This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/323830333a6431303a3a2f33322d3332203d3e20323732303335.roa
File: 323830333a6431303a3a2f33322d3332203d3e20323732303335.roa (raw, json)
Hash identifier: BMbqDAFrXQZOe8xxuxCrW0kSy/muSEfe5AWQTMWyBR8=
Subject key identifier: 84:E1:C0:A3:28:33:0E:B9:C3:D8:F9:B0:BF:4F:20:4F:EF:20:C3:79
Certificate issuer: /CN=F941F05838322F3861C4923BEDA92F310248FAF9
Certificate serial: 5DBE8A55E5FD7E08C317D545C934C3862661A5FE
Authority key identifier: F9:41:F0:58:38:32:2F:38:61:C4:92:3B:ED:A9:2F:31:02:48:FA:F9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/323830333a6431303a3a2f33322d3332203d3e20323732303335.roa
Signing time: Tue 06 Jan 2026 19:34:00 +0000
ROA not before: Tue 06 Jan 2026 19:29:00 +0000
ROA not after: Tue 05 Jan 2027 19:34:00 +0000
asID: 272035
IP address blocks: 2803:d10::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.crl
rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:be:8a:55:e5:fd:7e:08:c3:17:d5:45:c9:34:c3:86:26:61:a5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F941F05838322F3861C4923BEDA92F310248FAF9
Validity
Not Before: Jan 6 19:29:00 2026 GMT
Not After : Jan 5 19:34:00 2027 GMT
Subject: CN=84E1C0A328330EB9C3D8F9B0BF4F204FEF20C379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:86:56:4e:f2:32:78:99:60:1a:6e:6f:02:
83:59:8e:f5:b6:2e:99:e9:7e:3b:7d:21:41:fb:c6:
df:68:b7:87:88:65:3a:ee:c0:3b:65:11:1b:b1:e3:
e0:26:2a:9f:63:50:b2:de:ad:2f:80:31:ca:94:4b:
03:aa:e2:fb:58:f8:6c:43:eb:e5:e5:46:e8:86:f3:
6e:96:79:2a:ec:10:f1:52:dd:93:de:e3:0f:e9:30:
93:07:ce:3e:f9:85:72:7d:48:c3:3d:02:8e:1d:91:
67:8b:8e:ce:b8:6b:1e:1b:9e:a3:7e:61:d3:bb:15:
24:be:38:dc:d9:c3:e1:09:b7:dd:78:f8:36:8a:87:
43:24:a4:1b:f7:52:af:81:a8:4a:12:09:1d:b3:90:
02:2c:c9:cb:e8:70:c9:a9:34:a1:3f:9b:48:ff:f3:
01:a3:4d:97:68:f1:04:e6:02:ad:ee:ea:ab:18:fc:
cb:94:37:0d:7e:c8:66:41:f3:c0:2c:17:31:18:15:
1e:76:a2:bb:d1:05:62:b1:21:2b:93:c0:13:6c:b8:
f7:cb:5e:e4:19:9d:3b:51:f2:28:03:df:90:b3:76:
d0:1c:02:e0:6d:71:94:4e:0a:df:d5:cc:69:9e:ef:
ee:73:59:f6:a3:81:64:81:fa:c0:85:a0:cc:2a:b7:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E1:C0:A3:28:33:0E:B9:C3:D8:F9:B0:BF:4F:20:4F:EF:20:C3:79
X509v3 Authority Key Identifier:
keyid:F9:41:F0:58:38:32:2F:38:61:C4:92:3B:ED:A9:2F:31:02:48:FA:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/323830333a6431303a3a2f33322d3332203d3e20323732303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d10::/32
Signature Algorithm: sha256WithRSAEncryption
0a:b2:22:33:7c:0c:ba:7b:bd:7c:40:e0:67:8c:a4:36:04:8d:
e6:d2:3c:ed:ef:7f:7d:b2:3b:d5:8c:3c:c4:43:fc:f4:1a:e0:
20:c0:21:d0:0a:9a:ef:ac:7c:b4:61:96:fe:b7:93:70:32:d8:
bb:ef:f5:71:ae:30:7a:01:23:89:19:bf:cf:74:39:46:9a:07:
b2:ea:33:5f:4d:65:36:34:26:81:7c:f3:97:fc:64:b6:cb:cb:
87:ce:76:11:24:3f:bc:a4:31:e4:53:d0:91:cf:1c:63:46:11:
2d:d4:72:35:ad:ce:1c:1d:03:06:73:23:4a:22:e2:cf:ab:c6:
e5:37:77:4f:8f:23:db:0e:6c:ba:c2:37:40:fe:5e:02:ce:80:
0d:01:92:95:be:d6:10:59:34:d1:27:7a:c5:b3:a3:fc:80:00:
dc:0a:d0:3b:f7:66:1d:3b:c8:53:25:cd:8b:90:cd:6b:9d:89:
12:84:67:98:02:c3:13:d8:88:af:f0:7f:89:4b:94:76:95:94:
a5:b4:5c:56:9e:44:03:3e:ac:28:70:2b:d0:f0:e2:bc:d6:1b:
30:7c:d3:46:6d:32:1f:d3:b5:c1:14:90:7c:bc:5c:a6:85:8f:
24:95:73:9d:91:b4:0e:e3:30:4d:63:48:d7:dc:45:97:a5:f2:
64:d6:7c:26
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUXb6KVeX9fgjDF9VFyTTDhiZhpf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk0MUYwNTgzODMyMkYzODYxQzQ5MjNCRURBOTJGMzEw
MjQ4RkFGOTAeFw0yNjAxMDYxOTI5MDBaFw0yNzAxMDUxOTM0MDBaMDMxMTAvBgNV
BAMTKDg0RTFDMEEzMjgzMzBFQjlDM0Q4RjlCMEJGNEYyMDRGRUYyMEMzNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR44ZWTvIyeJlgGm5vAoNZjvW2
Lpnpfjt9IUH7xt9ot4eIZTruwDtlERux4+AmKp9jULLerS+AMcqUSwOq4vtY+GxD
6+XlRuiG826WeSrsEPFS3ZPe4w/pMJMHzj75hXJ9SMM9Ao4dkWeLjs64ax4bnqN+
YdO7FSS+ONzZw+EJt914+DaKh0MkpBv3Uq+BqEoSCR2zkAIsycvocMmpNKE/m0j/
8wGjTZdo8QTmAq3u6qsY/MuUNw1+yGZB88AsFzEYFR52orvRBWKxISuTwBNsuPfL
XuQZnTtR8igD35CzdtAcAuBtcZROCt/VzGme7+5zWfajgWSB+sCFoMwqt1QbAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUhOHAoygzDrnD2Pmwv08gT+8gw3kwHwYDVR0j
BBgwFoAU+UHwWDgyLzhhxJI77akvMQJI+vkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQTlCNEVBMTRDMkY3MTE3QzcyRjFGMENFRkZBNkI1RDAz
QUIzNUUyMTMzMDVENEQwMDI2NEZGOTcyMzg1NEY2LzAvRjk0MUYwNTgzODMyMkYz
ODYxQzQ5MjNCRURBOTJGMzEwMjQ4RkFGOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GOTQxRjA1ODM4MzIyRjM4NjFD
NDkyM0JFREE5MkYzMTAyNDhGQUY5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUE5QjRFQTE0QzJGNzExN0M3MkYxRjBDRUZGQTZCNUQwM0FCMzVFMjEz
MzA1RDREMDAyNjRGRjk3MjM4NTRGNi8wLzMyMzgzMDMzM2E2NDMxMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzIzMDMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAw0QMA0G
CSqGSIb3DQEBCwUAA4IBAQAKsiIzfAy6e718QOBnjKQ2BI3m0jzt7399sjvVjDzE
Q/z0GuAgwCHQCprvrHy0YZb+t5NwMti77/VxrjB6ASOJGb/PdDlGmgey6jNfTWU2
NCaBfPOX/GS2y8uHznYRJD+8pDHkU9CRzxxjRhEt1HI1rc4cHQMGcyNKIuLPq8bl
N3dPjyPbDmy6wjdA/l4CzoANAZKVvtYQWTTRJ3rFs6P8gADcCtA792YdO8hTJc2L
kM1rnYkShGeYAsMT2Iiv8H+JS5R2lZSltFxWnkQDPqwocCvQ8OK81hswfNNGbTIf
07XBFJB8vFymhY8klXOdkbQO4zBNY0jX3EWXpfJk1nwm
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:10 2026 by rpki-client