This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa
File: 323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier: xH4yYbQKzgi9aYQLxkK8HPpmFxqlJ2vRPvvpNflmqVs=
Subject key identifier: D2:AD:FE:49:B4:91:93:8F:64:B5:47:6A:AD:52:95:2B:12:EC:14:5C
Certificate issuer: /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial: 5A778A54F324247B11917E3E1C951C7B23AB4B05
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa
Signing time: Tue 06 Jan 2026 19:20:22 +0000
ROA not before: Tue 06 Jan 2026 19:15:22 +0000
ROA not after: Tue 05 Jan 2027 19:20:22 +0000
asID: 27818
IP address blocks: 2803:3380:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 10:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:77:8a:54:f3:24:24:7b:11:91:7e:3e:1c:95:1c:7b:23:ab:4b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Validity
Not Before: Jan 6 19:15:22 2026 GMT
Not After : Jan 5 19:20:22 2027 GMT
Subject: CN=D2ADFE49B491938F64B5476AAD52952B12EC145C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:72:8a:50:30:8e:c4:0f:dd:73:a3:1b:24:
99:84:be:48:90:c3:7e:b9:61:1c:81:77:26:89:25:
77:e3:3e:b9:ba:55:60:d0:54:1f:3a:93:fe:1f:6a:
45:6f:d1:5d:c5:7e:0e:53:57:7f:4a:35:1d:e3:b8:
15:fe:0a:9b:86:8a:1e:48:2d:15:2a:ce:8e:ae:41:
75:24:b4:4f:c5:a3:ff:8e:ed:eb:85:38:9c:62:a5:
6f:32:46:db:01:a2:8b:9e:0f:e1:11:3a:98:82:57:
20:0c:d3:20:19:79:f1:40:ac:4f:bd:6d:57:57:5d:
7d:c1:a0:e2:11:cf:42:a0:48:03:40:fb:01:d7:c6:
93:4b:02:87:e3:e1:e0:6d:a9:6b:aa:ba:cb:fb:e9:
61:58:ed:48:40:d6:94:75:81:da:cf:52:d8:a0:57:
46:be:7a:57:09:a9:b3:8a:3d:a7:03:45:73:0d:53:
66:96:97:ae:1f:19:61:20:89:01:50:24:d6:70:ed:
78:a7:f4:c9:24:a4:c9:24:53:ee:5e:66:ff:19:03:
19:2b:55:03:ca:53:18:fe:04:d7:f4:84:cc:3f:1c:
b5:d9:05:25:cc:dc:cc:5a:f1:5e:4b:6e:66:04:ba:
e5:cb:83:63:9d:ac:ff:65:e0:a2:61:ee:d4:1e:50:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:FE:49:B4:91:93:8F:64:B5:47:6A:AD:52:95:2B:12:EC:14:5C
X509v3 Authority Key Identifier:
keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3380:3000::/36
Signature Algorithm: sha256WithRSAEncryption
56:8d:c5:d5:98:e5:9f:5f:01:a6:0c:2c:b6:da:ca:54:03:9b:
f9:9a:7c:e9:7e:d3:83:3b:7e:d3:08:77:61:d2:c9:c3:07:20:
3f:b4:24:03:37:9d:05:5f:a4:8d:5d:ae:9c:3a:61:cc:cd:8f:
a3:40:f4:65:bb:3f:58:2b:0b:04:03:c2:61:c7:4a:1f:65:fb:
22:6c:d7:16:bb:e8:94:91:0a:76:6b:8f:32:f5:4a:99:56:7d:
eb:fb:0e:07:01:b1:7e:eb:90:00:d0:b8:ea:97:70:8d:b8:9a:
a3:bf:47:09:ec:4a:6f:6d:40:3b:c7:32:14:04:9b:2c:2f:e1:
cc:08:1c:d5:d6:03:b8:ea:79:f5:cc:03:26:89:26:03:81:f1:
dc:a0:97:93:18:f3:3f:27:09:84:ea:be:6a:fe:ef:53:9d:87:
29:94:bf:a6:34:ae:5e:07:7f:a3:51:2c:1c:f5:43:bf:3f:20:
75:75:28:d5:c6:d8:4b:69:27:22:32:54:e3:74:aa:a1:c6:07:
76:6a:7b:c2:e5:59:e2:7c:55:f9:27:68:6f:52:e7:16:63:e7:
0e:7a:08:62:ba:e0:b5:1b:0c:f8:4f:c8:df:82:19:62:49:33:
e3:3f:c0:d9:78:32:cc:fa:16:fc:b1:bb:d4:f0:df:07:da:02:
2b:59:76:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:31 2026 by rpki-client