This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/323830333a356261303a3a2f33322d3332203d3e20323637373636.roa
File: 323830333a356261303a3a2f33322d3332203d3e20323637373636.roa (raw, json)
Hash identifier: 8I86bSE8lMBAuKRi0aRf6hBgpyp/ADm+L/bJW1QIcUs=
Subject key identifier: 3B:AE:64:88:C7:55:4A:A4:9A:AD:1D:62:5F:BE:9A:D7:FE:85:EF:8E
Certificate issuer: /CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
Certificate serial: 1C579F5813CA1FA93002024052885E316AFC9ADC
Authority key identifier: 42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/323830333a356261303a3a2f33322d3332203d3e20323637373636.roa
Signing time: Tue 06 Jan 2026 20:58:11 +0000
ROA not before: Tue 06 Jan 2026 20:53:11 +0000
ROA not after: Tue 05 Jan 2027 20:58:11 +0000
asID: 267766
IP address blocks: 2803:5ba0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl
rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 21:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:57:9f:58:13:ca:1f:a9:30:02:02:40:52:88:5e:31:6a:fc:9a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
Validity
Not Before: Jan 6 20:53:11 2026 GMT
Not After : Jan 5 20:58:11 2027 GMT
Subject: CN=3BAE6488C7554AA49AAD1D625FBE9AD7FE85EF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:c2:d0:1e:d7:7d:47:d9:2f:e3:25:06:6f:
a1:bb:3d:8d:13:6b:ee:9f:42:28:9c:d2:85:39:c5:
3e:ca:8e:6d:fa:32:53:0c:12:34:fa:1e:b5:75:af:
f4:4f:e7:20:6f:12:99:3d:1b:bb:6a:5a:dc:29:ca:
55:9a:26:0d:c6:32:fc:e3:4e:ff:ee:98:a0:c7:14:
9f:c6:7a:01:6f:1e:a4:d2:91:ae:8f:f7:63:9a:cd:
a4:52:d1:19:8b:08:90:a1:e4:91:ce:5c:dc:3f:71:
94:2a:1a:45:98:df:92:96:d8:72:5b:98:d4:8f:1e:
9a:05:b6:a7:9e:f4:b0:91:5e:26:76:4d:7c:09:25:
55:c2:1a:21:5e:98:fd:60:23:44:9e:46:a0:ca:9e:
53:a1:ff:21:a1:fd:30:6f:c6:4e:75:51:53:69:19:
4a:a6:5d:c6:dd:4d:55:2d:8a:41:c9:e8:03:43:7e:
b8:66:a5:f4:5e:f6:ff:76:4a:a1:32:64:1d:24:0a:
a5:45:82:81:81:17:28:2a:b4:ca:7d:9b:2c:b4:be:
c5:cf:b5:dd:88:a5:41:98:b7:78:b9:6e:bf:07:0a:
d9:ba:27:8f:76:14:fb:cd:56:a9:7e:4a:f0:b5:8f:
10:27:be:3e:dc:d8:89:0d:26:ab:79:24:2c:be:27:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AE:64:88:C7:55:4A:A4:9A:AD:1D:62:5F:BE:9A:D7:FE:85:EF:8E
X509v3 Authority Key Identifier:
keyid:42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/323830333a356261303a3a2f33322d3332203d3e20323637373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5ba0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:aa:ab:1f:22:48:4a:fa:9b:2a:a8:79:51:d3:17:cb:2f:1c:
96:fe:76:54:41:e9:6b:0e:9d:29:69:26:0a:68:94:9b:08:99:
73:7e:bb:15:8f:6f:30:24:0e:0b:9f:df:69:da:93:a6:d2:2c:
0e:07:96:e2:6a:87:80:71:bf:f2:c7:61:99:72:9d:0f:73:41:
b8:46:ab:73:f7:46:dd:1a:c7:e2:cc:af:2d:ed:f2:7e:29:97:
19:f8:14:82:18:f7:e5:42:bc:7c:1c:e3:4f:e5:2c:ad:28:fe:
6c:d4:48:fc:55:ed:a8:33:da:89:f5:ad:e6:46:cc:1c:23:9a:
f8:94:be:bb:ce:f1:6e:06:15:a4:5f:16:92:13:c8:98:f8:0f:
5e:d9:eb:cd:6b:ef:58:e1:45:f2:a8:2a:9e:c8:57:24:99:44:
c7:60:e3:f0:ba:64:9d:0d:d1:56:2e:2e:ee:d3:ee:cd:43:7d:
a9:be:b4:e3:7f:ac:77:0e:b1:c7:f8:ca:49:1f:c6:ca:05:f8:
66:7b:60:25:78:35:14:37:b7:54:c0:38:9c:90:44:10:fa:f5:
d7:8f:76:d4:e4:93:bc:17:43:dc:61:d9:29:5d:31:c8:63:43:
a5:3c:dd:22:6d:34:5e:b2:bf:0c:66:b9:d7:e1:2e:19:e2:3d:
df:c3:6d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:41 2026 by rpki-client