This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3a2f33322d3438203d3e20323732383839.roa
File: 323830333a383639303a3a2f33322d3438203d3e20323732383839.roa (raw, json)
Hash identifier: C81tdhYwqkDUYOPZK4nYwNjKr0HdbT9/b8CNGFHV4eQ=
Subject key identifier: 9B:D9:49:C3:60:11:BF:A5:67:96:0F:3F:2F:D4:1B:6D:06:D4:A6:81
Certificate issuer: /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Certificate serial: 2868DA9D52ED617F2ADA6EDA9B227A54C37C0904
Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3a2f33322d3438203d3e20323732383839.roa
Signing time: Sat 06 Dec 2025 00:35:00 +0000
ROA not before: Sat 06 Dec 2025 00:30:00 +0000
ROA not after: Sat 05 Dec 2026 00:35:00 +0000
asID: 272889
IP address blocks: 2803:8690::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 09:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:68:da:9d:52:ed:61:7f:2a:da:6e:da:9b:22:7a:54:c3:7c:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Validity
Not Before: Dec 6 00:30:00 2025 GMT
Not After : Dec 5 00:35:00 2026 GMT
Subject: CN=9BD949C36011BFA567960F3F2FD41B6D06D4A681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f5:2b:1a:ec:ca:9c:32:79:34:8c:0d:74:10:
09:46:c0:b6:3a:61:68:60:3e:f3:d2:ba:ea:5f:fe:
6d:54:51:23:06:1d:ef:33:14:48:87:4d:f1:80:53:
e8:bf:40:42:9e:af:40:42:ba:fa:77:60:0a:4c:9f:
15:53:90:53:e4:9a:b3:39:93:31:5e:10:36:e0:85:
a1:6f:ad:3d:ab:c4:8b:76:4c:4f:16:30:57:3e:a4:
d6:1c:bf:13:3f:cf:4f:31:d8:e0:10:5e:d1:6b:86:
4e:6b:a7:5e:2e:38:d6:9a:cf:84:95:1e:07:80:27:
07:ca:ea:a7:69:b0:61:a1:ca:e8:ca:d7:b6:55:74:
8b:7c:07:d0:74:e2:d4:6d:ba:fd:f6:6a:97:36:e9:
d1:6f:06:9d:96:62:c2:0a:bb:52:2d:50:3a:38:79:
09:b8:1b:b1:57:66:54:a4:6c:8f:3f:22:b2:13:87:
cf:a2:20:cd:bf:b1:5c:20:22:c9:2c:6a:bc:c0:cc:
46:6d:5f:91:5b:6c:3d:d0:60:6e:21:d5:f2:11:ad:
be:82:aa:95:76:6c:d3:37:e6:3b:b4:42:53:f9:71:
fe:4c:f3:5a:ad:d9:dc:d2:0b:db:68:17:3f:a9:7c:
c2:5d:57:f3:68:aa:b8:b0:66:bc:b7:f0:8c:11:7a:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D9:49:C3:60:11:BF:A5:67:96:0F:3F:2F:D4:1B:6D:06:D4:A6:81
X509v3 Authority Key Identifier:
keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3a2f33322d3438203d3e20323732383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8690::/32
Signature Algorithm: sha256WithRSAEncryption
02:4a:58:03:ac:b1:12:36:25:85:1e:4c:6d:c4:1c:c8:24:f2:
f3:34:6d:70:6b:ca:9d:ed:16:75:b8:e4:c7:8e:0b:f8:9a:4d:
2c:03:b8:5c:5e:68:08:a9:a2:99:25:1c:80:23:d1:f6:17:84:
a2:8d:f3:a9:db:51:3c:1d:3f:3b:2d:92:e5:d3:3b:14:1a:0f:
ea:d4:6d:0d:d1:c3:4f:07:5a:82:65:39:36:26:0d:54:77:d1:
07:7e:b9:95:98:6e:c1:ba:e0:7d:c5:a6:71:94:6e:1f:8c:81:
fd:9d:53:c8:fb:98:e7:3d:fb:34:80:3c:32:4c:c8:93:37:1f:
53:f6:ff:8c:b2:18:e4:4c:2b:e9:f2:21:00:f5:8c:93:16:11:
78:1f:f0:ec:e9:e7:c1:27:5f:e2:c3:47:d7:01:a8:27:ef:03:
3a:36:7e:62:1d:59:18:f7:9c:38:e0:6d:ef:c6:f5:66:59:cd:
f2:f4:30:4e:f3:2e:0a:14:67:1f:df:03:f5:ad:03:2e:3a:46:
d2:b5:39:d9:66:16:46:59:88:70:62:aa:67:fd:36:4f:1c:ef:
fb:8e:ec:ad:47:2d:2b:e1:39:70:01:65:d8:bc:11:a4:a0:8c:
88:38:bf:7a:77:87:d5:cb:b0:a0:8a:72:20:3b:d2:be:04:c3:
fc:97:3a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:25:15 2025 by rpki-client