This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a3a2f33322d3438203d3e20323731383432.roa
File: 323830333a623065303a3a2f33322d3438203d3e20323731383432.roa (raw, json)
Hash identifier: A5sPprlXKXVX8OtIjWOyLmAuMx/fKtmVJca7pZ4LRas=
Subject key identifier: D1:C4:A2:56:05:3F:A5:96:0E:90:4E:B4:A6:8B:27:DC:C8:91:CD:74
Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial: 51615F1C96018B3BCCC50CF45BF27C92E40B3A0A
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a3a2f33322d3438203d3e20323731383432.roa
Signing time: Tue 06 Jan 2026 19:10:13 +0000
ROA not before: Tue 06 Jan 2026 19:05:13 +0000
ROA not after: Tue 05 Jan 2027 19:10:13 +0000
asID: 271842
IP address blocks: 2803:b0e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 03:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:61:5f:1c:96:01:8b:3b:cc:c5:0c:f4:5b:f2:7c:92:e4:0b:3a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Validity
Not Before: Jan 6 19:05:13 2026 GMT
Not After : Jan 5 19:10:13 2027 GMT
Subject: CN=D1C4A256053FA5960E904EB4A68B27DCC891CD74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:02:60:62:1b:74:e6:d1:55:be:66:9c:78:
03:b0:16:95:7c:41:18:a0:54:e6:3b:4a:21:10:fc:
3b:16:ef:af:24:a1:58:87:19:65:5c:b9:3c:22:54:
57:39:a2:52:00:76:f8:9f:da:6d:da:31:1b:0f:2a:
d0:e2:8f:d2:0d:e0:4e:2c:e2:a9:0b:0b:9a:20:67:
f0:78:01:6a:0c:b8:6c:e9:65:8d:16:95:29:56:4c:
f5:d8:62:fe:3f:a6:d3:ce:e3:88:56:87:f7:12:6a:
63:1a:d3:30:32:ca:20:1f:9c:53:ba:26:02:b4:95:
36:84:f4:cb:ae:6a:94:5a:75:4a:f8:3c:29:86:6c:
e3:07:cc:d2:82:84:fb:db:c5:89:02:72:b9:60:a5:
0e:e4:1d:ff:5c:8a:66:1a:08:d6:d5:c1:eb:e2:22:
06:6a:8b:98:af:9a:19:7d:30:30:03:d2:73:35:89:
48:41:4a:ee:16:5e:e5:cc:62:9a:6a:79:da:6d:13:
2c:33:5b:4b:e4:66:fb:0d:5d:f1:df:a1:0d:04:cb:
0a:93:a4:3e:7e:06:16:63:d4:6c:45:49:13:dd:0f:
c7:ba:82:b5:e5:13:90:9d:db:9b:bc:61:91:80:17:
e3:1c:7b:96:2c:44:de:72:5c:c6:01:a3:fe:5d:d9:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C4:A2:56:05:3F:A5:96:0E:90:4E:B4:A6:8B:27:DC:C8:91:CD:74
X509v3 Authority Key Identifier:
keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a3a2f33322d3438203d3e20323731383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b0e0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:9a:fe:ad:22:47:1e:f3:b4:1b:2b:e6:b1:7e:af:63:a9:28:
48:cd:21:50:15:5c:cf:13:76:4f:e0:22:d1:6f:89:ae:92:36:
1b:8a:4a:5b:92:51:15:e3:58:e3:e8:43:e4:a0:e5:1c:88:4f:
a7:cc:19:2e:e8:80:d4:5b:7c:82:39:3e:73:4b:ba:81:71:a0:
93:53:c2:98:85:1e:96:80:52:83:1d:0f:a6:5f:00:fa:c7:99:
60:2f:7d:eb:6a:45:32:82:b8:ce:b6:08:f3:d0:af:c6:be:dc:
fe:c5:be:24:5e:34:8a:af:5a:02:a2:21:59:18:f0:87:02:d6:
80:2b:3f:89:12:65:8a:41:81:3f:76:38:1b:7c:a0:f6:c4:28:
a9:e5:8f:1d:47:cc:95:6a:c0:93:24:ac:a9:96:e7:7f:d6:c5:
39:e9:43:60:ed:52:52:74:59:78:4f:13:13:62:a4:06:b9:20:
4b:69:97:e1:94:9d:50:38:fd:9d:0d:22:fc:45:b6:85:d1:5f:
df:62:c6:7f:2d:46:60:5f:44:4c:d3:bc:06:8c:6c:98:7c:ae:
a5:8d:f4:74:cb:05:64:2b:a5:15:54:11:35:65:8a:ee:dd:77:
77:b3:9e:9f:0d:e6:d3:b7:c8:f8:23:9c:a4:7a:38:6f:64:4e:
9b:09:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:35 2026 by rpki-client