This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a633030303a3a2f33352d3433203d3e203634313230.roa
File: 323830333a663038303a633030303a3a2f33352d3433203d3e203634313230.roa (raw, json)
Hash identifier: DbWbH/kctyIlMBe/t720sLinMHbjuw5eKm2bACIli9o=
Subject key identifier: 97:AB:02:CB:BE:0C:3D:73:B5:77:02:67:46:F8:F7:35:35:E0:40:8D
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 5B9F1AE14AF686993689D0020036BDA1A0D1D464
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a633030303a3a2f33352d3433203d3e203634313230.roa
Signing time: Tue 06 Jan 2026 19:35:37 +0000
ROA not before: Tue 06 Jan 2026 19:30:37 +0000
ROA not after: Tue 05 Jan 2027 19:35:37 +0000
asID: 64120
IP address blocks: 2803:f080:c000::/35 maxlen: 43
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 02:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:9f:1a:e1:4a:f6:86:99:36:89:d0:02:00:36:bd:a1:a0:d1:d4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Jan 6 19:30:37 2026 GMT
Not After : Jan 5 19:35:37 2027 GMT
Subject: CN=97AB02CBBE0C3D73B577026746F8F73535E0408D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:cd:6c:19:8b:d2:e6:f3:16:43:fb:7a:2a:
5e:80:bc:b0:71:5b:fd:4b:bd:cd:cc:b6:35:7f:1f:
50:bb:09:3d:de:c8:a0:10:06:3d:7e:b4:34:bc:92:
91:df:49:16:3b:e1:46:37:52:39:7b:b1:8e:bc:5b:
32:71:b2:9a:b2:e9:5c:2f:34:ab:8e:ea:5b:21:5d:
07:5f:d9:f4:a8:2f:ab:15:02:b6:c8:d1:89:05:7f:
9c:1e:8f:95:66:62:36:1b:cc:62:35:e1:57:a4:38:
80:f4:39:39:b0:6d:dc:40:16:64:e9:ca:dc:b3:77:
02:7d:f5:e8:9c:0a:16:30:60:e7:80:7a:63:52:6f:
71:a3:4d:88:a3:f5:00:b8:53:3a:7b:39:2f:8f:0d:
f3:45:f1:29:92:a9:13:56:6a:c7:a7:b6:2f:79:77:
8a:37:51:13:95:99:09:e8:49:d9:b0:52:d3:03:4f:
e4:d9:e3:21:87:0b:cd:9f:ed:f5:e7:11:de:aa:24:
24:9d:47:bd:bb:92:ca:91:02:e5:33:cf:f9:87:ed:
24:41:43:cb:1c:ec:dc:ef:8e:c9:81:f6:a9:36:9e:
93:ee:55:7a:c8:4a:39:93:53:20:88:ba:7f:72:27:
6f:3b:34:62:61:af:ed:fe:b3:88:0e:ba:a8:63:07:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:02:CB:BE:0C:3D:73:B5:77:02:67:46:F8:F7:35:35:E0:40:8D
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a633030303a3a2f33352d3433203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080:c000::/35
Signature Algorithm: sha256WithRSAEncryption
5f:dc:9d:75:92:18:a2:fe:68:1d:ed:3a:b7:ed:e4:11:00:94:
66:2c:a2:80:e6:e8:d2:9c:e0:37:ca:71:62:92:13:9a:15:5c:
c6:dc:28:88:e9:ba:01:5f:b0:c4:de:75:d7:f8:9e:e5:90:6a:
aa:f8:ac:eb:15:89:bf:f3:44:67:d6:2d:00:40:87:e3:59:3c:
78:24:06:a4:9f:eb:08:70:57:0b:82:6c:35:7e:81:a3:e1:b7:
69:a5:14:fc:ed:8c:0f:78:6b:ce:e1:74:df:d0:4a:5f:9b:4b:
97:3e:c7:d0:1b:70:7f:19:47:3c:7a:b0:59:b7:3f:d2:28:82:
29:2f:6f:d1:ff:6f:61:cc:e1:26:f9:9d:ff:45:0f:79:27:62:
0e:01:92:22:1a:76:03:12:5a:67:e1:a5:42:5a:d3:0f:b5:26:
d5:09:d6:99:d2:e8:e5:ae:40:24:ca:9e:98:fd:1e:17:62:e5:
81:94:d4:4e:2c:b8:bc:a7:c6:d7:1d:9a:31:f7:ba:8b:49:c8:
34:9d:32:f6:7b:56:56:43:51:48:61:66:52:24:4c:38:08:1d:
8a:9b:2a:8c:d5:ce:43:b6:99:7b:95:57:aa:17:cf:29:c1:c3:
0a:5f:7f:9f:1f:4c:87:c0:bb:3e:70:f9:b9:6e:ee:46:86:8e:
10:48:c6:b4
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUW58a4Ur2hpk2idACADa9oaDR1GQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy
NEVBQzJBRDAeFw0yNjAxMDYxOTMwMzdaFw0yNzAxMDUxOTM1MzdaMDMxMTAvBgNV
BAMTKDk3QUIwMkNCQkUwQzNENzNCNTc3MDI2NzQ2RjhGNzM1MzVFMDQwOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5c1sGYvS5vMWQ/t6Kl6AvLBx
W/1Lvc3MtjV/H1C7CT3eyKAQBj1+tDS8kpHfSRY74UY3Ujl7sY68WzJxspqy6Vwv
NKuO6lshXQdf2fSoL6sVArbI0YkFf5wej5VmYjYbzGI14VekOID0OTmwbdxAFmTp
ytyzdwJ99eicChYwYOeAemNSb3GjTYij9QC4Uzp7OS+PDfNF8SmSqRNWasenti95
d4o3UROVmQnoSdmwUtMDT+TZ4yGHC82f7fXnEd6qJCSdR727ksqRAuUzz/mH7SRB
Q8sc7NzvjsmB9qk2npPuVXrISjmTUyCIun9yJ287NGJhr+3+s4gOuqhjB03bAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUl6sCy74MPXO1dwJnRvj3NTXgQI0wHwYDVR0j
BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF
NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB
QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB
NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG
MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhNjMz
MDMwMzAzYTNhMmYzMzM1MmQzNDMzMjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYFKAPwgMAwDQYJKoZIhvcNAQELBQADggEBAF/cnXWSGKL+aB3tOrft5BEAlGYs
ooDm6NKc4DfKcWKSE5oVXMbcKIjpugFfsMTeddf4nuWQaqr4rOsVib/zRGfWLQBA
h+NZPHgkBqSf6whwVwuCbDV+gaPht2mlFPztjA94a87hdN/QSl+bS5c+x9AbcH8Z
Rzx6sFm3P9Iogikvb9H/b2HM4Sb5nf9FD3knYg4BkiIadgMSWmfhpUJa0w+1JtUJ
1pnS6OWuQCTKnpj9Hhdi5YGU1E4suLynxtcdmjH3uotJyDSdMvZ7VlZDUUhhZlIk
TDgIHYqbKozVzkO2mXuVV6oXzynBwwpff58fTIfAuz5w+blu7kaGjhBIxrQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:11 2026 by rpki-client