This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a613030303a3a2f33352d3433203d3e203634313230.roa
File: 323830333a663038303a613030303a3a2f33352d3433203d3e203634313230.roa (raw, json)
Hash identifier: RvY7rg8qhG7oxxDnbieRqX2WT0a23B4gf5WhMCubQCs=
Subject key identifier: C6:32:3D:B1:93:A1:8E:D0:97:58:E6:89:CB:B2:A7:5E:90:3F:4F:E3
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 401F7F4D1FB6BE8AF45C66E9273A531EFA99C9D8
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a613030303a3a2f33352d3433203d3e203634313230.roa
Signing time: Tue 06 Jan 2026 19:35:36 +0000
ROA not before: Tue 06 Jan 2026 19:30:36 +0000
ROA not after: Tue 05 Jan 2027 19:35:36 +0000
asID: 64120
IP address blocks: 2803:f080:a000::/35 maxlen: 43
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 02:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1f:7f:4d:1f:b6:be:8a:f4:5c:66:e9:27:3a:53:1e:fa:99:c9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Jan 6 19:30:36 2026 GMT
Not After : Jan 5 19:35:36 2027 GMT
Subject: CN=C6323DB193A18ED09758E689CBB2A75E903F4FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:eb:0e:18:d5:7c:8b:97:93:d3:1a:80:38:
78:09:98:91:f4:21:76:61:0e:ba:d2:de:6e:39:b2:
f0:b6:2c:fb:61:bc:ef:45:17:ff:7d:29:02:96:1e:
71:85:31:13:29:34:ac:bb:0f:f1:aa:f6:a8:bf:87:
e2:11:c3:dd:9e:04:60:30:03:65:40:f1:50:98:ae:
92:e4:50:46:26:5f:d5:52:b4:22:00:11:e0:ff:03:
ca:8c:e9:ec:31:cd:17:e8:7e:36:74:47:48:fd:1a:
7f:7d:bb:d3:67:3a:77:d3:8f:74:1c:33:9f:ec:17:
14:0f:86:b4:65:86:89:67:9f:c7:96:34:b1:fd:b7:
fb:4c:ab:17:6d:46:de:fb:75:83:f3:90:a5:4e:98:
6a:4a:40:6e:6a:71:78:fe:5b:a7:56:25:f9:b4:f7:
c9:6a:36:8d:25:9c:e2:de:e0:08:61:ac:0a:7c:0f:
47:51:c2:6f:98:f3:2f:11:83:6d:3e:b0:94:22:f6:
cf:9e:3f:57:80:ee:c7:4a:dc:72:72:a3:9d:02:76:
6f:11:82:be:db:11:0b:bd:da:ef:12:52:e8:4c:46:
9f:0d:2a:02:a3:25:56:1e:ee:1b:72:69:ed:82:a9:
3d:f4:5b:a2:1c:fb:ad:3c:a5:e3:85:44:02:02:2d:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:32:3D:B1:93:A1:8E:D0:97:58:E6:89:CB:B2:A7:5E:90:3F:4F:E3
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a613030303a3a2f33352d3433203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080:a000::/35
Signature Algorithm: sha256WithRSAEncryption
a5:06:63:d0:4e:01:ec:fb:a7:40:96:71:dc:ed:e8:68:b0:8e:
c5:e8:c5:83:59:e6:ef:2f:9c:9f:c5:7e:37:ef:e1:76:15:2b:
84:1e:bd:a3:b4:a5:47:1c:67:e9:bd:a0:df:c3:30:f3:39:89:
15:67:60:3c:f3:dd:31:4d:e5:5a:61:22:00:14:9e:bb:96:8a:
07:7d:07:aa:d1:30:8e:40:92:bf:da:7a:d6:1f:bc:c8:37:75:
b8:36:29:d6:05:4d:1f:81:30:9d:b5:73:f6:d6:e6:0c:48:1d:
f5:20:07:45:7a:de:1e:61:ae:34:53:33:06:5d:88:cf:b3:22:
06:2e:87:03:a3:eb:b2:ae:da:2a:46:82:1f:ce:c6:d0:a7:7b:
ad:0f:44:0b:52:79:19:e3:24:64:cd:26:87:52:03:86:9a:32:
c6:a8:6e:40:f4:67:07:2a:31:d0:29:e9:0a:6f:b4:64:45:79:
e6:30:da:43:f3:8f:b2:ce:61:90:21:6a:68:06:a3:59:ff:78:
e7:45:b0:1a:39:75:fd:86:36:4e:8f:84:85:28:e8:1b:40:34:
8f:5a:32:4f:6c:1e:6f:64:28:fb:4f:df:7b:5a:fd:d0:32:de:
2b:9f:d9:ff:5f:b4:d9:c5:2b:99:7b:e1:48:cb:59:38:ff:aa:
85:2a:46:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:09 2026 by rpki-client