This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e203238313134.roa
File: 323830333a336339303a3a2f33322d3634203d3e203238313134.roa (raw, json)
Hash identifier: nlihYiQ0rkbKNQyfW5O/xK3aP1wR2lBPgCVSRr+h3DU=
Subject key identifier: 59:A6:64:83:6A:2A:E0:AE:49:40:91:01:9D:E3:E4:B2:0B:2D:EA:28
Certificate issuer: /CN=B60DE235AFFBEBC89B74335E1C207C7C284BA7A5
Certificate serial: 6335BF0E64AA8F1489EF80517FB9A79B0F8AF43B
Authority key identifier: B6:0D:E2:35:AF:FB:EB:C8:9B:74:33:5E:1C:20:7C:7C:28:4B:A7:A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e203238313134.roa
Signing time: Tue 06 Jan 2026 19:45:30 +0000
ROA not before: Tue 06 Jan 2026 19:40:30 +0000
ROA not after: Tue 05 Jan 2027 19:45:30 +0000
asID: 28114
IP address blocks: 2803:3c90::/32 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.crl
rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:35:bf:0e:64:aa:8f:14:89:ef:80:51:7f:b9:a7:9b:0f:8a:f4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B60DE235AFFBEBC89B74335E1C207C7C284BA7A5
Validity
Not Before: Jan 6 19:40:30 2026 GMT
Not After : Jan 5 19:45:30 2027 GMT
Subject: CN=59A664836A2AE0AE494091019DE3E4B20B2DEA28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:39:42:78:5b:05:0d:0f:61:6c:23:ae:3e:
66:e9:9d:a1:fd:2e:aa:e5:a5:85:80:67:49:e3:6a:
41:e3:37:f8:23:6b:db:a1:b2:bd:7c:07:4f:f9:b7:
2d:14:8d:3a:aa:6d:bc:c4:c0:09:22:5c:81:68:29:
3f:68:d5:72:88:da:03:ea:b9:b6:36:84:82:63:d3:
29:f8:e4:5f:19:5e:62:be:1f:cc:56:37:9d:18:a6:
ce:53:d6:ad:2f:81:55:b1:10:79:3d:cf:6f:15:9f:
8a:6c:41:65:51:3f:43:f9:e6:51:86:18:79:a4:13:
ce:1f:69:c6:7c:e2:92:24:01:54:2f:0a:ff:ab:f6:
32:77:0c:32:fa:6e:4b:d2:9c:de:e2:ff:5c:42:6e:
2d:ea:c1:33:d9:8e:b1:f5:d8:36:eb:95:e2:f8:e0:
55:27:47:7f:4d:4d:26:50:de:ef:2c:dd:4f:4f:74:
69:e9:c5:16:5b:51:5f:de:48:8d:9d:8b:92:78:13:
53:6a:d3:25:ab:32:df:97:3e:b6:f4:f7:d3:15:e1:
aa:9e:90:6f:10:b0:9b:4b:13:3b:e3:6d:82:cc:ca:
3c:8f:02:08:3d:77:d5:8f:20:c9:81:ee:2e:cc:5f:
62:86:60:07:78:9c:d8:b9:1e:78:bf:68:c4:cd:bb:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:64:83:6A:2A:E0:AE:49:40:91:01:9D:E3:E4:B2:0B:2D:EA:28
X509v3 Authority Key Identifier:
keyid:B6:0D:E2:35:AF:FB:EB:C8:9B:74:33:5E:1C:20:7C:7C:28:4B:A7:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e203238313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3c90::/32
Signature Algorithm: sha256WithRSAEncryption
37:2f:87:1d:ae:64:67:ed:44:a2:d7:0d:a4:0b:ed:84:bf:77:
1c:6b:e6:e7:8e:61:25:99:de:c2:60:98:ce:36:19:45:44:df:
a6:8a:1d:6f:2e:1c:48:8a:18:4f:03:4d:ea:38:5d:83:54:10:
5a:e6:00:3c:03:7d:43:c7:50:6c:eb:27:51:19:28:a9:f9:93:
d9:05:04:c8:00:d3:1b:09:7d:cb:d3:1e:2d:af:57:7d:62:fc:
f4:f7:59:32:ec:e5:a9:1e:03:a6:a8:fe:45:be:15:92:c0:f5:
2b:f6:97:49:3f:a4:57:9e:ba:7f:47:01:8c:d4:04:ff:c8:03:
35:4b:80:2a:3a:af:ab:a5:07:79:6c:d9:a7:de:b2:97:f9:d2:
0f:99:d5:9e:bc:d3:d2:0f:5f:37:6b:d6:f9:15:18:84:a2:b2:
77:d4:c4:e3:4c:89:37:a0:9e:be:a4:5b:67:45:ed:95:7d:a3:
a5:b5:bf:87:b9:86:da:59:e7:bd:32:9a:0f:ea:c5:3e:da:89:
be:0d:18:62:c9:44:5e:df:a0:da:fc:da:13:49:4e:53:76:2b:
1f:ef:95:54:b5:c0:db:1f:fc:36:cb:f1:3b:31:ea:57:bf:2e:
27:5e:01:cc:2a:63:b3:94:f1:f5:f2:85:67:62:62:b0:29:05:
9b:cf:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:57:02 2026 by rpki-client