjdOy5m7bF6M
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:45 2026 by rpki-client