This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/323830363a3334313a3a2f33322d3332203d3e20323635353930.roa
File: 323830363a3334313a3a2f33322d3332203d3e20323635353930.roa (raw, json)
Hash identifier: QK9KP74Wrn9N29TxWAZUtOcQ8osm8dgPufn73OLzINk=
Subject key identifier: 95:83:3F:48:CA:9E:BF:C2:E2:AE:1D:66:B6:8A:D5:54:2F:B2:DE:B5
Certificate issuer: /CN=44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71
Certificate serial: 110141F529039A08509D04CF3AAE5BD1C50B91E4
Authority key identifier: 44:AF:FE:BA:19:37:C2:A0:8E:23:DE:18:92:F4:C8:3B:CB:C5:0E:71
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/323830363a3334313a3a2f33322d3332203d3e20323635353930.roa
Signing time: Wed 19 Nov 2025 05:53:08 +0000
ROA not before: Wed 19 Nov 2025 05:48:08 +0000
ROA not after: Wed 18 Nov 2026 05:53:08 +0000
asID: 265590
IP address blocks: 2806:341::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.crl
rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 19:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:01:41:f5:29:03:9a:08:50:9d:04:cf:3a:ae:5b:d1:c5:0b:91:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71
Validity
Not Before: Nov 19 05:48:08 2025 GMT
Not After : Nov 18 05:53:08 2026 GMT
Subject: CN=95833F48CA9EBFC2E2AE1D66B68AD5542FB2DEB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:c9:77:2a:d7:90:52:67:dd:cf:d0:2c:38:
63:05:ee:b7:c5:ad:29:59:44:3b:27:72:ae:ca:3a:
f4:08:b2:d0:01:bc:94:27:6a:67:fb:c6:93:70:48:
3d:b4:40:d4:a5:8f:d1:a0:4d:1f:70:f7:28:ed:f0:
a4:2e:66:4e:e7:6b:87:36:92:91:70:90:3b:31:90:
c3:de:47:cf:b8:21:d6:01:1b:7f:15:42:48:e3:0b:
65:e0:0a:82:fb:67:cc:b7:2e:d1:b6:cd:93:0b:dd:
0a:1f:21:ca:c3:f5:2d:ef:bf:dd:0a:f1:e5:4d:a0:
cd:ad:33:72:34:0a:1a:e2:e0:d1:4f:73:c6:b7:c5:
ce:5b:30:2f:74:2c:a5:bb:b4:14:2c:0e:11:52:14:
2b:15:ad:d7:5c:42:2c:d6:8e:60:d7:33:b1:7b:da:
6c:a6:32:ce:9b:fb:fc:49:ac:52:b8:ad:eb:59:bf:
0a:38:2c:b1:de:13:01:e0:ee:bf:55:76:e4:d5:74:
7e:94:01:15:59:61:99:a1:54:12:83:7f:2a:b6:8a:
78:0e:6e:d0:70:a7:a9:44:6b:eb:ba:1f:ea:f9:10:
6d:12:1c:a3:3f:77:10:f6:1b:b6:a1:2f:53:c3:d7:
35:81:2e:48:8e:28:bf:c2:1f:3e:e4:fa:90:ed:42:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:83:3F:48:CA:9E:BF:C2:E2:AE:1D:66:B6:8A:D5:54:2F:B2:DE:B5
X509v3 Authority Key Identifier:
keyid:44:AF:FE:BA:19:37:C2:A0:8E:23:DE:18:92:F4:C8:3B:CB:C5:0E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/323830363a3334313a3a2f33322d3332203d3e20323635353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:341::/32
Signature Algorithm: sha256WithRSAEncryption
61:d1:5b:44:dd:7b:21:2e:5a:8d:43:62:cc:e2:f2:9e:b3:43:
e7:5e:a6:4d:09:ce:9b:72:5b:9c:79:ef:74:e3:0e:9e:70:1d:
dc:5b:40:0f:0a:81:bc:2a:d6:2b:03:88:fb:8e:22:5f:a7:e2:
75:7e:d1:5c:2c:8f:b4:50:9a:3f:69:40:7f:02:59:8b:12:f3:
52:5a:4f:d6:e1:69:3c:41:1a:70:59:29:02:b1:b2:43:03:08:
77:1e:01:e9:35:02:1b:44:fc:7b:a6:ed:c3:02:2d:cc:c7:f8:
cf:d6:da:d2:67:54:b5:e4:b7:34:97:77:19:ec:9c:1f:90:aa:
76:de:ea:e5:8d:4c:99:d9:13:36:be:23:b0:f7:44:49:c1:4c:
7a:92:67:5c:84:8b:91:75:22:cd:85:b2:af:8b:86:38:66:4f:
bc:17:e5:70:c4:bc:e2:92:11:8a:36:c4:b8:4e:92:6a:da:3d:
19:af:d9:74:0f:aa:18:ed:ac:58:1f:ca:db:4a:f1:69:4a:4a:
3f:4b:b5:63:2b:69:b7:cf:b5:46:f4:ed:2a:9f:e9:87:96:8a:
0a:45:d1:f7:e0:9b:07:00:b7:be:a2:a9:17:19:b5:18:bf:c0:
a6:c5:a7:e6:69:da:5f:95:f8:24:0a:b1:43:52:1c:97:30:e1:
a3:eb:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:44:28 2025 by rpki-client