This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/323830333a353765303a3a2f33322d3438203d3e20323733393731.roa
File: 323830333a353765303a3a2f33322d3438203d3e20323733393731.roa (raw, json)
Hash identifier: y9flH0lU1VXmh1XoSfvCsjfS/0jfN//6QNQVnZSSGm8=
Subject key identifier: 19:17:36:1F:EB:5B:80:78:0B:2A:D6:86:05:A5:FA:67:3A:89:F3:AB
Certificate issuer: /CN=04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D
Certificate serial: 35267DFDA270E01FC0E433F57D9957D08D312182
Authority key identifier: 04:E7:B9:D3:71:6A:07:CC:64:BF:4B:F1:35:59:3D:FC:1B:D5:5B:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/323830333a353765303a3a2f33322d3438203d3e20323733393731.roa
Signing time: Mon 10 Nov 2025 23:52:14 +0000
ROA not before: Mon 10 Nov 2025 23:47:14 +0000
ROA not after: Mon 09 Nov 2026 23:52:14 +0000
asID: 273971
IP address blocks: 2803:57e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.crl
rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 19:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:26:7d:fd:a2:70:e0:1f:c0:e4:33:f5:7d:99:57:d0:8d:31:21:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D
Validity
Not Before: Nov 10 23:47:14 2025 GMT
Not After : Nov 9 23:52:14 2026 GMT
Subject: CN=1917361FEB5B80780B2AD68605A5FA673A89F3AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:9d:cf:56:9b:18:eb:57:f4:e2:47:b7:64:
0f:10:6d:e1:eb:f7:5b:7a:22:12:b4:ab:16:9a:7a:
10:ae:d3:a0:e1:ea:d1:45:d4:0e:56:54:52:99:32:
4f:55:5e:e6:72:cf:1e:3d:07:b4:5e:14:33:b4:16:
37:d9:37:a5:0a:3d:a9:d3:f5:cc:3f:29:e8:6a:d9:
2a:5b:be:5d:c2:2d:29:f0:f9:9c:47:59:d2:c8:0d:
dd:4e:93:19:c9:40:2c:69:da:03:12:f1:a4:0a:3b:
f5:c5:25:a0:43:33:28:81:84:7d:89:ef:51:0a:a5:
2a:0e:99:e1:79:68:52:cd:a2:21:c1:e8:0a:46:77:
fd:7c:56:42:a6:d0:0e:bc:92:ef:13:cc:6a:75:bc:
a9:3f:68:fb:b2:33:16:95:5e:9b:50:56:cd:70:66:
f8:e9:4b:9b:40:bf:06:62:7d:d2:87:98:24:0a:92:
11:72:d6:33:30:67:c2:cf:71:2a:4f:53:33:7a:84:
10:9e:0d:9a:18:ef:fd:72:52:7e:2c:49:8e:03:06:
c2:a7:09:80:2b:af:ed:2c:6e:9f:c1:60:49:0a:fe:
04:bc:0c:83:09:b4:48:6c:51:ba:0d:8d:b1:96:c5:
cd:41:c9:88:5f:31:1f:8d:0e:f4:be:4a:45:25:01:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:17:36:1F:EB:5B:80:78:0B:2A:D6:86:05:A5:FA:67:3A:89:F3:AB
X509v3 Authority Key Identifier:
keyid:04:E7:B9:D3:71:6A:07:CC:64:BF:4B:F1:35:59:3D:FC:1B:D5:5B:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/323830333a353765303a3a2f33322d3438203d3e20323733393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:57e0::/32
Signature Algorithm: sha256WithRSAEncryption
ac:89:fd:2d:0e:39:b9:17:9a:2a:65:a5:11:69:d4:94:56:9c:
b1:71:02:c4:e5:15:ae:ef:41:4c:5e:21:2c:c5:4d:e7:cb:d2:
cf:e2:c7:6d:06:6c:8b:05:a7:33:98:64:04:17:bb:34:01:08:
1c:06:40:96:ad:18:2e:cd:dd:41:b7:0d:b4:50:29:5a:42:79:
68:3f:8c:e3:57:9d:46:84:75:4d:c3:86:a8:74:75:de:7c:36:
a9:2e:0b:c4:9f:f9:3d:47:d2:90:0a:bb:64:92:3b:93:42:3a:
ed:7e:9f:09:77:05:48:d3:53:83:69:6e:17:a2:fc:24:8a:f0:
97:95:1d:98:67:69:3f:9a:7a:63:05:97:bc:d4:b3:4f:a3:57:
3f:79:60:c4:be:c9:c7:57:43:d8:f2:65:b4:2f:68:05:c9:a1:
bc:f5:fd:08:fc:b5:92:87:7f:21:58:7b:3a:b3:31:9c:66:19:
6f:88:ac:8d:ef:3a:62:0c:1a:6f:dd:7a:e7:2b:89:15:d5:36:
1b:dc:f4:13:ae:cc:6d:b4:12:f1:8e:1e:9b:b3:e1:41:91:81:
a0:ca:24:3a:84:21:2c:3b:ff:02:71:be:d7:b1:ac:b3:77:1a:
74:01:1c:3d:24:fe:73:3b:22:36:54:4f:20:4e:31:09:15:28:
b8:e1:ff:88
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUNSZ9/aJw4B/A5DP1fZlX0I0xIYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRFN0I5RDM3MTZBMDdDQzY0QkY0QkYxMzU1OTNERkMx
QkQ1NUI0RDAeFw0yNTExMTAyMzQ3MTRaFw0yNjExMDkyMzUyMTRaMDMxMTAvBgNV
BAMTKDE5MTczNjFGRUI1QjgwNzgwQjJBRDY4NjA1QTVGQTY3M0E4OUYzQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+053PVpsY61f04ke3ZA8QbeHr
91t6IhK0qxaaehCu06Dh6tFF1A5WVFKZMk9VXuZyzx49B7ReFDO0FjfZN6UKPanT
9cw/Kehq2Spbvl3CLSnw+ZxHWdLIDd1OkxnJQCxp2gMS8aQKO/XFJaBDMyiBhH2J
71EKpSoOmeF5aFLNoiHB6ApGd/18VkKm0A68ku8TzGp1vKk/aPuyMxaVXptQVs1w
ZvjpS5tAvwZifdKHmCQKkhFy1jMwZ8LPcSpPUzN6hBCeDZoY7/1yUn4sSY4DBsKn
CYArr+0sbp/BYEkK/gS8DIMJtEhsUboNjbGWxc1ByYhfMR+NDvS+SkUlAfHVAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUGRc2H+tbgHgLKtaGBaX6ZzqJ86swHwYDVR0j
BBgwFoAUBOe503FqB8xkv0vxNVk9/BvVW00wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjAzOEZERkJCN0IxRTQ5RDlEODZEQzdFMzVENzlFMDA2
MjlDMkU4QjM1RkZBODRGMDY5RUU1RkM4MkUyNDlFLzAvMDRFN0I5RDM3MTZBMDdD
QzY0QkY0QkYxMzU1OTNERkMxQkQ1NUI0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNEU3QjlEMzcxNkEwN0NDNjRC
RjRCRjEzNTU5M0RGQzFCRDU1QjRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYwMzhGREZCQjdCMUU0OUQ5RDg2REM3RTM1RDc5RTAwNjI5QzJFOEIz
NUZGQTg0RjA2OUVFNUZDODJFMjQ5RS8wLzMyMzgzMDMzM2EzNTM3NjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzM5MzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDV+Aw
DQYJKoZIhvcNAQELBQADggEBAKyJ/S0OObkXmiplpRFp1JRWnLFxAsTlFa7vQUxe
ISzFTefL0s/ix20GbIsFpzOYZAQXuzQBCBwGQJatGC7N3UG3DbRQKVpCeWg/jONX
nUaEdU3Dhqh0dd58NqkuC8Sf+T1H0pAKu2SSO5NCOu1+nwl3BUjTU4Npbhei/CSK
8JeVHZhnaT+aemMFl7zUs0+jVz95YMS+ycdXQ9jyZbQvaAXJobz1/Qj8tZKHfyFY
ezqzMZxmGW+IrI3vOmIMGm/deucriRXVNhvc9BOuzG20EvGOHpuz4UGRgaDKJDqE
ISw7/wJxvtexrLN3GnQBHD0k/nM7IjZUTyBOMQkVKLjh/4g=
-----END CERTIFICATE-----
Generated at Sun Dec 7 10:11:23 2025 by rpki-client