This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/323830333a383130303a3a2f33322d3438203d3e203231383236.roa
File: 323830333a383130303a3a2f33322d3438203d3e203231383236.roa (raw, json)
Hash identifier: SpiZBpq94lHw79HOBk7WShpbQjrvV1j76HXly3diWVw=
Subject key identifier: A9:0F:2D:97:FC:7E:C5:34:24:C2:00:78:2C:31:F1:F3:F3:A6:80:FF
Certificate issuer: /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial: 32AC2E139B1FA7AFCC857C5693D2C818E64D580D
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/323830333a383130303a3a2f33322d3438203d3e203231383236.roa
Signing time: Tue 06 Jan 2026 19:37:42 +0000
ROA not before: Tue 06 Jan 2026 19:32:42 +0000
ROA not after: Tue 05 Jan 2027 19:37:42 +0000
asID: 21826
IP address blocks: 2803:8100::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 05:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ac:2e:13:9b:1f:a7:af:cc:85:7c:56:93:d2:c8:18:e6:4d:58:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Validity
Not Before: Jan 6 19:32:42 2026 GMT
Not After : Jan 5 19:37:42 2027 GMT
Subject: CN=A90F2D97FC7EC53424C200782C31F1F3F3A680FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:d0:63:1b:cd:8c:b1:6d:8b:31:92:4b:43:
15:b0:6c:84:cc:fd:b8:8e:be:75:c2:96:00:86:07:
e5:e9:8d:91:19:99:4b:cc:5b:66:61:77:ec:85:8b:
db:76:a7:cb:e7:35:84:b9:bd:eb:98:c6:9c:44:4b:
68:28:7e:9d:29:5d:2b:1a:e0:10:20:22:52:50:3d:
44:d0:57:1e:ee:a7:82:2e:b6:22:5b:5f:04:ce:4d:
80:db:04:2c:6e:c1:65:8c:f1:01:78:ee:72:a8:9d:
8a:12:81:fb:37:3b:90:84:3e:7f:de:35:d2:9b:48:
9e:5e:82:12:e1:3b:0d:8b:3f:ff:82:d1:3d:8b:f0:
c6:4a:83:e0:d5:85:31:40:3c:e2:49:75:43:0e:b7:
01:26:4f:91:93:cc:95:32:38:48:89:41:6d:ce:d7:
5e:2c:92:c1:89:fe:f7:17:46:c1:7c:63:b7:37:42:
bc:87:16:cb:01:65:da:24:85:a3:60:89:f0:5a:6b:
a4:14:f6:24:a2:c7:8f:01:63:fa:71:33:21:d3:76:
71:b8:29:90:0b:72:b1:90:ab:e0:85:fa:b0:f0:b0:
c4:4e:b3:37:ce:15:c1:43:dd:ac:8e:d8:99:cc:47:
24:73:08:89:50:7d:26:e8:7e:af:74:d3:70:fb:c4:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0F:2D:97:FC:7E:C5:34:24:C2:00:78:2C:31:F1:F3:F3:A6:80:FF
X509v3 Authority Key Identifier:
keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/323830333a383130303a3a2f33322d3438203d3e203231383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8100::/32
Signature Algorithm: sha256WithRSAEncryption
73:b0:ed:c5:fd:50:f6:df:5c:96:87:ca:37:0b:31:1d:9c:9b:
71:0c:02:e7:b8:e4:a9:8d:c4:2f:21:f4:5e:1c:0c:26:f6:84:
dc:8d:f2:d9:15:b4:ec:c3:60:66:d9:79:18:7f:12:62:eb:4a:
0b:61:78:e4:2c:17:29:58:2a:7b:9a:f9:4e:2c:45:af:1e:a6:
33:c5:44:55:76:69:ba:7d:3f:d8:41:73:8a:c8:54:ae:f5:a1:
20:d0:61:c2:40:96:7a:99:e2:c8:44:74:44:f5:c6:f0:48:50:
32:5f:3c:2d:0c:b5:0d:de:34:27:ec:44:3a:1d:6e:ef:e2:1c:
4a:9c:f4:92:c2:53:26:fe:bb:d4:b6:ea:8b:2b:72:92:75:ea:
d8:13:45:3f:68:ed:13:31:98:e9:58:6a:80:6e:4a:e5:da:4d:
c7:5f:16:a4:b4:76:89:77:5d:1f:3b:0b:fb:86:6b:3a:8c:6c:
07:91:ae:1f:ef:2d:94:03:49:4e:5a:62:df:93:4e:6b:8a:35:
60:f5:ea:f9:f8:d1:b4:b2:97:97:a5:33:b2:af:78:23:15:90:
76:e4:f6:ea:f0:90:bf:17:8f:97:a2:c3:1f:81:d5:a4:e1:27:
fc:f9:6f:a3:f7:f4:22:19:2e:b1:82:d7:d7:e9:b7:e4:ba:fa:
60:f8:00:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:58 2026 by rpki-client