This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa
File: 323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier: yau2qgrqnDNy6nqfxwu5AA/21WQjfbBtFo/1hssnqwo=
Subject key identifier: 7A:A1:12:B1:39:14:7B:9E:93:B3:C6:D5:F9:CD:73:4E:AE:80:BA:3D
Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial: 160CFDDFD4807D638A2669AF3D780A8A68F6A268
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa
Signing time: Tue 06 Jan 2026 19:10:15 +0000
ROA not before: Tue 06 Jan 2026 19:05:15 +0000
ROA not after: Tue 05 Jan 2027 19:10:15 +0000
asID: 272979
IP address blocks: 2803:b0e0:8013::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0c:fd:df:d4:80:7d:63:8a:26:69:af:3d:78:0a:8a:68:f6:a2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Validity
Not Before: Jan 6 19:05:15 2026 GMT
Not After : Jan 5 19:10:15 2027 GMT
Subject: CN=7AA112B139147B9E93B3C6D5F9CD734EAE80BA3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:7c:76:8f:cc:06:48:7f:fb:c9:ec:6b:d8:
0f:cc:c0:15:89:d1:04:cb:48:80:97:d0:7e:f4:1e:
8c:0c:86:a2:fa:b8:59:47:a3:4e:dc:f6:c6:4c:ca:
c9:2e:12:80:92:ba:59:43:c2:4d:a7:bd:ac:f4:8b:
b2:e8:bd:ce:ba:a8:5a:28:f4:0d:62:b5:02:60:45:
f5:6a:99:c4:91:8a:1e:83:7f:92:1e:c3:e6:27:02:
70:bd:e2:d8:92:56:f9:8f:6b:29:f1:68:e2:40:c2:
7a:c0:eb:55:9f:07:a6:02:13:a4:7f:97:bd:4e:11:
ef:90:d1:08:92:4b:a5:0b:63:06:3b:69:63:f0:70:
ec:22:a7:f6:b8:1b:0d:f2:a8:6d:7b:95:c2:2f:ce:
a5:de:65:42:5a:3c:54:83:62:ef:c1:ea:05:09:72:
d9:4a:5b:ca:7d:5e:96:5d:d4:8d:1b:67:52:5b:b1:
88:35:ea:78:e2:81:76:b3:51:5f:7a:f4:24:fb:19:
16:37:b7:eb:7c:1d:8c:52:0b:e9:cb:fd:5e:f2:96:
54:52:71:02:1a:40:02:fc:cb:03:83:44:4d:fe:06:
c0:39:6a:52:6f:bd:1f:36:12:bd:23:b7:97:5a:3f:
e8:36:b4:78:a1:fe:9b:a6:3e:de:03:3b:bb:c6:ef:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A1:12:B1:39:14:7B:9E:93:B3:C6:D5:F9:CD:73:4E:AE:80:BA:3D
X509v3 Authority Key Identifier:
keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b0e0:8013::/48
Signature Algorithm: sha256WithRSAEncryption
52:ca:ac:ef:ed:26:d9:b1:5e:07:f1:90:e0:67:01:35:a9:22:
f1:3e:42:bb:45:7b:e9:d7:67:5c:f8:87:b9:26:cb:1b:ba:80:
6b:2e:78:e6:c7:c6:99:64:c0:1b:41:c5:d0:3a:e3:84:93:b8:
19:bf:c4:c2:40:d0:c4:7a:2d:1b:28:7a:e2:33:c0:8d:ba:86:
00:3c:12:fb:1e:f7:52:12:cb:e4:aa:b4:55:5f:ae:21:65:ad:
74:97:aa:10:81:32:19:cd:e0:51:7f:da:18:ab:dc:89:ca:47:
ca:ad:6d:02:91:55:75:60:8c:ab:af:68:a2:cc:db:db:3a:4e:
a1:cd:f9:f1:d2:6a:88:dc:c2:64:94:f4:84:2f:cc:aa:d2:5e:
bb:de:75:51:fb:5c:e1:f0:ac:e7:48:aa:6b:1a:37:9b:4a:5b:
a9:28:39:da:a5:4d:04:84:94:93:8c:06:0b:8a:f6:62:57:86:
ad:2e:f0:a4:82:39:9e:7f:cf:c6:89:20:17:e9:2d:f1:c0:53:
c3:00:c7:62:e2:3a:f0:3a:44:44:65:e3:49:0c:8a:64:66:80:
5f:0f:3d:0c:ea:24:50:2b:ed:9d:3a:2b:ce:de:9c:9a:6d:14:
e1:22:27:c0:2c:d1:f8:1e:bc:16:bd:aa:3d:69:1c:77:fb:37:
31:36:cf:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:14 2026 by rpki-client