This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/323830333a373061303a3a2f33322d3332203d3e203237383535.roa
File: 323830333a373061303a3a2f33322d3332203d3e203237383535.roa (raw, json)
Hash identifier: 3jquYMo/8w55GpGXpcdbCxY/0T7x0/BKpVJBsf5FpjM=
Subject key identifier: 88:58:25:D3:F7:40:CF:F6:42:75:21:58:68:B0:67:A8:21:D9:58:AB
Certificate issuer: /CN=8757D927DFA4B315CF6FB1395FE66CA8EB272638
Certificate serial: 6FCBC33211314C15F086025B671355492DCF1FFB
Authority key identifier: 87:57:D9:27:DF:A4:B3:15:CF:6F:B1:39:5F:E6:6C:A8:EB:27:26:38
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/323830333a373061303a3a2f33322d3332203d3e203237383535.roa
Signing time: Tue 06 Jan 2026 19:17:31 +0000
ROA not before: Tue 06 Jan 2026 19:12:31 +0000
ROA not after: Tue 05 Jan 2027 19:17:31 +0000
asID: 27855
IP address blocks: 2803:70a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.crl
rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:cb:c3:32:11:31:4c:15:f0:86:02:5b:67:13:55:49:2d:cf:1f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8757D927DFA4B315CF6FB1395FE66CA8EB272638
Validity
Not Before: Jan 6 19:12:31 2026 GMT
Not After : Jan 5 19:17:31 2027 GMT
Subject: CN=885825D3F740CFF64275215868B067A821D958AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:87:2f:53:96:9d:01:09:7d:ea:18:e9:f6:
c2:3c:ab:3d:70:98:54:79:6b:a7:f5:7f:40:b9:5f:
c7:74:e5:e7:36:8c:d3:f5:0d:12:cf:db:85:da:6b:
f4:96:b4:7c:1c:bb:dc:da:55:56:f8:0f:53:07:30:
fe:d6:58:9f:f1:63:89:c3:e5:aa:bb:91:88:0a:d7:
76:ce:46:ec:b2:4f:ca:d9:ef:0e:85:b7:6d:79:30:
5d:56:40:97:f8:50:d0:8f:5e:8b:7d:b5:77:a8:49:
fd:5e:9b:df:cb:64:aa:73:d6:01:79:70:78:94:dd:
15:6a:cc:52:69:d6:62:b7:9b:dd:82:f6:27:10:2f:
da:18:f9:8a:75:72:bf:51:3e:1f:b0:3c:e8:2e:c1:
75:c5:8b:92:15:e8:d1:5f:8c:ed:87:08:aa:9e:df:
57:8a:82:26:b6:d3:14:48:70:35:ba:ac:bc:ef:0b:
ed:be:2a:fe:0f:d1:44:f7:41:67:e8:53:63:8a:ef:
77:cc:85:1a:c6:8b:88:29:b8:e9:2d:9b:d2:1b:95:
63:be:71:6c:89:ef:c0:4f:13:d1:95:93:2c:36:83:
c6:6e:f8:80:2a:86:da:a6:32:08:70:59:28:da:c9:
3e:08:e7:79:54:25:9c:fa:a8:c8:47:2f:b1:81:a0:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:58:25:D3:F7:40:CF:F6:42:75:21:58:68:B0:67:A8:21:D9:58:AB
X509v3 Authority Key Identifier:
keyid:87:57:D9:27:DF:A4:B3:15:CF:6F:B1:39:5F:E6:6C:A8:EB:27:26:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/323830333a373061303a3a2f33322d3332203d3e203237383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:70a0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:39:ed:c9:d7:55:f1:e2:e0:db:66:87:38:18:ff:e2:b0:4c:
fa:e6:83:45:5e:a6:bd:63:05:a1:06:40:4b:c6:0d:8c:47:f4:
0a:7a:63:90:4a:6c:10:74:db:1b:2d:09:12:53:19:85:82:ef:
da:f0:07:43:ca:ab:f0:ca:de:f8:05:a2:ae:46:16:9d:77:85:
c4:70:f3:ff:1b:9d:d5:f3:b9:4c:bd:ba:dc:11:2a:8f:b6:25:
4d:b6:7f:e1:fe:27:f9:a7:dd:88:b3:13:26:e8:eb:d0:b4:cb:
b8:8a:dd:b9:a1:da:a6:c4:e3:00:3c:32:c2:11:6b:49:06:a2:
08:34:98:33:36:78:e8:04:54:3e:47:d0:8d:11:3d:e2:be:14:
cb:fd:f9:13:d8:35:c7:5e:3e:63:16:b7:d9:06:57:3d:5c:f4:
fa:42:68:dc:89:12:66:04:95:0f:86:ae:d5:1a:56:df:3c:2b:
26:0d:ed:f1:3f:fa:be:54:a3:cf:1b:ce:78:19:11:a1:dc:c0:
03:fb:60:46:46:e8:68:1b:11:ee:4a:21:ab:a7:f7:ae:91:87:
23:93:ba:9b:80:3e:9d:a9:35:6e:49:99:78:04:dc:9f:4f:1c:
f1:a0:d1:0a:2f:0e:7d:ec:44:0a:fc:61:d6:e9:b5:08:28:fd:
d1:04:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:19 2026 by rpki-client