This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a3a2f33332d3438203d3e20323732393337.roa
File: 323830333a333139303a3a2f33332d3438203d3e20323732393337.roa (raw, json)
Hash identifier: DsJUHyF1o1uEL6VAkbXlCl7XpNC3s51FX0DqQLgDzWs=
Subject key identifier: CF:1A:9A:F6:5E:35:34:00:CA:6F:0F:E1:6B:E9:B0:3F:00:6D:F3:DE
Certificate issuer: /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial: 35B5DA7FFC65E5031008F4FFDF843F148163554B
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a3a2f33332d3438203d3e20323732393337.roa
Signing time: Tue 06 Jan 2026 19:35:33 +0000
ROA not before: Tue 06 Jan 2026 19:30:33 +0000
ROA not after: Tue 05 Jan 2027 19:35:33 +0000
asID: 272937
IP address blocks: 2803:3190::/33 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b5:da:7f:fc:65:e5:03:10:08:f4:ff:df:84:3f:14:81:63:55:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Validity
Not Before: Jan 6 19:30:33 2026 GMT
Not After : Jan 5 19:35:33 2027 GMT
Subject: CN=CF1A9AF65E353400CA6F0FE16BE9B03F006DF3DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:89:ca:54:f8:5c:14:6e:f9:79:83:b6:ab:
3e:60:52:e2:a4:f3:4f:92:e7:dc:f5:5a:7a:32:60:
f5:bf:c3:dd:da:5f:b8:07:59:83:cd:bb:8e:12:35:
32:ca:88:8f:9c:dd:0e:7d:d2:b7:7e:36:6a:b8:47:
6b:8c:40:e3:bc:7e:57:22:65:4b:b9:9d:d3:9c:b6:
0c:f1:2f:4d:85:f5:02:9f:97:91:3a:42:9a:38:5c:
e8:d2:d8:07:27:b9:e5:9b:a8:88:5b:45:54:b7:4c:
9a:cf:86:b8:4f:35:0f:ba:40:b4:f9:f1:7c:fd:24:
2f:5a:db:75:f1:fa:4b:5f:09:5e:45:9d:8c:b4:b2:
bd:57:a8:fc:86:95:ec:d8:4c:fc:f5:73:ee:78:5a:
46:f9:db:a7:1e:a4:d2:94:51:7a:8e:43:80:c8:6a:
a4:c8:ff:b4:e0:87:6c:8c:a4:18:db:b4:6b:da:52:
40:d7:82:f5:91:da:ee:f9:25:e3:c8:af:72:40:31:
15:4e:13:ef:63:b6:5c:ef:4b:10:bc:f5:3a:40:08:
dc:c9:f6:d5:a7:5d:67:74:e9:bf:b2:a9:d8:b6:62:
c0:b8:8b:42:63:fd:f6:78:a1:dd:43:38:2a:49:92:
45:8e:b4:23:ab:9e:01:2f:c4:cc:78:01:a6:39:1e:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:9A:F6:5E:35:34:00:CA:6F:0F:E1:6B:E9:B0:3F:00:6D:F3:DE
X509v3 Authority Key Identifier:
keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a3a2f33332d3438203d3e20323732393337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3190::/33
Signature Algorithm: sha256WithRSAEncryption
77:bc:ef:72:aa:e4:bf:02:1e:74:78:ef:af:b3:79:dd:54:19:
21:fd:19:80:f6:56:c7:2b:a5:bd:0c:35:00:d4:a3:5b:a7:c8:
07:bf:fc:93:06:c1:53:1a:35:3e:6b:6c:f7:1d:88:7b:c0:17:
e0:6e:d2:cb:44:b3:3c:e9:d4:24:91:64:14:c7:71:68:4c:5d:
63:48:83:eb:b1:c6:e8:8d:51:d0:6c:3e:98:28:89:3e:0b:9a:
d0:92:03:f5:50:39:bc:5d:bc:50:31:22:0a:4b:0e:fc:ab:2f:
45:c3:c5:87:5e:e6:79:da:75:de:d6:bc:2b:6d:be:f5:09:c9:
82:0f:db:cc:71:71:2d:b9:49:2e:8a:34:d6:37:9a:98:ac:e0:
5f:fa:3b:4a:71:d7:73:af:7d:a3:90:44:1e:bd:f1:14:41:88:
8e:72:84:1e:53:36:39:c5:f8:15:5e:57:5b:6c:33:b5:e4:9f:
a8:9a:dc:73:dd:9a:39:42:73:e9:e1:df:74:71:3a:38:cf:35:
8f:77:46:f5:d9:3e:a1:a3:29:bd:48:a6:59:e9:cd:d0:e4:c1:
e2:df:7a:cb:64:b2:ed:ff:20:69:30:29:44:1c:a4:b7:9f:7b:
78:ae:18:86:45:e5:7b:1a:09:04:94:40:78:ec:79:90:34:e3:
10:61:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:57:58 2026 by rpki-client