This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323734313833.roa
File: 323830333a643232303a3a2f33322d3438203d3e20323734313833.roa (raw, json)
Hash identifier: n/8aQOtpEuHRIu/stHq+vEpzBiK1dAltL6j69ET+rD8=
Subject key identifier: 5D:9C:BC:84:61:27:FE:F1:43:8D:F7:94:D6:16:16:6C:E5:04:8D:63
Certificate issuer: /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Certificate serial: 5D6F98424ED1D74A0CBF36EC1F116BE9C525FE26
Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323734313833.roa
Signing time: Fri 23 Jan 2026 21:05:00 +0000
ROA not before: Fri 23 Jan 2026 21:00:00 +0000
ROA not after: Fri 22 Jan 2027 21:05:00 +0000
asID: 274183
IP address blocks: 2803:d220::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl
rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 06:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:6f:98:42:4e:d1:d7:4a:0c:bf:36:ec:1f:11:6b:e9:c5:25:fe:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Validity
Not Before: Jan 23 21:00:00 2026 GMT
Not After : Jan 22 21:05:00 2027 GMT
Subject: CN=5D9CBC846127FEF1438DF794D616166CE5048D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:bc:11:16:b2:e5:e3:6c:e5:07:1f:47:c5:
41:f5:58:3b:6c:a0:8b:c2:d2:4e:62:35:ff:26:05:
af:15:bb:b6:f5:15:6c:d7:b6:1e:04:a0:bd:82:db:
d2:43:60:a4:63:ea:ba:c1:da:d3:0a:45:b5:e5:2f:
e7:d1:96:7f:d4:e0:34:47:5d:3e:11:2a:83:6d:e2:
f5:17:ce:d0:a6:0c:04:2e:b4:54:30:2c:d2:c3:0d:
1c:c1:8e:48:c6:c9:e6:c6:8e:84:e7:dd:cf:0a:7d:
fd:bf:ec:b6:4f:c6:7c:8b:5d:7e:b5:7d:89:3d:2a:
68:54:68:ca:29:50:8d:0c:90:11:f3:92:15:88:a2:
e2:ed:54:a0:10:83:15:a8:d9:59:94:3c:76:34:b8:
3d:1d:e6:55:d5:4f:d4:54:6f:1b:96:44:b5:d7:fe:
eb:17:7d:65:e8:e8:6b:06:ce:76:7c:74:5c:bc:e0:
59:cb:ec:de:a9:ab:fb:9c:3d:81:e6:6c:be:09:69:
b8:7f:1a:05:1d:80:09:37:75:c9:7c:a9:cf:99:70:
04:4e:d3:de:96:47:63:ea:8d:68:5e:13:c5:72:06:
b5:ab:84:b3:1a:ef:2e:3b:8e:34:d4:8e:d9:b5:ca:
23:55:5d:63:a5:87:c1:a8:96:4f:07:bc:dc:a4:69:
5f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9C:BC:84:61:27:FE:F1:43:8D:F7:94:D6:16:16:6C:E5:04:8D:63
X509v3 Authority Key Identifier:
keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323734313833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d220::/32
Signature Algorithm: sha256WithRSAEncryption
98:b2:87:5b:ca:cc:1a:ac:18:24:07:c4:1c:52:1a:83:62:ae:
82:d9:43:54:c2:eb:70:9d:e4:77:72:d3:0b:ae:1b:96:f5:2c:
7c:00:e3:5d:c3:34:7f:35:e1:42:4a:9f:58:05:f1:d5:42:bf:
84:15:43:ec:6d:35:09:d7:75:e2:97:d6:15:7b:5b:f8:7e:b3:
fc:f0:91:e1:17:3d:28:ab:75:6e:db:9c:ab:1e:95:93:94:ea:
e0:78:18:77:39:91:9a:fa:c0:0e:5c:f5:9c:71:5c:6a:97:91:
3d:49:43:77:15:6e:8f:c2:08:d7:1a:b9:df:48:c5:36:29:31:
92:25:d2:ab:ed:85:02:09:05:4a:84:80:b6:df:75:5a:41:57:
14:97:18:9d:c2:86:5f:8a:2d:92:04:6e:27:61:1b:b4:5b:9b:
60:ee:4b:af:db:a1:ba:6b:8c:a0:40:bd:5f:77:51:d7:6e:57:
ee:d3:bb:f3:5c:12:b2:62:f8:f7:db:18:dd:6e:78:00:f1:aa:
1b:2e:31:ba:b3:96:e4:2c:15:ec:d1:84:8b:24:ff:74:a7:15:
a5:0b:71:f8:19:23:0d:d8:df:dd:b8:6a:81:50:3f:29:89:73:
df:b1:9a:b9:83:27:eb:92:ea:48:55:77:d4:da:4f:7e:31:e4:
16:6d:76:7c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUXW+YQk7R10oMvzbsHxFr6cUl/iYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBRjhBRDBFQkQzMDc3NzI5NzhBRTVFRkZFMENCRDcw
N0ZDQUU2NjAeFw0yNjAxMjMyMTAwMDBaFw0yNzAxMjIyMTA1MDBaMDMxMTAvBgNV
BAMTKDVEOUNCQzg0NjEyN0ZFRjE0MzhERjc5NEQ2MTYxNjZDRTUwNDhENjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmN7wRFrLl42zlBx9HxUH1WDts
oIvC0k5iNf8mBa8Vu7b1FWzXth4EoL2C29JDYKRj6rrB2tMKRbXlL+fRln/U4DRH
XT4RKoNt4vUXztCmDAQutFQwLNLDDRzBjkjGyebGjoTn3c8Kff2/7LZPxnyLXX61
fYk9KmhUaMopUI0MkBHzkhWIouLtVKAQgxWo2VmUPHY0uD0d5lXVT9RUbxuWRLXX
/usXfWXo6GsGznZ8dFy84FnL7N6pq/ucPYHmbL4Jabh/GgUdgAk3dcl8qc+ZcARO
096WR2PqjWheE8VyBrWrhLMa7y47jjTUjtm1yiNVXWOlh8Golk8HvNykaV/JAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUXZy8hGEn/vFDjfeU1hYWbOUEjWMwHwYDVR0j
BBgwFoAUsa+K0OvTB3cpeK5e/+DL1wf8rmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDg1M0E4NEZFQjU0MDJFQzU5QjU1MjAxNTU1MDhENDVB
RjE2NDJGQzQxNzIwQUQ3NzJEODE2OTQyNDg1RTA3LzAvQjFBRjhBRDBFQkQzMDc3
NzI5NzhBRTVFRkZFMENCRDcwN0ZDQUU2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMUFGOEFEMEVCRDMwNzc3Mjk3
OEFFNUVGRkUwQ0JENzA3RkNBRTY2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Q4NTNBODRGRUI1NDAyRUM1OUI1NTIwMTU1NTA4RDQ1QUYxNjQyRkM0
MTcyMEFENzcyRDgxNjk0MjQ4NUUwNy8wLzMyMzgzMDMzM2E2NDMyMzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNDMxMzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD0iAw
DQYJKoZIhvcNAQELBQADggEBAJiyh1vKzBqsGCQHxBxSGoNiroLZQ1TC63Cd5Hdy
0wuuG5b1LHwA413DNH814UJKn1gF8dVCv4QVQ+xtNQnXdeKX1hV7W/h+s/zwkeEX
PSirdW7bnKselZOU6uB4GHc5kZr6wA5c9ZxxXGqXkT1JQ3cVbo/CCNcaud9IxTYp
MZIl0qvthQIJBUqEgLbfdVpBVxSXGJ3Chl+KLZIEbidhG7Rbm2DuS6/bobprjKBA
vV93UdduV+7Tu/NcErJi+PfbGN1ueADxqhsuMbqzluQsFezRhIsk/3SnFaULcfgZ
Iw3Y3924aoFQPymJc9+xmrmDJ+uS6khVd9TaT34x5BZtdnw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:47:04 2026 by rpki-client