This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/323830333a386631303a3a2f33322d3332203d3e20323732313137.roa
File: 323830333a386631303a3a2f33322d3332203d3e20323732313137.roa (raw, json)
Hash identifier: gy8qbWryl7Bn4wUhJl5zwaIx/MPXnpeqH3OOAw5CJ9M=
Subject key identifier: 3C:C2:84:56:23:1D:46:61:F9:C5:11:55:73:D7:86:79:90:03:EF:9C
Certificate issuer: /CN=963A20938985B7260F30AFD597E6AA10A2E76FE2
Certificate serial: 7C52FEB644A634EE13364E73C57B0E04114A95CB
Authority key identifier: 96:3A:20:93:89:85:B7:26:0F:30:AF:D5:97:E6:AA:10:A2:E7:6F:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/323830333a386631303a3a2f33322d3332203d3e20323732313137.roa
Signing time: Tue 06 Jan 2026 19:22:17 +0000
ROA not before: Tue 06 Jan 2026 19:17:17 +0000
ROA not after: Tue 05 Jan 2027 19:22:17 +0000
asID: 272117
IP address blocks: 2803:8f10::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.crl
rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 00:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:52:fe:b6:44:a6:34:ee:13:36:4e:73:c5:7b:0e:04:11:4a:95:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963A20938985B7260F30AFD597E6AA10A2E76FE2
Validity
Not Before: Jan 6 19:17:17 2026 GMT
Not After : Jan 5 19:22:17 2027 GMT
Subject: CN=3CC28456231D4661F9C5115573D786799003EF9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:ce:65:96:6d:96:8c:33:1c:0f:f4:ea:0d:
b1:a5:c9:1a:69:79:e3:89:ca:be:d7:a2:07:09:a8:
86:a2:b2:77:8a:da:ea:db:80:b5:5b:c1:5b:76:75:
da:a9:1b:10:1b:b0:1d:fa:94:17:91:40:c4:bd:4b:
e0:b4:c8:37:ce:c8:7a:73:fb:85:11:a4:63:14:e9:
a8:b9:78:95:3b:a3:15:32:18:f3:9d:00:1d:33:27:
5a:85:02:c8:05:ca:99:52:e5:af:b8:91:f3:d7:a1:
ed:2f:d5:62:a6:a5:38:ff:1c:b6:14:0d:e7:fb:f9:
96:a8:a2:d4:96:ed:3b:a7:e4:65:d0:92:91:f9:6b:
8b:16:fe:c9:93:ce:85:fe:1a:27:8c:7f:e5:1a:e1:
58:12:26:28:8b:52:1f:ec:12:7a:95:d5:b7:83:30:
72:8b:11:df:9a:15:0b:c9:06:99:70:f7:f9:ca:20:
f4:f8:06:b5:b4:7f:17:e2:ee:ee:b9:32:7c:21:a0:
40:12:5d:c0:3d:8c:0e:c3:33:4c:ea:d1:61:04:a9:
c0:eb:5d:a6:06:5a:cb:52:ff:8a:85:a1:fd:25:39:
4a:2a:49:99:b5:9c:59:a8:07:2a:51:07:f8:ea:6a:
ce:7c:b0:54:c7:b9:f7:89:cf:d4:02:1e:63:28:ab:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C2:84:56:23:1D:46:61:F9:C5:11:55:73:D7:86:79:90:03:EF:9C
X509v3 Authority Key Identifier:
keyid:96:3A:20:93:89:85:B7:26:0F:30:AF:D5:97:E6:AA:10:A2:E7:6F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/963A20938985B7260F30AFD597E6AA10A2E76FE2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C74C77CF0F445D9E87E879164801E95E0C7D0BFAE95B9379B73A9E8720FDBFDA/0/323830333a386631303a3a2f33322d3332203d3e20323732313137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8f10::/32
Signature Algorithm: sha256WithRSAEncryption
10:7a:89:a3:f5:51:fe:82:ec:3e:35:1d:f6:d7:c2:26:1c:f2:
38:21:f4:21:45:e4:02:b9:37:50:cb:d2:92:ec:63:8f:6e:f9:
87:99:6f:05:77:48:42:df:bb:3e:e2:ea:7a:85:ef:6a:e8:44:
99:d6:40:7e:fd:77:44:bc:0e:ef:2e:d0:4b:77:8b:12:ac:ef:
f7:12:a5:c1:62:0f:e7:33:dd:f7:84:2b:cc:24:5d:bd:21:7a:
17:91:4f:a3:a0:8e:af:da:1b:3d:63:8f:d7:1d:ee:bf:a1:6c:
50:60:8a:b9:f5:e2:c2:07:cb:f0:71:57:d0:fd:dd:2d:7f:6b:
4f:71:c0:a0:99:59:db:c9:0d:72:ff:bb:06:32:01:f4:7e:3e:
78:cc:db:c0:56:ad:19:ec:53:00:e5:30:2e:93:92:65:c7:fc:
78:2c:6e:ee:e3:3d:ed:e9:ad:f1:a8:37:d7:3c:4e:df:12:cc:
14:4b:42:7b:48:f2:1a:9c:27:a6:30:02:6a:9f:73:45:c5:33:
e1:1a:0a:98:33:76:12:92:e3:55:d0:2d:ce:3c:2c:99:0f:35:
ae:ed:59:71:d8:90:31:30:54:21:7c:95:52:0c:78:ce:f2:06:
1e:22:2e:b7:81:af:51:93:8d:1f:89:5b:c8:13:a0:d6:b1:b3:
75:80:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:41 2026 by rpki-client