This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/323830333a616636303a3a2f33322d3332203d3e20323634363337.roa
File: 323830333a616636303a3a2f33322d3332203d3e20323634363337.roa (raw, json)
Hash identifier: tIK3AekPEfmTgP7Z79XGvnuPm68gvtne7YLDLRMDeoo=
Subject key identifier: 9D:50:F1:B8:91:EC:28:2F:E0:96:BD:BF:36:41:5B:35:93:A0:A3:B1
Certificate issuer: /CN=09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8
Certificate serial: 33ACFB3DA776CEEED32010E9D37A7E99D257E2F7
Authority key identifier: 09:58:9E:90:40:CA:01:AF:46:E7:A3:9A:74:C8:FB:FD:9E:BA:79:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/323830333a616636303a3a2f33322d3332203d3e20323634363337.roa
Signing time: Tue 06 Jan 2026 19:10:21 +0000
ROA not before: Tue 06 Jan 2026 19:05:21 +0000
ROA not after: Tue 05 Jan 2027 19:10:21 +0000
asID: 264637
IP address blocks: 2803:af60::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.crl
rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 16:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ac:fb:3d:a7:76:ce:ee:d3:20:10:e9:d3:7a:7e:99:d2:57:e2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8
Validity
Not Before: Jan 6 19:05:21 2026 GMT
Not After : Jan 5 19:10:21 2027 GMT
Subject: CN=9D50F1B891EC282FE096BDBF36415B3593A0A3B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:d9:b7:fe:14:ac:9b:ac:4b:d2:0d:50:ae:
35:79:71:18:f4:62:fa:d1:a1:4f:e8:5a:e6:c8:2a:
bf:14:17:8e:4e:a9:c8:b4:97:4a:d5:dd:ae:84:bd:
b6:4b:20:35:02:1d:f5:20:9e:86:37:91:c4:be:7f:
89:92:c8:b0:b4:3c:4e:2a:6c:77:a6:30:d7:1d:13:
71:ff:ce:da:0c:5d:0a:52:3d:de:23:27:50:bc:e7:
3d:ef:85:20:5a:42:a4:5e:fb:9d:57:46:25:33:42:
ef:cb:48:c5:8d:fa:8d:f5:20:a2:ba:02:0e:91:67:
11:27:6f:95:35:6c:6a:3a:1b:9c:98:f4:14:a0:c3:
c5:9a:1b:f8:57:cb:f6:94:90:97:8e:cf:6e:03:08:
22:0f:53:e3:e0:ed:2e:2b:3f:30:46:19:00:fd:53:
70:18:c3:af:2b:34:1a:6f:69:d0:3f:fa:08:52:73:
16:96:d5:2e:b1:b9:03:86:68:5e:19:ac:79:12:6e:
59:55:fa:d3:48:1b:16:02:33:b9:8d:62:58:e2:15:
3f:4b:5f:17:4d:5d:e4:8d:b6:64:73:f3:1a:15:44:
97:32:8b:77:a3:c6:3e:d5:4c:65:d3:7e:ba:4f:a6:
6b:72:f2:73:e7:38:ed:c7:55:40:84:80:91:7e:0d:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:50:F1:B8:91:EC:28:2F:E0:96:BD:BF:36:41:5B:35:93:A0:A3:B1
X509v3 Authority Key Identifier:
keyid:09:58:9E:90:40:CA:01:AF:46:E7:A3:9A:74:C8:FB:FD:9E:BA:79:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/323830333a616636303a3a2f33322d3332203d3e20323634363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:af60::/32
Signature Algorithm: sha256WithRSAEncryption
98:79:6f:f3:6d:7a:1e:dd:d7:e3:0e:bf:71:8b:82:de:c3:22:
e2:72:06:79:3d:2b:46:71:df:3a:74:61:68:ed:82:d4:96:68:
b4:32:b0:30:e2:f6:65:fb:fb:9e:3b:d3:4d:07:b4:39:d2:81:
2f:f3:d0:87:e7:7e:57:98:be:a7:b5:dc:a0:91:9c:e2:eb:dc:
bd:dc:86:9e:ab:c1:53:b8:c1:4d:40:27:3f:43:c7:be:c6:9c:
87:b6:44:31:77:31:b4:5a:85:1b:74:88:63:09:a8:89:66:a4:
a5:9f:15:48:91:7a:e2:53:31:32:b0:23:c5:64:5b:71:db:04:
f2:6c:f3:38:d3:c2:f5:d7:33:62:12:3a:72:dd:4f:f7:5a:68:
07:78:cb:a6:a0:60:41:f2:2f:3b:b6:24:1f:28:fb:56:c8:27:
51:eb:43:72:a1:ed:59:ce:00:f7:da:29:ff:69:be:ad:ce:cf:
3b:99:f2:37:ed:7a:9f:2c:45:60:ca:b4:1b:3d:07:44:d9:6f:
6b:61:c7:cc:85:a3:fb:ee:66:eb:b3:44:3f:d9:93:c3:4a:0d:
ba:20:84:9d:ce:c4:d7:f3:96:8f:9e:2e:fb:cb:85:ea:b1:cd:
ae:93:83:39:3c:54:37:5c:ed:57:95:64:09:5b:cc:42:ce:37:
a4:22:20:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:38 2026 by rpki-client