This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/323830333a383864303a3a2f33322d3438203d3e20323733393833.roa
File: 323830333a383864303a3a2f33322d3438203d3e20323733393833.roa (raw, json)
Hash identifier: i3yuyNxwG21gmioeLUJbH1d/+G2L824kUBnYepuNlrY=
Subject key identifier: 12:4A:04:5F:26:6E:DC:89:A2:0E:0D:B3:85:D7:23:C0:60:CE:79:DD
Certificate issuer: /CN=D13DA981D2AB4A09FB017D899B24125D3FD57AF2
Certificate serial: 33C0DBBFB4BAAD2C23E645B055C378399064CF08
Authority key identifier: D1:3D:A9:81:D2:AB:4A:09:FB:01:7D:89:9B:24:12:5D:3F:D5:7A:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/323830333a383864303a3a2f33322d3438203d3e20323733393833.roa
Signing time: Thu 27 Nov 2025 16:53:42 +0000
ROA not before: Thu 27 Nov 2025 16:48:42 +0000
ROA not after: Thu 26 Nov 2026 16:53:42 +0000
asID: 273983
IP address blocks: 2803:88d0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.crl
rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 21:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c0:db:bf:b4:ba:ad:2c:23:e6:45:b0:55:c3:78:39:90:64:cf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D13DA981D2AB4A09FB017D899B24125D3FD57AF2
Validity
Not Before: Nov 27 16:48:42 2025 GMT
Not After : Nov 26 16:53:42 2026 GMT
Subject: CN=124A045F266EDC89A20E0DB385D723C060CE79DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:13:a9:ff:50:a1:f5:49:b6:7b:10:0c:24:
5c:0e:4f:a7:71:c5:aa:b4:89:1e:51:87:98:d9:d3:
3b:1b:4b:ea:85:0e:39:00:41:4c:92:12:df:b7:a9:
f9:85:94:ff:7f:e0:ad:f5:a7:22:ea:26:81:ac:2c:
a5:bf:cd:6a:b6:27:42:4a:cd:1c:2b:62:37:43:ec:
96:e5:47:78:68:ae:55:3d:5a:40:86:24:5f:dc:0f:
d2:84:f9:1b:13:00:fb:e0:02:7d:fb:1d:41:cb:38:
f3:1d:20:fb:17:13:6d:59:00:d7:a2:81:40:8c:ca:
12:6d:af:0b:5a:24:53:4b:2a:61:99:c1:11:99:60:
cd:c9:53:f4:49:3c:27:1b:ac:6c:40:1e:e3:b6:cc:
43:d4:41:b0:bd:91:49:42:44:e1:94:9c:95:fa:e4:
28:26:29:30:f6:3d:62:ac:da:bc:fb:74:21:2c:5b:
64:c4:fd:31:f6:97:d0:39:1c:4d:06:f9:02:8f:61:
18:0d:3c:3c:d7:92:94:f5:85:6d:0d:1c:4f:2d:55:
ae:9d:1b:64:3f:1c:ec:5a:4a:67:e1:bb:ef:11:b0:
8e:5e:fe:20:98:24:35:a4:b1:14:55:23:43:e7:7f:
7b:14:05:2e:41:1c:21:4c:04:9b:f4:a6:6e:bd:50:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4A:04:5F:26:6E:DC:89:A2:0E:0D:B3:85:D7:23:C0:60:CE:79:DD
X509v3 Authority Key Identifier:
keyid:D1:3D:A9:81:D2:AB:4A:09:FB:01:7D:89:9B:24:12:5D:3F:D5:7A:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/323830333a383864303a3a2f33322d3438203d3e20323733393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:88d0::/32
Signature Algorithm: sha256WithRSAEncryption
83:81:c8:c0:0f:31:95:5d:49:e5:58:98:28:da:1d:5a:1c:10:
4f:9e:63:f4:81:45:a1:b2:bf:1b:f0:d4:13:f8:05:58:5f:f9:
2e:c1:6c:7a:0b:d8:63:81:7b:06:3b:ee:e5:47:1e:f6:62:53:
b5:57:6f:48:6c:f8:86:a3:31:55:18:12:25:cd:f5:ef:b1:35:
2f:71:08:88:2a:11:5d:71:3d:38:7e:2a:b6:b4:33:2a:82:3a:
63:a8:90:ae:ce:ba:45:80:1c:57:d6:d1:c1:88:31:10:89:2d:
17:17:30:44:ca:4f:92:f3:68:14:61:62:db:d1:bf:d8:16:c4:
15:9f:14:4c:f7:53:24:37:76:2f:b5:61:4a:24:1b:31:8b:81:
c5:6a:f6:91:7c:5c:10:78:75:6a:d4:94:ed:42:47:e5:6e:1a:
ef:aa:d4:cd:a4:0a:7f:0b:51:f3:6b:47:9f:a0:a5:aa:fe:21:
db:fb:ea:a2:fa:52:35:3a:72:1e:56:04:40:21:73:79:26:69:
d0:5d:5a:20:58:86:06:7d:09:9e:37:ea:6f:7f:ea:1c:d6:3e:
14:87:20:dc:22:57:26:71:56:68:fc:3b:11:2c:5f:21:10:e1:
5d:36:f6:6c:32:cd:f5:c0:2f:fe:d3:14:19:06:af:0f:8f:bd:
ec:f6:06:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:07:23 2025 by rpki-client