This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
File: 323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier: L2tLhAox+CZHNQZzv5lQX/8HquUm9O3zgC4vnPK+VGw=
Subject key identifier: 27:D9:3D:25:A2:C3:7C:D3:2A:6B:48:D0:8C:C6:72:2F:29:09:F2:16
Certificate issuer: /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial: 6E25ED0EA3268D7E7A8B6D00580D9E1C807F8214
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
Signing time: Tue 06 Jan 2026 19:20:24 +0000
ROA not before: Tue 06 Jan 2026 19:15:24 +0000
ROA not after: Tue 05 Jan 2027 19:20:24 +0000
asID: 27818
IP address blocks: 2803:3380:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 10:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:25:ed:0e:a3:26:8d:7e:7a:8b:6d:00:58:0d:9e:1c:80:7f:82:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Validity
Not Before: Jan 6 19:15:24 2026 GMT
Not After : Jan 5 19:20:24 2027 GMT
Subject: CN=27D93D25A2C37CD32A6B48D08CC6722F2909F216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:79:ec:8c:b5:9f:44:6f:b4:8a:c7:ce:f7:
eb:bc:4d:5f:ed:4b:77:26:91:92:8e:1d:b0:4a:c6:
e7:cc:07:7e:34:db:0f:1f:a6:7e:8a:a8:c0:64:b4:
77:5b:5e:6d:c2:35:d6:61:27:bb:08:51:75:1c:cd:
f2:78:f2:e7:66:c3:94:9a:d4:af:e7:3f:36:7b:f0:
8f:95:ce:e4:78:04:69:53:a8:51:37:ca:86:12:70:
a9:0a:25:b7:8c:46:7b:e0:a5:e3:17:05:0e:30:b7:
7c:0c:ad:7a:b7:db:ff:b7:b4:1a:6c:ea:56:96:ce:
0f:f5:2e:7c:41:b1:0f:78:12:52:d6:a7:2e:c0:a9:
d0:99:1a:f2:cd:36:31:2e:05:5e:40:5e:c6:0a:34:
c4:47:89:72:d8:ad:2e:16:44:5f:ee:f4:7e:73:91:
bc:67:1f:ee:b2:ae:6c:74:96:e8:2a:89:0f:d6:5f:
46:d5:b4:26:46:80:cf:3f:7a:49:a2:4a:cc:5a:b9:
3b:e7:d9:84:0b:8a:ab:7c:9f:d7:a6:bb:ef:d8:ae:
0e:97:b7:93:9c:32:df:a3:21:3d:44:7e:db:8d:24:
31:88:27:df:bd:0c:48:34:76:dd:4b:29:ac:3b:86:
89:80:c7:d4:e7:7e:9e:1d:f7:ae:70:d9:0f:79:9e:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D9:3D:25:A2:C3:7C:D3:2A:6B:48:D0:8C:C6:72:2F:29:09:F2:16
X509v3 Authority Key Identifier:
keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3380:f000::/36
Signature Algorithm: sha256WithRSAEncryption
48:78:e8:58:ff:15:cd:29:b7:5f:7e:4b:c2:5a:c8:8b:61:07:
7f:a8:0b:8f:43:22:c6:2b:76:d1:b9:68:f1:5b:44:59:59:de:
95:6e:4e:22:19:9f:f2:14:ee:7e:e5:76:24:ad:20:1e:47:d0:
c7:fe:d3:b2:47:16:db:10:f7:46:b6:9a:16:09:bf:2f:57:80:
d7:9c:83:4b:53:f0:ac:57:56:9b:e7:49:14:bd:17:c1:03:1f:
ed:79:bb:fb:2a:17:c8:2e:02:de:31:7a:1d:3b:67:5f:55:ad:
6d:00:54:cf:21:71:c1:8c:b0:77:d0:da:7a:f8:0a:f4:fb:2f:
64:3e:ba:5b:16:02:26:5e:b6:6c:89:9e:aa:00:7a:e1:71:e2:
53:e6:6e:70:46:76:ef:06:10:59:65:91:97:d8:ae:3f:44:13:
6e:b2:af:95:8e:2a:8c:6e:97:23:16:76:6c:3e:b3:d0:68:14:
83:82:00:5d:2a:39:48:71:dd:d8:63:13:b0:8d:31:bd:42:42:
2f:d7:09:31:ef:bf:d8:28:a6:85:21:d8:93:9d:34:a9:82:cb:
e3:83:9e:2d:7b:d8:4a:df:dd:cc:b5:29:8a:11:c3:ae:fc:00:
da:bf:82:77:93:61:af:9e:d7:74:f9:02:29:40:cb:61:03:71:
76:c2:b9:80
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUbiXtDqMmjX56i20AWA2eHIB/ghQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEREI0NjVGMDdFMEM0Q0Y4MjQ0RTNBMjYwNTE5NUI0
MUFEQTNCQjAeFw0yNjAxMDYxOTE1MjRaFw0yNzAxMDUxOTIwMjRaMDMxMTAvBgNV
BAMTKDI3RDkzRDI1QTJDMzdDRDMyQTZCNDhEMDhDQzY3MjJGMjkwOUYyMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTeXnsjLWfRG+0isfO9+u8TV/t
S3cmkZKOHbBKxufMB3402w8fpn6KqMBktHdbXm3CNdZhJ7sIUXUczfJ48udmw5Sa
1K/nPzZ78I+VzuR4BGlTqFE3yoYScKkKJbeMRnvgpeMXBQ4wt3wMrXq32/+3tBps
6laWzg/1LnxBsQ94ElLWpy7AqdCZGvLNNjEuBV5AXsYKNMRHiXLYrS4WRF/u9H5z
kbxnH+6yrmx0lugqiQ/WX0bVtCZGgM8/ekmiSsxauTvn2YQLiqt8n9emu+/Yrg6X
t5OcMt+jIT1EftuNJDGIJ9+9DEg0dt1LKaw7homAx9Tnfp4d965w2Q95nnapAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUJ9k9JaLDfNMqa0jQjMZyLykJ8hYwHwYDVR0j
BBgwFoAUIN20ZfB+DEz4JE46JgUZW0Gto7swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTY2MzVGQTIxNjJENzMzQUU2NTYzMzkzRkEyMzM0MzYz
NzdCMERDNTRFMzJDRUEyODFDMzAxRjcxMzRGRkQ0LzAvMjBEREI0NjVGMDdFMEM0
Q0Y4MjQ0RTNBMjYwNTE5NUI0MUFEQTNCQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEREQjQ2NUYwN0UwQzRDRjgy
NDRFM0EyNjA1MTk1QjQxQURBM0JCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U2NjM1RkEyMTYyRDczM0FFNjU2MzM5M0ZBMjMzNDM2Mzc3QjBEQzU0
RTMyQ0VBMjgxQzMwMUY3MTM0RkZENC8wLzMyMzgzMDMzM2EzMzMzMzgzMDNhNjYz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzgzMTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAMzgPAwDQYJKoZIhvcNAQELBQADggEBAEh46Fj/Fc0pt19+S8JayIthB3+o
C49DIsYrdtG5aPFbRFlZ3pVuTiIZn/IU7n7ldiStIB5H0Mf+07JHFtsQ90a2mhYJ
vy9XgNecg0tT8KxXVpvnSRS9F8EDH+15u/sqF8guAt4xeh07Z19VrW0AVM8hccGM
sHfQ2nr4CvT7L2Q+ulsWAiZetmyJnqoAeuFx4lPmbnBGdu8GEFllkZfYrj9EE26y
r5WOKoxulyMWdmw+s9BoFIOCAF0qOUhx3dhjE7CNMb1CQi/XCTHvv9gopoUh2JOd
NKmCy+ODni172Erf3cy1KYoRw678ANq/gneTYa+e13T5AilAy2EDcXbCuYA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:26 2026 by rpki-client