This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33342d3334203d3e20323639373832.roa
File: 323830333a323336303a633030303a3a2f33342d3334203d3e20323639373832.roa (raw, json)
Hash identifier: NknNUOZti9vSTQcKuDH9ftV7IM/hqEQ3hV7fuEFTyT8=
Subject key identifier: C3:DE:8D:B2:1B:F2:B1:D4:28:A6:4A:21:C1:6D:24:61:F4:C9:77:97
Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial: 1F4D08C11B6BB7740A311F8B957ABC872C56BBB4
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33342d3334203d3e20323639373832.roa
Signing time: Tue 06 Jan 2026 19:12:26 +0000
ROA not before: Tue 06 Jan 2026 19:07:26 +0000
ROA not after: Tue 05 Jan 2027 19:12:26 +0000
asID: 269782
IP address blocks: 2803:2360:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4d:08:c1:1b:6b:b7:74:0a:31:1f:8b:95:7a:bc:87:2c:56:bb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Validity
Not Before: Jan 6 19:07:26 2026 GMT
Not After : Jan 5 19:12:26 2027 GMT
Subject: CN=C3DE8DB21BF2B1D428A64A21C16D2461F4C97797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:80:9c:9c:c6:7f:c3:da:02:cc:69:c7:07:9d:
48:d0:28:4b:19:7a:8e:ae:97:ea:5b:65:65:2d:1c:
0f:11:1f:d0:e4:5a:87:cd:08:fc:9d:20:e5:cd:b9:
a2:0b:55:ed:32:72:c3:ba:f2:d5:84:63:0b:e6:6f:
3c:cc:8e:4b:fc:ce:bb:d8:33:9b:cd:e3:6c:9b:29:
9b:e7:c2:35:3f:66:01:2b:0e:ed:b2:bf:93:83:eb:
58:1d:fc:77:c3:86:7f:31:5d:a1:d3:07:02:8f:0c:
29:49:35:35:f1:be:9c:ab:81:a1:d3:66:2d:45:60:
18:e7:35:f4:f8:ab:bb:b6:cf:ca:0f:af:cb:2c:9e:
0f:b2:20:88:5e:3b:b7:4c:fa:cf:3e:0f:ed:15:3c:
13:2d:ff:df:1f:df:a7:5f:e3:0c:3e:6c:1a:e3:84:
9f:02:2a:b6:aa:7a:80:49:e8:4d:68:57:c4:de:cb:
3c:ce:16:83:ef:ec:4d:ae:b2:8f:ef:c0:b6:e7:71:
d7:70:d2:af:23:15:9d:c9:60:fd:0b:e8:8f:2b:91:
a6:4c:03:89:25:fa:3c:71:ef:7e:bd:5f:cd:a1:8b:
3d:e7:f7:24:70:ac:7d:b7:fb:3e:5b:d8:e7:7e:dd:
89:94:6b:1a:2c:10:91:d4:75:96:da:60:65:3a:13:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DE:8D:B2:1B:F2:B1:D4:28:A6:4A:21:C1:6D:24:61:F4:C9:77:97
X509v3 Authority Key Identifier:
keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a633030303a3a2f33342d3334203d3e20323639373832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2360:c000::/34
Signature Algorithm: sha256WithRSAEncryption
70:ea:75:f5:53:6a:f4:bb:39:27:d5:27:29:76:75:ec:e2:18:
f8:b0:42:7a:b0:dd:05:5b:73:e9:0e:3e:e6:33:e1:0d:da:20:
0a:68:af:a0:f4:c0:48:4d:09:cd:4d:3e:d9:cc:47:1d:e6:a1:
7c:a5:b9:f0:f5:81:97:fc:06:13:f5:ed:a2:bf:a8:8e:21:1a:
25:fc:4d:26:14:d5:ad:e1:0b:64:1a:8d:46:0d:72:b8:c0:d8:
e9:33:c1:40:f6:68:44:31:3f:70:9d:ac:b4:dd:52:c3:c5:e2:
71:cc:02:f4:27:cc:08:f4:1e:0e:b4:64:7c:8c:d0:cd:3a:93:
e2:bc:2f:51:af:3b:51:e4:d8:e6:6e:68:fe:cc:8a:8c:5a:f6:
7f:4f:18:69:cb:e3:00:8f:ca:a4:ce:86:1e:c1:ee:fa:21:dd:
93:c7:86:0b:d7:fc:ac:46:99:e8:3d:9a:ef:ea:70:d2:91:f7:
20:ca:ea:44:79:21:11:1a:c6:3c:8f:0a:3a:6e:39:4f:ba:a7:
b5:4f:66:4f:2b:88:ea:82:a3:50:bc:2f:af:1a:94:18:dc:80:
54:e4:4a:b0:44:e3:b4:e3:e1:3d:d1:f2:de:18:ba:ef:3b:b1:
d8:24:df:0e:58:bd:6c:86:92:ed:2e:52:f7:8f:33:17:6e:79:
e9:6a:3f:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:08:04 2026 by rpki-client