This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/323830333a316538303a3a2f33322d3438203d3e203238313131.roa
File: 323830333a316538303a3a2f33322d3438203d3e203238313131.roa (raw, json)
Hash identifier: i9E4jrFqk0S2s/1cvBz/xQVek53Odko2dGkaVc+6WMY=
Subject key identifier: CF:1C:EE:C0:B2:C9:9A:F3:DE:95:30:10:CA:A4:D7:DB:E4:6F:E4:AC
Certificate issuer: /CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
Certificate serial: 4AEA456FF45A9FEF927E55AFE0E93A644A0EE45B
Authority key identifier: 3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/323830333a316538303a3a2f33322d3438203d3e203238313131.roa
Signing time: Tue 06 Jan 2026 19:28:40 +0000
ROA not before: Tue 06 Jan 2026 19:23:40 +0000
ROA not after: Tue 05 Jan 2027 19:28:40 +0000
asID: 28111
IP address blocks: 2803:1e80::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl
rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ea:45:6f:f4:5a:9f:ef:92:7e:55:af:e0:e9:3a:64:4a:0e:e4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
Validity
Not Before: Jan 6 19:23:40 2026 GMT
Not After : Jan 5 19:28:40 2027 GMT
Subject: CN=CF1CEEC0B2C99AF3DE953010CAA4D7DBE46FE4AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:79:4c:20:02:f7:17:15:7c:46:88:4a:05:
a4:6e:93:4b:bc:f5:1d:7b:2e:43:41:2f:ea:2b:57:
6f:cf:82:60:6a:84:07:15:5d:0d:3a:b9:63:34:03:
01:49:3d:df:37:30:a5:a2:b0:45:57:9a:af:5a:78:
73:bf:3e:1c:fc:80:68:94:53:50:d9:44:7e:92:41:
68:df:41:82:e2:9d:23:ed:4c:c5:49:3b:31:7e:01:
d6:46:ef:d8:0a:46:43:69:20:25:4c:68:53:41:6b:
8b:57:79:95:eb:05:c0:c6:87:38:54:66:1a:a1:04:
b6:f1:8d:de:50:40:80:12:9c:d1:c5:ab:b2:bd:b7:
b1:cf:a6:ad:0b:af:e9:7f:d2:cf:53:bf:94:74:0b:
65:d7:08:c7:d5:bb:7c:d5:bd:12:ff:5a:6d:7a:17:
aa:b5:98:0f:ce:df:a8:24:7b:e3:22:79:29:05:95:
43:ba:e4:1a:ca:82:60:46:e0:d3:80:1f:ed:68:4d:
a7:08:3b:94:ff:23:6c:b3:82:aa:51:47:f8:a8:b3:
7f:05:f2:ef:c6:77:c8:c1:59:13:19:20:a2:03:54:
42:b4:4c:cd:6b:a8:6d:b3:4a:6a:ff:72:aa:4e:d4:
c1:23:39:b4:5c:33:9b:e5:15:36:ee:eb:80:89:81:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1C:EE:C0:B2:C9:9A:F3:DE:95:30:10:CA:A4:D7:DB:E4:6F:E4:AC
X509v3 Authority Key Identifier:
keyid:3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/323830333a316538303a3a2f33322d3438203d3e203238313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1e80::/32
Signature Algorithm: sha256WithRSAEncryption
09:b1:14:49:11:7b:e1:87:38:8b:ff:a6:78:3a:e4:9c:74:96:
07:9f:d8:8c:2f:8b:35:47:5f:64:e2:38:5e:ac:56:e5:0d:ff:
ba:2d:10:92:7c:c6:c0:2f:99:71:9b:80:4d:fc:c0:6a:55:79:
ff:94:d9:56:fe:40:f6:05:6d:17:76:05:0c:9a:b1:e8:fe:28:
64:91:0e:90:2c:69:f7:d7:41:b0:00:a2:e2:d7:64:b3:e9:80:
36:29:21:2c:ab:97:46:26:9d:01:e5:71:e2:9d:04:73:43:89:
8a:ee:53:2b:5d:38:a4:f1:65:ab:12:65:b0:cd:fa:ac:53:23:
54:1a:87:ec:50:54:06:86:7d:cc:db:52:cb:70:4f:01:e7:2c:
d8:60:55:b2:a4:4c:3c:70:ce:26:df:4c:bf:04:99:96:3e:25:
4e:2c:c3:a3:eb:95:61:fc:74:c1:f2:93:a1:c3:e3:44:8d:74:
fa:38:b0:f7:ba:ee:d1:13:8b:20:d6:dd:d7:02:23:3b:43:e7:
e3:4e:dc:13:a4:84:2a:57:3d:28:5f:94:1a:ee:fb:9e:41:f8:
26:d9:f8:1c:76:10:96:6e:47:2b:53:bc:22:b2:f9:d2:36:c1:
dc:79:13:56:08:d5:af:7c:7f:bb:e5:d2:8c:2e:2a:f5:09:29:
0e:7f:c1:ce
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUSupFb/Ran++SflWv4Ok6ZEoO5FswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3M0ZBMDlEMjJGNkI2REY0QkI4NTEyQUE5RjcxOTZG
QTFCRjExODAeFw0yNjAxMDYxOTIzNDBaFw0yNzAxMDUxOTI4NDBaMDMxMTAvBgNV
BAMTKENGMUNFRUMwQjJDOTlBRjNERTk1MzAxMENBQTREN0RCRTQ2RkU0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBHlMIAL3FxV8RohKBaRuk0u8
9R17LkNBL+orV2/PgmBqhAcVXQ06uWM0AwFJPd83MKWisEVXmq9aeHO/Phz8gGiU
U1DZRH6SQWjfQYLinSPtTMVJOzF+AdZG79gKRkNpICVMaFNBa4tXeZXrBcDGhzhU
ZhqhBLbxjd5QQIASnNHFq7K9t7HPpq0Lr+l/0s9Tv5R0C2XXCMfVu3zVvRL/Wm16
F6q1mA/O36gke+MieSkFlUO65BrKgmBG4NOAH+1oTacIO5T/I2yzgqpRR/ios38F
8u/Gd8jBWRMZIKIDVEK0TM1rqG2zSmr/cqpO1MEjObRcM5vlFTbu64CJgZ5RAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUzxzuwLLJmvPelTAQyqTX2+Rv5KwwHwYDVR0j
BBgwFoAUPHP6CdIva230u4USqp9xlvob8RgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RThBQkYwOTg3M0JEOTk2RkEzRUI0NjVDMDhFQzYyRkI2
QzA5OUI0RDVGNjFCRjQ1NTRCMDIyNUFBQkVGQzQ1LzAvM0M3M0ZBMDlEMjJGNkI2
REY0QkI4NTEyQUE5RjcxOTZGQTFCRjExOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzczRkEwOUQyMkY2QjZERjRC
Qjg1MTJBQTlGNzE5NkZBMUJGMTE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUU4QUJGMDk4NzNCRDk5NkZBM0VCNDY1QzA4RUM2MkZCNkMwOTlCNEQ1
RjYxQkY0NTU0QjAyMjVBQUJFRkM0NS8wLzMyMzgzMDMzM2EzMTY1MzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAx6AMA0G
CSqGSIb3DQEBCwUAA4IBAQAJsRRJEXvhhziL/6Z4OuScdJYHn9iML4s1R19k4jhe
rFblDf+6LRCSfMbAL5lxm4BN/MBqVXn/lNlW/kD2BW0XdgUMmrHo/ihkkQ6QLGn3
10GwAKLi12Sz6YA2KSEsq5dGJp0B5XHinQRzQ4mK7lMrXTik8WWrEmWwzfqsUyNU
GofsUFQGhn3M21LLcE8B5yzYYFWypEw8cM4m30y/BJmWPiVOLMOj65Vh/HTB8pOh
w+NEjXT6OLD3uu7RE4sg1t3XAiM7Q+fjTtwTpIQqVz0oX5Qa7vueQfgm2fgcdhCW
bkcrU7wisvnSNsHceRNWCNWvfH+75dKMLir1CSkOf8HO
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:23 2026 by rpki-client