This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3438203d3e203236363139.roa
File: 323830333a636230303a3a2f33322d3438203d3e203236363139.roa (raw, json)
Hash identifier: F3KrvivLEQm8HJoDpOTOtAeRMvUocYhufdN0gO7FY6E=
Subject key identifier: 9E:B3:61:00:70:56:5E:CE:D3:F8:27:28:41:25:7D:2A:08:B2:98:22
Certificate issuer: /CN=AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9
Certificate serial: 0343F170BB73301228F4409CE5F592E2E5697996
Authority key identifier: AD:66:E9:F5:C3:C1:1A:5F:71:AC:10:0B:C0:5A:99:58:EF:21:48:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3438203d3e203236363139.roa
Signing time: Mon 10 Nov 2025 20:52:13 +0000
ROA not before: Mon 10 Nov 2025 20:47:13 +0000
ROA not after: Mon 09 Nov 2026 20:52:13 +0000
asID: 26619
IP address blocks: 2803:cb00::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.crl
rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 08:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:43:f1:70:bb:73:30:12:28:f4:40:9c:e5:f5:92:e2:e5:69:79:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9
Validity
Not Before: Nov 10 20:47:13 2025 GMT
Not After : Nov 9 20:52:13 2026 GMT
Subject: CN=9EB3610070565ECED3F8272841257D2A08B29822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cc:db:15:34:d9:50:53:3a:6d:56:fb:41:cd:
c9:c7:d4:2d:f4:bf:a6:53:16:f7:79:1e:48:86:ba:
48:e3:2c:91:7f:6b:03:b6:2b:67:06:f1:fe:3d:83:
b8:5e:b4:6c:97:19:dc:d2:35:1a:b7:da:48:46:df:
7a:0c:1d:f2:7e:37:88:5c:7a:7b:ea:5c:a5:bd:66:
23:38:b4:56:8d:34:72:b0:33:cd:c8:d5:75:cf:8c:
35:30:36:b7:52:a1:00:7e:f8:34:86:02:ee:2f:a8:
bf:99:0b:ad:5b:fd:93:8f:8c:cc:df:09:51:29:30:
a3:b0:c8:62:ae:34:a1:34:0f:00:78:db:f4:e9:99:
39:f8:13:e2:87:ad:ae:02:fb:59:0f:97:0a:11:9b:
a8:c6:ca:0c:b3:a6:44:77:13:9e:79:8d:d0:dd:12:
73:60:ca:ca:f2:fb:33:59:bf:db:3a:19:fc:48:7e:
64:99:4a:7e:1d:ca:0a:e3:2f:58:77:e8:7f:54:e0:
e4:98:a8:e7:29:ce:3e:f7:b9:e0:ad:f7:ff:54:8c:
30:2e:87:ad:7f:2b:97:f3:99:e3:00:d6:56:95:c1:
8b:ac:e6:c6:34:2f:b4:85:3e:e8:fc:9b:d5:7b:c6:
60:59:8e:09:d8:aa:3a:5b:9c:7f:d9:8f:ee:a9:13:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B3:61:00:70:56:5E:CE:D3:F8:27:28:41:25:7D:2A:08:B2:98:22
X509v3 Authority Key Identifier:
keyid:AD:66:E9:F5:C3:C1:1A:5F:71:AC:10:0B:C0:5A:99:58:EF:21:48:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3438203d3e203236363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
91:90:79:b0:87:a7:e5:cf:a9:65:47:75:0b:b7:0c:cb:b6:ac:
88:56:13:a4:58:94:4c:64:ce:fa:ed:4a:d8:05:7c:61:53:d8:
44:01:76:4e:c4:78:16:00:96:2d:f1:43:eb:5e:fe:f2:5c:42:
2e:a4:a2:4c:36:b3:fd:f1:61:22:74:79:bc:69:ce:d2:e6:15:
c0:d4:20:68:e2:7c:b6:6d:c6:56:f4:6b:81:26:4e:0a:c5:67:
16:f5:21:7c:51:be:a1:a7:05:0d:1e:af:d0:68:21:76:19:a1:
b4:c1:6a:5e:3e:4e:0b:8d:8b:ea:cd:2d:ab:43:6c:dd:5c:80:
21:87:82:c5:98:65:00:2e:ee:83:92:b4:95:2f:cf:2a:28:5a:
46:72:e1:46:31:b7:d4:51:f4:28:a7:52:a9:ad:ee:6a:2a:56:
86:a6:d4:30:2e:7e:95:81:6d:68:78:37:2d:e2:36:9e:86:23:
24:54:f8:33:4f:99:a3:26:45:0a:9c:48:84:45:bb:d5:50:eb:
e1:68:60:71:25:bc:31:52:e7:9a:a6:9c:68:4b:1b:a5:0e:74:
d0:db:d7:b6:36:fa:62:d1:38:30:38:e5:c0:42:5e:4b:eb:79:
fa:a9:c7:fc:7d:63:9e:6e:a2:1f:dc:30:8c:27:d1:42:f1:4c:
a4:07:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:45:22 2025 by rpki-client