This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/323830333a646230303a3a2f33322d3438203d3e20323632323334.roa
File: 323830333a646230303a3a2f33322d3438203d3e20323632323334.roa (raw, json)
Hash identifier: Vzgsl/2RCcHFZwxeu0pIQw5m+uqTT5kUFrjE70HCQeQ=
Subject key identifier: C2:D1:96:63:0B:40:11:28:1D:11:38:2D:BF:F9:5B:5A:D4:3D:ED:41
Certificate issuer: /CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Certificate serial: 797EA415BF725914E0FC37008DA393EC4B54163B
Authority key identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/323830333a646230303a3a2f33322d3438203d3e20323632323334.roa
Signing time: Tue 06 Jan 2026 18:57:33 +0000
ROA not before: Tue 06 Jan 2026 18:52:33 +0000
ROA not after: Tue 05 Jan 2027 18:57:33 +0000
asID: 262234
IP address blocks: 2803:db00::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl
rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 00:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7e:a4:15:bf:72:59:14:e0:fc:37:00:8d:a3:93:ec:4b:54:16:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Validity
Not Before: Jan 6 18:52:33 2026 GMT
Not After : Jan 5 18:57:33 2027 GMT
Subject: CN=C2D196630B4011281D11382DBFF95B5AD43DED41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:39:2f:ca:bf:bf:50:6a:17:ab:1d:35:29:
21:ea:82:d0:db:ff:3e:0d:00:73:8b:8f:bd:e8:64:
5e:05:17:06:fd:f8:0b:8c:b4:b5:53:50:99:5e:85:
3a:9b:90:0c:a6:a7:75:32:8f:7b:ea:4c:5b:a3:4c:
1a:34:65:3d:d4:7d:bc:53:46:a5:d7:ac:62:e5:6b:
56:c0:55:36:ac:ce:6f:b8:c7:35:06:78:c5:df:b0:
cc:cb:62:bc:a3:2e:15:fb:4e:09:24:37:e3:d5:44:
b6:53:bb:54:fa:6f:3b:66:ab:53:66:fe:2b:27:f2:
4a:70:52:71:6c:dd:a3:2d:f0:00:26:68:0b:c4:bf:
46:fb:6d:75:c2:ee:7b:75:c0:57:19:7b:0f:f1:17:
38:58:e9:1a:43:8c:86:86:47:be:55:51:62:8d:c4:
dd:c9:e1:37:c4:ce:9c:99:86:31:b5:1d:e8:81:e1:
67:15:c9:44:c5:6a:64:b9:05:1c:ee:f2:da:63:46:
5e:90:42:6d:cc:bd:65:5d:0a:a9:5b:94:10:f6:f5:
0b:aa:a2:16:79:23:b6:e2:37:83:52:5a:5c:1f:c9:
82:6a:80:ad:ad:a5:3a:82:bc:73:70:ed:0a:45:21:
f7:38:bf:d0:71:f2:9a:d2:b0:80:ad:74:05:08:f1:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D1:96:63:0B:40:11:28:1D:11:38:2D:BF:F9:5B:5A:D4:3D:ED:41
X509v3 Authority Key Identifier:
keyid:22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/323830333a646230303a3a2f33322d3438203d3e20323632323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:db00::/32
Signature Algorithm: sha256WithRSAEncryption
6f:63:ff:39:45:93:cb:dd:6e:37:72:0e:d2:e2:d0:7f:63:d3:
84:69:26:32:52:7d:fc:69:0d:a1:a0:e5:9d:97:3a:9e:92:c3:
f8:b8:27:d2:4b:cf:68:f4:53:fc:0d:7c:aa:8b:ca:a7:41:18:
39:20:21:b0:83:4f:4b:cf:c2:61:ec:89:2b:d4:78:1c:0e:93:
7f:c4:ea:1e:b3:96:aa:e3:cc:30:3b:99:fe:1c:43:4e:0b:64:
b6:8c:78:00:85:79:59:1a:38:d4:ec:de:8a:62:41:f7:bf:cc:
c6:4f:71:f5:8f:38:cb:b7:2f:fc:e9:71:d3:7a:bb:21:9a:db:
73:45:64:0d:49:77:87:1f:51:ab:f5:15:b7:4c:c3:d0:11:58:
63:5f:23:8b:2f:ea:91:e1:eb:ad:83:e3:88:59:93:14:25:0f:
f4:58:fd:2b:26:bd:18:55:2a:11:4c:9b:b3:37:83:36:98:21:
ce:4e:e7:1a:c8:be:f6:d9:a0:aa:8e:18:8e:cc:f2:ff:d9:bf:
02:9b:d6:55:10:d1:12:1b:a2:12:b3:2e:81:63:b5:41:68:a5:
86:eb:54:2d:5e:34:20:42:8e:a2:ad:72:f9:72:62:5a:1e:d5:
96:74:92:24:f0:f5:a6:b6:27:e9:7c:99:7d:2b:c4:38:dc:08:
00:4c:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:14 2026 by rpki-client