This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa
File: 323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier: GgQEyjDGyPh0ypj93dxXp7Zo9nqme5l+yG2h2EU0vnU=
Subject key identifier: 6E:E9:F6:7C:C9:6C:E6:40:D2:0C:27:09:E6:20:38:05:4D:B1:CA:46
Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial: 3E6B13FA1EF4C9A9A080404222FDEBFC94767D62
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa
Signing time: Tue 06 Jan 2026 19:12:25 +0000
ROA not before: Tue 06 Jan 2026 19:07:25 +0000
ROA not after: Tue 05 Jan 2027 19:12:25 +0000
asID: 269782
IP address blocks: 2803:2360:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6b:13:fa:1e:f4:c9:a9:a0:80:40:42:22:fd:eb:fc:94:76:7d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Validity
Not Before: Jan 6 19:07:25 2026 GMT
Not After : Jan 5 19:12:25 2027 GMT
Subject: CN=6EE9F67CC96CE640D20C2709E62038054DB1CA46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:b8:1a:2f:e7:fc:14:98:1e:5d:df:68:95:
f6:31:de:d1:68:70:0f:89:67:9b:ee:7b:2d:91:8c:
b9:d0:80:1b:14:2e:63:eb:01:bf:ee:59:b1:6c:5b:
d3:76:36:3b:3a:0d:75:5e:12:38:22:aa:da:dd:bd:
ea:fd:57:e5:3e:04:bb:fb:45:bc:e9:4f:6c:c5:d1:
50:6a:a5:13:e7:d0:71:42:bf:f0:76:ca:1e:b6:5e:
01:5f:3d:0f:8f:ec:8d:1f:6b:3f:19:17:2b:e9:09:
5f:97:57:a9:4f:78:fc:7c:a6:00:84:fe:d6:fc:2d:
47:b6:cf:6e:85:83:42:23:a6:70:60:c6:d3:fb:bb:
b2:44:bf:d7:5f:4e:bb:10:bb:b4:bc:ec:0b:57:75:
48:32:7f:fe:9a:75:c9:39:65:41:65:b4:43:da:25:
c1:4d:85:c7:bb:4e:59:e3:81:2f:c5:5f:3f:a2:2b:
35:f0:92:47:de:ca:9e:32:21:05:2c:d7:bb:45:3b:
33:d7:09:ec:4e:41:19:82:d6:13:5e:b2:eb:7e:84:
44:71:75:74:f2:e8:89:69:b1:73:44:1a:74:a3:83:
2e:ee:5c:57:bd:8b:90:4e:81:c4:74:90:37:db:4b:
b2:49:18:40:f7:e0:56:5f:a9:91:32:67:b3:ea:27:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:F6:7C:C9:6C:E6:40:D2:0C:27:09:E6:20:38:05:4D:B1:CA:46
X509v3 Authority Key Identifier:
keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a333030303a3a2f33362d3336203d3e20323639373832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2360:3000::/36
Signature Algorithm: sha256WithRSAEncryption
19:98:a5:3b:a2:08:d0:61:fb:1b:25:28:bf:1a:c7:04:3c:cc:
b8:9e:da:0e:72:ea:15:55:b2:6a:23:3b:17:b9:74:12:21:d2:
7c:a0:ec:6f:3b:56:ac:c4:80:ba:46:12:b2:79:1d:4f:23:ab:
55:fe:7c:f7:e8:33:d4:23:10:bb:45:7e:4f:3d:a0:51:35:f1:
b7:e2:f3:48:2e:5b:ad:cb:e2:95:4f:aa:fa:07:05:1c:db:66:
12:25:99:e8:3e:21:a7:b9:e4:cd:4f:71:12:cc:91:2f:c2:54:
cb:a1:05:b8:4b:f2:db:15:f4:e4:e6:ff:eb:e9:fb:78:e0:c3:
9a:e1:7e:05:e2:8a:ab:5f:a1:38:60:ed:c2:9c:20:5b:95:a9:
49:f8:4a:a8:32:27:61:50:e5:66:2a:fb:ae:01:7b:27:a7:cb:
fd:1c:3d:b1:3f:6d:b1:1f:3e:8e:27:a8:86:f6:40:3a:a1:65:
66:2c:fa:ea:0d:af:24:79:1c:fa:d6:92:05:2a:e2:d5:1b:42:
c2:29:14:fe:df:05:46:be:26:e2:df:26:bf:39:45:26:36:75:
89:97:80:53:85:ec:56:df:e3:68:01:6f:98:00:76:00:34:6f:
ad:43:f1:84:ba:3a:2d:3e:de:5f:61:4a:38:91:01:30:4f:7e:
2d:7f:74:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:08:16 2026 by rpki-client