This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e203238313230.roa
File: 323830333a3432303a3a2f33322d3336203d3e203238313230.roa (raw, json)
Hash identifier: yl6dgYt8LPM/ZyoxWu0O5rZ5luALPCbKHnxvBbacM4g=
Subject key identifier: B4:59:54:DD:69:F6:F3:0F:71:BF:81:66:67:F4:63:16:A7:5F:BC:E1
Certificate issuer: /CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Certificate serial: 503F0F05F23CFA3C1D896BE72FE11303826E784F
Authority key identifier: FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e203238313230.roa
Signing time: Tue 06 Jan 2026 19:19:08 +0000
ROA not before: Tue 06 Jan 2026 19:14:08 +0000
ROA not after: Tue 05 Jan 2027 19:19:08 +0000
asID: 28120
IP address blocks: 2803:420::/32 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3f:0f:05:f2:3c:fa:3c:1d:89:6b:e7:2f:e1:13:03:82:6e:78:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Validity
Not Before: Jan 6 19:14:08 2026 GMT
Not After : Jan 5 19:19:08 2027 GMT
Subject: CN=B45954DD69F6F30F71BF816667F46316A75FBCE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:f4:c6:37:a5:8c:69:9e:b6:9f:18:c5:eb:
45:13:c3:f6:74:f9:10:ac:2d:9c:00:59:9b:12:11:
a8:58:a0:75:1c:d9:a0:f1:31:ab:61:39:48:25:37:
ba:47:5e:9c:64:1c:f3:b7:f0:aa:ee:9d:f2:f3:22:
6c:4d:97:fb:ff:c4:77:61:ae:63:79:2c:56:df:b9:
be:8c:ea:20:b3:e6:f1:3b:3f:94:09:e5:54:1a:76:
45:65:d0:b5:30:ae:ac:0f:7f:b3:35:be:20:d5:b9:
1b:12:2e:ac:f7:54:9f:72:ed:55:c3:a0:46:96:96:
3b:f9:fc:80:c4:c1:9d:0e:ca:a2:c8:b5:bf:f2:8b:
54:8a:09:cb:9e:1c:ee:85:41:2c:35:ce:cd:cb:a8:
30:0f:ed:ca:e8:ce:ab:46:f3:3a:ff:f9:5c:3f:ed:
2d:9a:2f:54:37:51:a8:f2:dc:89:a3:bb:2e:91:e5:
07:f7:76:9f:ea:50:d9:38:e1:a8:dd:95:2d:f4:19:
01:b6:c3:0e:87:77:84:6d:da:31:2f:71:14:cc:bd:
c7:11:cb:6d:00:fa:aa:f0:0f:4c:10:80:57:9b:fc:
f0:ff:17:df:1f:a8:7e:cf:97:b3:3e:dc:6e:81:be:
ed:58:e5:49:b8:f7:43:a8:de:73:f4:8b:6d:48:12:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:54:DD:69:F6:F3:0F:71:BF:81:66:67:F4:63:16:A7:5F:BC:E1
X509v3 Authority Key Identifier:
keyid:FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e203238313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:420::/32
Signature Algorithm: sha256WithRSAEncryption
9a:38:bb:63:ba:3e:c0:72:02:af:4b:3d:78:cb:ef:72:42:21:
64:61:8a:9a:31:27:08:16:61:01:04:7c:86:ea:a4:ee:ee:12:
1e:b0:d6:40:c5:8f:46:9b:29:56:19:59:40:18:11:9c:91:a5:
d5:b5:82:a1:99:82:73:f8:28:87:b3:d0:25:2d:c4:0b:ae:a0:
c6:7e:9e:6e:a6:e1:44:45:99:c6:aa:84:28:79:db:34:9f:18:
c7:cc:c2:14:38:89:01:92:41:fd:61:b5:e1:6d:7f:e5:f0:73:
4d:17:46:e2:f9:c7:f6:e6:f7:5b:58:d0:de:45:7c:c0:5c:39:
c8:ae:ed:27:8d:0c:bb:20:77:4b:54:81:c8:57:e8:0d:0b:d7:
08:a2:6c:02:c7:53:6b:b3:a3:3a:b4:c6:fa:e4:60:9a:dd:24:
5f:52:37:d3:d6:c8:56:fd:8a:07:82:68:05:33:9f:39:d9:10:
98:a5:e1:c8:09:8f:06:a5:e0:cf:f8:dd:7d:d4:a6:2b:bf:d6:
a2:ed:81:7b:f3:96:c1:3c:31:26:e2:40:c9:c5:53:4d:66:ab:
6c:cc:fa:e2:42:75:97:88:ba:a3:e3:b0:91:72:d6:d2:cc:77:
70:c7:13:f2:af:a4:56:8a:96:96:1b:2f:10:3c:90:ee:51:45:
a1:dc:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:35 2026 by rpki-client