This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/323830333a353363303a3a2f33322d3332203d3e20323635373435.roa
File: 323830333a353363303a3a2f33322d3332203d3e20323635373435.roa (raw, json)
Hash identifier: GVFfrupZBvtC8yCK0S8H/J7LTk9N4OULd20H1nbNDrU=
Subject key identifier: 3A:0E:90:0C:71:38:EE:91:82:A0:14:8A:67:D0:6D:D2:9F:7D:A6:63
Certificate issuer: /CN=B3A5D842BD397DD5D3B222DB13AB60EB744BA890
Certificate serial: 3DD3221E0BBA64A2098B823938A46A194295B629
Authority key identifier: B3:A5:D8:42:BD:39:7D:D5:D3:B2:22:DB:13:AB:60:EB:74:4B:A8:90
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/323830333a353363303a3a2f33322d3332203d3e20323635373435.roa
Signing time: Tue 06 Jan 2026 19:03:26 +0000
ROA not before: Tue 06 Jan 2026 18:58:26 +0000
ROA not after: Tue 05 Jan 2027 19:03:26 +0000
asID: 265745
IP address blocks: 2803:53c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.crl
rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d3:22:1e:0b:ba:64:a2:09:8b:82:39:38:a4:6a:19:42:95:b6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3A5D842BD397DD5D3B222DB13AB60EB744BA890
Validity
Not Before: Jan 6 18:58:26 2026 GMT
Not After : Jan 5 19:03:26 2027 GMT
Subject: CN=3A0E900C7138EE9182A0148A67D06DD29F7DA663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:69:a9:ea:de:7c:b4:04:b6:f0:4f:df:48:
0e:cd:b3:68:37:90:a3:72:a9:e6:3e:11:2a:1d:0a:
fa:69:0a:7a:ab:bd:15:d4:e0:19:22:e2:9b:03:69:
96:1d:a3:99:f0:d4:7d:96:68:03:8a:1e:49:54:26:
bd:d0:d1:dd:7c:ab:87:af:ad:05:2f:27:c7:fe:70:
d8:7b:cd:c0:62:20:d2:34:15:cd:7a:a5:23:3d:db:
8a:16:8c:19:2a:72:38:e8:90:51:ce:f7:2b:8a:61:
86:09:d3:0e:d8:11:82:5f:e2:6c:79:a5:39:02:f3:
2c:be:dc:d9:69:e6:5a:bd:92:fd:53:d6:4f:01:41:
f7:b1:83:d1:8f:2d:a1:c3:1d:2c:62:00:3b:d6:6c:
ea:2e:b2:44:4d:14:32:17:2d:05:0d:0b:fe:07:9f:
1d:7a:f0:8a:b3:01:34:08:a3:84:d9:4c:50:61:0e:
aa:93:e0:41:ee:12:d2:12:98:73:1c:f4:87:56:64:
28:f3:39:81:27:9d:3c:34:78:7c:77:62:eb:e2:9f:
78:29:5e:1a:b3:67:b2:c9:78:1e:29:43:16:e8:00:
b6:b6:41:c9:97:fc:3f:e7:9d:94:6a:13:57:c1:65:
50:52:f9:13:e2:20:57:a5:75:05:d4:7c:a7:d2:81:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:90:0C:71:38:EE:91:82:A0:14:8A:67:D0:6D:D2:9F:7D:A6:63
X509v3 Authority Key Identifier:
keyid:B3:A5:D8:42:BD:39:7D:D5:D3:B2:22:DB:13:AB:60:EB:74:4B:A8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/323830333a353363303a3a2f33322d3332203d3e20323635373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
15:ab:8b:ca:79:b2:8b:ff:9f:3b:13:56:8a:50:8f:ee:9b:61:
dc:9a:78:37:c3:81:9d:13:a1:a8:ce:3b:4d:6a:13:37:3e:b3:
ed:08:09:58:9d:fa:6a:ad:e7:f6:ac:a7:aa:2c:d8:c9:ae:67:
6b:8d:fe:97:67:ce:5a:21:0b:dc:7c:28:98:49:93:d0:2a:b3:
08:7d:bf:e9:11:d1:e0:3d:b9:ba:ec:a7:97:a4:7a:87:2a:d7:
fa:7a:db:21:38:70:d0:96:a8:24:0d:ef:29:30:c5:ba:e2:09:
2b:01:da:0f:d3:2c:b5:53:e2:9b:3c:e3:59:5c:a1:99:09:25:
33:d0:dc:dc:38:e8:fe:0f:3f:65:32:02:e2:2f:40:96:14:ba:
b6:6f:fb:fc:81:e2:32:56:00:46:4b:ae:bb:35:76:52:15:67:
75:0c:43:fd:4f:fb:0f:06:fc:82:ce:af:e2:05:55:ba:d0:f5:
c0:09:51:b7:54:c7:6b:f7:d1:9f:ef:17:19:5f:d6:35:00:72:
6e:1e:3f:22:ba:29:d4:4b:0a:85:85:8b:d5:b7:f0:94:6f:f9:
97:a8:c3:83:03:66:6c:de:fd:97:f4:25:db:74:d9:21:44:5b:
c6:3f:df:3a:34:99:8e:3f:01:1f:9e:dd:df:52:5c:52:48:bd:
10:c8:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:55:03 2026 by rpki-client