This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3438203d3e20323639373439.roa
File: 323830333a663936303a3a2f33322d3438203d3e20323639373439.roa (raw, json)
Hash identifier: 3aVMUPZf/tfx9SVfsmIzksdYqIHOhnhoLSpBteopkHY=
Subject key identifier: 04:07:36:D7:CC:8E:29:E8:0B:E2:34:B3:3F:59:94:40:0A:98:01:61
Certificate issuer: /CN=A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC
Certificate serial: 0904D4C8CC9FE096A05D076DEF90CABB8E43AD59
Authority key identifier: A1:95:64:CD:95:B7:67:86:E9:E8:9D:B7:EE:DD:22:CF:6E:2D:90:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3438203d3e20323639373439.roa
Signing time: Tue 06 Jan 2026 18:59:22 +0000
ROA not before: Tue 06 Jan 2026 18:54:22 +0000
ROA not after: Tue 05 Jan 2027 18:59:22 +0000
asID: 269749
IP address blocks: 2803:f960::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.crl
rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:04:d4:c8:cc:9f:e0:96:a0:5d:07:6d:ef:90:ca:bb:8e:43:ad:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC
Validity
Not Before: Jan 6 18:54:22 2026 GMT
Not After : Jan 5 18:59:22 2027 GMT
Subject: CN=040736D7CC8E29E80BE234B33F5994400A980161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:0a:24:76:7b:42:f9:ee:46:ce:6b:fe:7f:
e1:ac:05:a3:6b:c9:9d:a8:eb:b0:f2:9a:9c:5f:dd:
3c:ca:b5:11:4f:3b:56:31:ea:4d:3c:29:29:bd:56:
e8:8c:90:72:01:d7:9d:29:18:ce:b1:0d:4c:76:6d:
cf:3b:b2:d1:f7:40:9a:57:db:36:ec:72:6e:49:15:
c5:12:45:5e:3e:e8:93:72:40:30:89:e1:8d:86:02:
6a:7a:dc:61:d7:fc:8a:4b:4b:5f:68:b6:b8:ca:dd:
b0:99:5b:c2:1f:73:13:86:8f:6e:1e:47:a4:26:c9:
c7:d6:d9:87:d7:d6:6a:47:33:ae:99:64:f3:8e:22:
2e:1c:5e:fa:9e:28:22:c5:7a:b5:e5:0d:09:bb:3e:
e7:4f:8c:68:6a:a5:19:92:72:de:6b:1b:57:2d:7c:
69:70:21:09:fe:66:0e:85:31:2d:90:81:7f:1f:a7:
68:fd:5f:44:9f:c3:de:d2:45:a4:10:d3:fa:22:d5:
9d:74:d4:5c:9d:63:7a:eb:ae:b0:13:1e:91:28:97:
16:e3:28:18:34:5b:16:7d:86:eb:b7:e8:1f:d8:89:
69:5f:13:96:b3:70:d4:34:7d:72:d8:f0:fb:7e:06:
35:97:a8:d1:99:75:61:d3:8f:2a:5a:5b:49:40:44:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:07:36:D7:CC:8E:29:E8:0B:E2:34:B3:3F:59:94:40:0A:98:01:61
X509v3 Authority Key Identifier:
keyid:A1:95:64:CD:95:B7:67:86:E9:E8:9D:B7:EE:DD:22:CF:6E:2D:90:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3438203d3e20323639373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f960::/32
Signature Algorithm: sha256WithRSAEncryption
4b:f3:e5:0f:5d:f0:83:cb:7e:c4:bc:a6:6f:1c:56:cd:4e:2c:
93:4f:cf:ba:31:0e:75:66:1b:e6:f1:fe:be:b0:0a:ab:11:e9:
7e:b0:dc:a6:b5:1e:c0:9f:db:ab:ee:30:e2:7e:fe:5f:c5:63:
a5:c2:22:71:0b:6e:db:5b:61:8b:16:96:58:e7:c1:92:fe:01:
50:82:57:52:b7:49:08:4f:a8:d4:88:be:79:f4:37:5b:7d:be:
0f:b1:fa:89:dc:81:c5:f2:bf:71:8e:1a:e3:a7:88:97:ac:af:
df:87:70:67:b5:d5:95:5c:e7:bf:f0:4e:a5:f2:0a:00:ba:95:
52:f7:06:96:b0:05:81:1b:8c:c2:da:73:23:b0:64:22:36:a1:
21:13:17:8d:51:d9:1d:9c:c7:ac:64:85:b1:71:7b:20:d1:e3:
76:08:be:5b:71:9f:04:2f:eb:c4:5a:cf:98:2f:a6:af:79:44:
ae:83:b3:34:29:17:4a:8d:43:06:6c:24:dd:e9:b9:76:ce:87:
d2:b3:3f:f7:3d:3d:3c:48:ee:c5:be:7c:e4:98:3c:66:cb:98:
3a:0f:5e:7f:98:94:8d:00:e6:5f:42:06:c6:b2:38:a0:7f:71:
04:61:16:db:a5:df:74:63:75:24:a0:7a:21:ee:94:47:22:d4:
4c:05:f1:9f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUCQTUyMyf4JagXQdt75DKu45DrVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NTY0Q0Q5NUI3Njc4NkU5RTg5REI3RUVERDIyQ0Y2
RTJEOTBEQzAeFw0yNjAxMDYxODU0MjJaFw0yNzAxMDUxODU5MjJaMDMxMTAvBgNV
BAMTKDA0MDczNkQ3Q0M4RTI5RTgwQkUyMzRCMzNGNTk5NDQwMEE5ODAxNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlwokdntC+e5Gzmv+f+GsBaNr
yZ2o67Dympxf3TzKtRFPO1Yx6k08KSm9VuiMkHIB150pGM6xDUx2bc87stH3QJpX
2zbscm5JFcUSRV4+6JNyQDCJ4Y2GAmp63GHX/IpLS19otrjK3bCZW8IfcxOGj24e
R6QmycfW2YfX1mpHM66ZZPOOIi4cXvqeKCLFerXlDQm7PudPjGhqpRmSct5rG1ct
fGlwIQn+Zg6FMS2QgX8fp2j9X0Sfw97SRaQQ0/oi1Z101FydY3rrrrATHpEolxbj
KBg0WxZ9huu36B/YiWlfE5azcNQ0fXLY8Pt+BjWXqNGZdWHTjypaW0lARFFfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUBAc218yOKegL4jSzP1mUQAqYAWEwHwYDVR0j
BBgwFoAUoZVkzZW3Z4bp6J237t0iz24tkNwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DM0IzRDFGQTlFNzJERDE4REE4OEQ2QzNCRkNCQ0NFQUQ2
RTE4QTE2Njg1MDZDRUYwMjUwNTBEM0NGNTBENTI3LzAvQTE5NTY0Q0Q5NUI3Njc4
NkU5RTg5REI3RUVERDIyQ0Y2RTJEOTBEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk1NjRDRDk1Qjc2Nzg2RTlF
ODlEQjdFRUREMjJDRjZFMkQ5MERDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzNCM0QxRkE5RTcyREQxOERBODhENkMzQkZDQkNDRUFENkUxOEExNjY4
NTA2Q0VGMDI1MDUwRDNDRjUwRDUyNy8wLzMyMzgzMDMzM2E2NjM5MzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTM3MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD+WAw
DQYJKoZIhvcNAQELBQADggEBAEvz5Q9d8IPLfsS8pm8cVs1OLJNPz7oxDnVmG+bx
/r6wCqsR6X6w3Ka1HsCf26vuMOJ+/l/FY6XCInELbttbYYsWlljnwZL+AVCCV1K3
SQhPqNSIvnn0N1t9vg+x+oncgcXyv3GOGuOniJesr9+HcGe11ZVc57/wTqXyCgC6
lVL3BpawBYEbjMLacyOwZCI2oSETF41R2R2cx6xkhbFxeyDR43YIvltxnwQv68Ra
z5gvpq95RK6DszQpF0qNQwZsJN3puXbOh9KzP/c9PTxI7sW+fOSYPGbLmDoPXn+Y
lI0A5l9CBsayOKB/cQRhFtul33RjdSSgeiHulEci1EwF8Z8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:25 2026 by rpki-client