This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a383a3a2f34382d3438203d3e20323634373333.roa
File: 323830333a643238303a383a3a2f34382d3438203d3e20323634373333.roa (raw, json)
Hash identifier: jyUROnqzleXPgcf9k1LIwQ96m++k+fMk6Rrf5W6KKVs=
Subject key identifier: 23:F0:96:70:4A:1E:58:29:13:47:B2:F0:DD:DC:1E:B9:CD:B8:82:6C
Certificate issuer: /CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Certificate serial: 12A5319E0CC5A4378E5B7B45C6FC316C738FA131
Authority key identifier: 47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a383a3a2f34382d3438203d3e20323634373333.roa
Signing time: Tue 06 Jan 2026 19:07:05 +0000
ROA not before: Tue 06 Jan 2026 19:02:05 +0000
ROA not after: Tue 05 Jan 2027 19:07:05 +0000
asID: 264733
IP address blocks: 2803:d280:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl
rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 11:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a5:31:9e:0c:c5:a4:37:8e:5b:7b:45:c6:fc:31:6c:73:8f:a1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Validity
Not Before: Jan 6 19:02:05 2026 GMT
Not After : Jan 5 19:07:05 2027 GMT
Subject: CN=23F096704A1E58291347B2F0DDDC1EB9CDB8826C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:48:0d:23:02:da:ee:11:7a:a6:b2:54:fd:
cf:5d:ed:7a:25:e7:e9:48:f8:01:69:c2:ae:a2:a0:
9c:83:82:dd:fc:4e:cc:a2:ce:6c:bf:fa:0c:26:07:
f6:a2:0a:75:70:3c:79:df:12:4d:3d:92:70:59:32:
1b:95:cf:99:62:2e:dc:74:4a:4f:4a:9e:3a:bc:73:
4c:a9:fd:7c:f7:2d:a6:5d:cc:8a:d8:32:ed:69:2e:
fb:bd:c9:5b:70:31:02:03:f4:c9:67:7a:9c:26:99:
93:80:16:d1:84:37:c3:f3:38:ca:82:fb:d8:99:f7:
9c:06:d9:4b:6a:2d:53:ab:51:a3:f7:90:51:ad:f6:
65:6e:49:02:76:02:ae:94:80:d4:7b:02:b7:19:c7:
38:ce:ae:12:07:60:20:da:7e:10:b3:4f:d1:92:dc:
d8:3c:43:4e:0a:f5:c2:95:b6:b4:bd:44:7d:bb:d0:
f9:75:59:f6:7a:d6:b4:db:2e:3c:87:45:c8:af:19:
71:68:f5:52:69:93:eb:19:7b:3a:23:fc:fc:fe:36:
a9:11:bb:0c:e3:9b:c6:53:ae:4f:6a:28:f7:b1:ef:
2f:aa:41:ff:0a:61:94:6b:7d:02:ad:a9:5f:50:ce:
24:1b:bd:88:a8:52:f2:84:88:70:b4:f8:ea:1e:03:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:96:70:4A:1E:58:29:13:47:B2:F0:DD:DC:1E:B9:CD:B8:82:6C
X509v3 Authority Key Identifier:
keyid:47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a383a3a2f34382d3438203d3e20323634373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d280:8::/48
Signature Algorithm: sha256WithRSAEncryption
45:6a:fd:65:ed:26:f8:95:f4:dd:5f:2d:15:b9:f8:df:f1:33:
ad:0b:7e:9d:d5:dc:ae:60:26:76:bf:27:ea:26:73:fa:96:6f:
16:44:6e:62:96:05:37:3e:4e:19:4c:66:37:61:f6:1f:11:c9:
7c:99:6e:b0:c6:30:51:d2:dc:09:f4:fd:34:da:52:3d:d0:bd:
0d:d2:27:25:e5:b5:84:20:52:2e:50:bc:3e:75:4f:b2:48:0e:
2e:18:d3:18:cd:05:ba:a3:84:2f:a5:77:46:18:07:79:ed:3a:
55:1d:0f:19:ac:6d:f5:26:48:97:7c:ce:6c:7d:ae:18:7a:05:
b6:47:12:34:47:50:98:91:48:9d:37:14:21:a2:08:29:c1:dc:
68:41:00:50:15:8e:73:c6:9b:43:c6:47:0d:e4:b8:e6:ed:9a:
50:7d:1f:8b:67:73:de:64:ed:2b:b9:c9:71:3f:9a:86:06:fc:
a7:ed:0a:28:f6:a9:ce:de:f9:c5:ef:58:82:89:0b:fb:af:e5:
08:1d:d8:58:db:29:22:03:f5:38:cf:34:79:4b:49:92:ec:ff:
c6:18:0c:f2:79:2b:e5:2e:f1:a6:f3:88:04:eb:84:96:e7:fa:
eb:28:77:9d:d2:be:73:03:99:31:f4:a8:4d:ef:ab:56:e7:b0:
d8:5c:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:38:04 2026 by rpki-client