This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a313030303a3a2f34382d3634203d3e20323731393932.roa
File: 323830333a393131303a313030303a3a2f34382d3634203d3e20323731393932.roa (raw, json)
Hash identifier: qqlSVyPPNLZKF+8UY38RVXKD8+T8Enj5X0sDM9TcFdg=
Subject key identifier: A2:A6:C0:86:56:11:2A:51:5A:79:4D:8C:7D:97:6D:0C:D0:02:30:73
Certificate issuer: /CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
Certificate serial: 4B7F363189606CA7D52A18B484D92E2AA72012DF
Authority key identifier: B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a313030303a3a2f34382d3634203d3e20323731393932.roa
Signing time: Tue 06 Jan 2026 19:07:43 +0000
ROA not before: Tue 06 Jan 2026 19:02:43 +0000
ROA not after: Tue 05 Jan 2027 19:07:43 +0000
asID: 271992
IP address blocks: 2803:9110:1000::/48 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl
rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 14:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7f:36:31:89:60:6c:a7:d5:2a:18:b4:84:d9:2e:2a:a7:20:12:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
Validity
Not Before: Jan 6 19:02:43 2026 GMT
Not After : Jan 5 19:07:43 2027 GMT
Subject: CN=A2A6C08656112A515A794D8C7D976D0CD0023073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:1b:e9:18:39:4d:c3:57:c7:04:ec:29:cb:
ea:37:b4:83:39:a8:33:19:aa:e7:61:13:c0:df:08:
54:80:8c:1e:d8:3a:a5:5d:7c:2e:cc:52:b4:c8:ec:
73:8f:c7:99:97:97:0c:97:b1:f7:6d:4a:41:dd:ea:
29:1f:0a:02:c9:99:25:9a:fb:3a:b4:9d:35:1e:c6:
26:af:ad:2b:05:3c:a8:ef:d2:f8:3a:0d:12:f2:20:
a6:15:6c:87:5a:1f:34:85:2b:20:bb:ce:6e:42:dc:
43:93:a8:a1:27:a2:82:3d:5a:b7:18:21:8e:c1:db:
f3:e4:b4:9c:5f:3d:46:01:0c:7b:fb:7a:3a:fb:db:
f8:25:de:c1:fe:3c:be:d6:ba:ba:88:d6:cd:44:6b:
9f:fd:60:b9:91:8f:83:b1:92:66:2a:1e:7f:fb:b1:
7f:17:3a:96:6f:63:87:37:27:9d:29:13:30:e2:3a:
bf:86:97:3f:21:d6:75:02:c9:c9:b7:0f:12:3b:45:
78:95:fd:ed:9b:39:8b:29:64:f8:e4:65:91:88:4b:
aa:d5:20:7c:0e:44:51:ed:c9:ee:d9:73:c4:08:dc:
b7:24:70:97:26:30:7b:ec:cd:70:6c:54:51:92:c9:
2d:aa:70:df:4e:33:fb:6a:99:b1:d5:2f:44:37:5a:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:C0:86:56:11:2A:51:5A:79:4D:8C:7D:97:6D:0C:D0:02:30:73
X509v3 Authority Key Identifier:
keyid:B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a313030303a3a2f34382d3634203d3e20323731393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9110:1000::/48
Signature Algorithm: sha256WithRSAEncryption
31:78:de:27:c6:9b:1a:4d:ee:16:84:ef:00:6e:b1:39:b9:09:
f0:58:de:24:c8:d6:a5:0e:f8:07:f1:ff:d0:60:70:88:ba:a0:
22:84:f7:b1:f1:22:dd:27:88:2d:19:5e:66:d1:83:e8:de:26:
1b:4f:2d:cd:c1:91:6d:61:b6:88:46:04:53:b6:23:43:39:a8:
9d:df:ee:46:84:02:4d:63:a6:7a:48:23:0b:87:de:6d:fc:31:
06:55:b0:d5:6f:81:16:02:06:0e:e7:5b:c3:68:8e:f6:81:05:
34:4e:20:b1:da:f0:ad:8f:7f:7d:86:f0:ef:6f:10:03:90:0c:
26:d1:2a:9f:5b:a5:97:bb:de:73:80:7a:fc:25:fd:f9:59:2d:
3a:e2:98:03:e5:dd:f6:64:e9:5f:dc:d3:72:71:88:8d:54:79:
f5:2c:df:dd:3a:3c:ad:8c:16:55:38:e8:35:11:29:d8:d4:9a:
ca:2f:0c:05:b5:60:0d:74:dd:46:79:02:cb:65:69:7c:bf:a2:
0f:2a:3b:33:f3:80:cd:9d:16:13:ee:0c:bf:e3:6d:86:91:b8:
f0:d6:ed:bb:52:53:fc:6b:1b:25:3c:ca:c1:53:96:73:e0:54:
bc:7e:42:04:74:a0:2e:38:1c:19:6c:bd:bc:16:4e:b2:da:13:
b1:f8:ec:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:20:04 2026 by rpki-client