This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d3438203d3e20323632313936.roa
File: 323830303a6162303a3a2f33322d3438203d3e20323632313936.roa (raw, json)
Hash identifier: z9tlidPo57g5dA9V49tOxHMTMd9w1VrCDmzfLNmbyiQ=
Subject key identifier: 9A:39:CF:56:4A:A5:D3:AC:56:A3:0E:3E:68:06:3F:E0:95:E7:7C:04
Certificate issuer: /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial: 283FA305652245DA2094F5834DCA35D61E2CB964
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d3438203d3e20323632313936.roa
Signing time: Tue 18 Nov 2025 21:53:06 +0000
ROA not before: Tue 18 Nov 2025 21:48:06 +0000
ROA not after: Tue 17 Nov 2026 21:53:06 +0000
asID: 262196
IP address blocks: 2800:ab0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 11:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:3f:a3:05:65:22:45:da:20:94:f5:83:4d:ca:35:d6:1e:2c:b9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
Validity
Not Before: Nov 18 21:48:06 2025 GMT
Not After : Nov 17 21:53:06 2026 GMT
Subject: CN=9A39CF564AA5D3AC56A30E3E68063FE095E77C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:18:cf:14:3b:50:ab:29:e7:18:d1:df:88:
be:0d:ab:0c:94:87:c2:41:88:80:99:c1:f6:fb:7f:
a8:cf:cb:47:e1:4b:f3:2d:ae:35:9d:16:f1:35:2b:
01:9f:4a:67:ca:b9:77:0e:ad:21:29:58:30:2b:6a:
6c:8e:7c:67:f6:7e:21:11:88:d5:6c:df:0f:dc:99:
b4:7b:16:53:24:41:44:24:04:7b:1f:9d:a6:c4:e6:
6a:1b:b4:6c:08:91:96:73:bc:79:7a:2a:81:25:2c:
59:88:ad:2c:66:3f:29:0f:41:97:e4:47:33:b1:22:
f6:81:79:70:96:b2:8b:b9:0e:8b:84:e0:9a:ad:90:
e5:08:66:5a:2c:7d:50:fa:cd:c9:63:12:4b:e5:00:
a0:1f:86:9f:3a:e1:a3:01:f1:19:2c:ef:bc:83:c5:
f4:76:2d:af:c3:84:ee:10:4d:84:3e:3a:95:32:85:
ff:ea:34:ee:bd:22:f5:97:b7:9f:8b:1a:8e:2f:e3:
f0:77:64:b1:0d:01:08:10:f6:60:7b:2c:63:54:47:
c2:06:bd:39:7d:ad:1b:9f:34:bd:23:48:12:82:14:
1c:04:2b:51:f8:d6:bb:cd:eb:c1:cb:78:1d:78:d6:
1e:fb:11:99:d5:f4:b2:ec:22:9f:65:8c:a0:e1:8e:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:39:CF:56:4A:A5:D3:AC:56:A3:0E:3E:68:06:3F:E0:95:E7:7C:04
X509v3 Authority Key Identifier:
keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d3438203d3e20323632313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:ab0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:e5:d3:dc:8c:c6:97:3c:8a:5e:22:7c:6c:3e:88:75:86:6d:
bb:11:c6:3c:0b:97:15:41:42:8e:03:9e:11:48:45:a3:2a:aa:
67:43:b3:19:cd:f2:29:59:8d:0d:4a:e5:fc:99:8d:c9:7e:5d:
b9:d8:53:f3:98:9d:b0:c0:a5:09:9f:59:ab:58:13:ed:e6:7a:
93:2e:ab:e3:ae:7b:e5:66:80:58:40:42:5e:e9:0a:3f:85:85:
96:6e:40:1d:ee:b5:5c:4e:20:53:6b:3c:e8:5e:85:1e:fd:c5:
3f:26:5a:e0:01:fc:f1:d7:e9:27:9a:e7:e5:e9:52:54:87:eb:
50:50:e7:54:4e:0a:90:0f:18:4f:49:f4:db:78:14:78:31:59:
dd:ea:ee:9b:b3:a6:97:f8:c4:a5:8b:5d:09:bf:7f:9a:8b:14:
7a:e9:cd:ad:b9:d1:fc:09:3c:b0:62:23:fa:81:68:9c:11:5f:
d9:a9:03:f6:71:12:ab:1b:a8:ba:49:2d:2b:69:e2:8e:35:dd:
88:22:b4:82:3f:ed:99:f4:41:f6:e2:b3:0b:05:ae:ab:a9:71:
1b:90:fa:3e:0b:80:8a:c1:48:0f:07:4a:11:90:c1:bf:d6:c8:
47:76:2b:82:44:0d:6c:9a:c8:78:94:86:c6:e4:43:6a:e5:aa:
f0:58:61:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:39:09 2025 by rpki-client