This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a3a2f33362d3336203d3e20323636383230.roa
File: 323830333a383461303a3a2f33362d3336203d3e20323636383230.roa (raw, json)
Hash identifier: d1KrWedQNXPlg9Dv9U6FBxJmPiww1nKc5JMXPzexaRg=
Subject key identifier: B4:3E:46:76:8F:75:C1:CA:AA:9F:7D:70:44:C2:A2:A5:02:55:65:CE
Certificate issuer: /CN=876619C7FD0F295D57635312903E44E56FCF51A3
Certificate serial: 32C526540C016F82A6F399F634267B2A64E3A81E
Authority key identifier: 87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a3a2f33362d3336203d3e20323636383230.roa
Signing time: Tue 06 Jan 2026 19:47:56 +0000
ROA not before: Tue 06 Jan 2026 19:42:56 +0000
ROA not after: Tue 05 Jan 2027 19:47:56 +0000
asID: 266820
IP address blocks: 2803:84a0::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl
rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c5:26:54:0c:01:6f:82:a6:f3:99:f6:34:26:7b:2a:64:e3:a8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=876619C7FD0F295D57635312903E44E56FCF51A3
Validity
Not Before: Jan 6 19:42:56 2026 GMT
Not After : Jan 5 19:47:56 2027 GMT
Subject: CN=B43E46768F75C1CAAA9F7D7044C2A2A5025565CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:b9:b7:b3:48:8f:22:89:fb:e5:bb:ce:28:
fc:b9:62:27:43:44:2e:fe:f6:ce:e9:11:8b:ce:99:
02:37:bc:9a:ea:f3:23:65:80:ae:4b:53:31:d8:9d:
a5:a6:0b:5e:b4:be:f7:49:04:d0:67:43:98:f1:7c:
dc:b9:85:07:b1:bc:d0:04:eb:f1:57:d0:99:eb:b2:
80:d1:cb:2b:a9:7b:0c:e2:0e:a8:e7:4c:44:cd:92:
9c:9e:9b:97:b7:14:dd:45:9d:ef:0a:77:a8:c3:7e:
26:0f:1e:8b:6c:b0:58:84:d1:28:32:d6:31:02:3e:
bc:1d:e4:3c:29:f3:00:82:a6:c8:87:3b:fb:81:37:
bc:f5:84:a2:35:71:6b:18:cc:02:73:91:67:6a:8f:
7e:3a:00:6f:4d:0e:13:d7:44:65:be:72:e1:58:7a:
04:07:29:f8:7c:c5:81:74:ac:fd:1c:c3:3c:fe:2e:
1d:db:3c:a9:be:e5:2f:f3:6e:9e:68:ca:ea:2b:1e:
dd:39:a4:2c:96:e3:0c:b0:1e:2c:e9:12:a5:aa:70:
5c:67:52:bc:c4:ed:31:1a:66:5b:9f:63:11:43:dd:
05:38:12:74:1c:b8:e8:64:be:f4:74:db:33:72:ef:
57:c6:3b:5a:b5:3a:1e:b7:59:ad:d8:98:da:65:9d:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3E:46:76:8F:75:C1:CA:AA:9F:7D:70:44:C2:A2:A5:02:55:65:CE
X509v3 Authority Key Identifier:
keyid:87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/323830333a383461303a3a2f33362d3336203d3e20323636383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:84a0::/36
Signature Algorithm: sha256WithRSAEncryption
10:e2:99:4f:23:76:d0:8e:75:b0:98:e8:ff:39:7c:33:fc:1c:
5c:75:b0:67:29:1c:68:92:b5:ed:a2:25:05:21:75:1c:50:d1:
3d:9f:3a:a7:b4:46:d2:a1:0b:b4:a2:4e:c5:82:50:0f:1a:30:
77:0b:09:5b:97:bc:92:27:d4:92:19:75:66:41:d5:4e:12:17:
ed:d0:60:ad:29:99:6c:ab:18:cb:33:25:94:10:8e:1c:9e:2c:
fb:5a:89:33:60:fc:cf:81:5e:9b:12:20:ea:a0:6b:26:7d:34:
3d:c5:be:b8:f9:f5:16:03:6d:20:a7:c1:0c:fb:b6:b9:a2:ee:
9a:db:3b:64:9f:b2:7f:3c:3e:6d:4b:a1:55:05:26:a6:a5:52:
12:5d:32:20:99:f2:4e:99:f6:60:e2:56:4b:75:9d:a9:fb:97:
0f:45:51:e4:45:ac:5b:16:36:ba:65:35:74:ab:7d:4d:d0:78:
6b:ca:4f:32:13:6b:39:67:f8:5c:b9:16:bc:cd:b2:d3:fb:91:
2d:24:07:90:54:de:b1:93:86:b0:12:ee:51:64:9f:a0:dc:01:
7c:53:e5:31:b5:6e:2d:81:73:47:4d:c9:10:15:94:77:d6:b6:
00:93:c2:1b:4d:86:4c:9e:98:ed:8f:b4:79:7d:23:7a:1e:93:
8b:97:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:32 2026 by rpki-client