This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3332203d3e203237383834.roa
File: 323830303a6231303a3a2f33322d3332203d3e203237383834.roa (raw, json)
Hash identifier: RZqwkLYbRpauyXfbRa5haDXgj7hHXThcMhdcD/LoFR4=
Subject key identifier: DF:A6:38:05:45:C6:B3:BB:DF:C9:54:98:BA:89:02:E8:00:89:03:3E
Certificate issuer: /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial: 492B50687E3E1CFA8EF101C0DBA305FFD3C6C4EE
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3332203d3e203237383834.roa
Signing time: Thu 27 Nov 2025 19:53:44 +0000
ROA not before: Thu 27 Nov 2025 19:48:44 +0000
ROA not after: Thu 26 Nov 2026 19:53:44 +0000
asID: 27884
IP address blocks: 2800:b10::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 01:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2b:50:68:7e:3e:1c:fa:8e:f1:01:c0:db:a3:05:ff:d3:c6:c4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Validity
Not Before: Nov 27 19:48:44 2025 GMT
Not After : Nov 26 19:53:44 2026 GMT
Subject: CN=DFA6380545C6B3BBDFC95498BA8902E80089033E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:09:bc:83:7d:ec:eb:81:b6:1b:55:2a:fc:
6b:5b:30:ad:37:2d:3b:51:e5:5b:44:45:a4:26:4e:
44:d9:4f:e1:43:07:a0:da:9d:ff:6a:2e:52:e0:c6:
ce:7a:92:03:b6:33:84:4c:2f:f4:5a:c8:10:60:b5:
f9:c9:77:68:17:74:61:08:d2:c9:1d:d2:e2:ae:61:
72:a3:75:a7:db:a8:ad:f8:23:84:4c:94:16:54:f9:
48:fd:10:ea:aa:6c:3b:f5:43:97:91:43:f2:62:97:
48:53:bb:82:0d:3b:af:dd:ad:87:f3:dc:7b:37:bb:
d5:14:4e:3e:37:93:36:68:bb:39:00:c4:35:88:74:
13:78:09:07:1b:73:16:52:cf:95:82:a9:b8:e7:f9:
bf:aa:4c:85:6b:c0:a5:c4:18:c7:47:88:66:27:75:
86:cc:17:cb:06:10:8e:81:88:ae:60:0b:46:4b:e4:
63:f0:fe:48:06:ae:27:93:1e:0d:30:4e:21:19:c4:
37:55:ad:3f:91:05:ea:39:76:b2:9c:c0:c7:9a:7f:
53:4c:2c:3c:fb:ed:a1:15:de:fe:4e:5d:19:07:aa:
77:99:02:c8:ac:4a:75:e4:8c:a3:07:b0:a8:56:c6:
82:d7:4a:3e:bb:98:0b:05:dc:01:2b:76:f4:80:36:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:38:05:45:C6:B3:BB:DF:C9:54:98:BA:89:02:E8:00:89:03:3E
X509v3 Authority Key Identifier:
keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3332203d3e203237383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b10::/32
Signature Algorithm: sha256WithRSAEncryption
67:74:01:76:79:fc:af:17:ff:f1:26:fc:ce:89:2f:37:a9:e3:
5a:0b:ae:5d:28:40:1e:98:0e:01:da:82:ad:be:8a:2f:7d:ea:
eb:b9:0d:57:cd:72:2f:26:9f:fc:66:50:b4:04:3c:31:48:1a:
33:f3:25:61:38:29:20:89:9d:04:c3:39:4c:ef:0a:1f:18:56:
23:c4:b3:95:2f:75:88:77:11:de:45:43:25:58:9c:71:b0:53:
d6:59:e8:89:96:5b:de:29:e9:8d:78:dc:92:57:9d:48:51:fe:
45:4c:c5:aa:18:3d:5a:72:49:84:9e:1d:c2:db:27:20:cc:42:
c3:83:59:3f:a6:89:6a:a0:24:b5:96:bf:a1:f4:bf:d4:dc:cf:
f5:b5:94:68:05:49:eb:fe:93:c0:95:c8:79:5f:46:3a:23:8c:
52:09:a7:fb:49:cd:ca:26:fd:29:f0:97:fc:07:d7:1a:2b:f1:
4c:46:96:2b:9b:21:5e:9a:7a:37:9d:70:ce:cb:3e:ef:a4:6c:
8d:5f:70:93:cd:2f:41:10:9e:84:20:b6:c4:e7:e5:2f:3a:68:
5d:ea:de:23:ba:6b:68:31:3c:02:8a:7a:a0:e6:df:b5:25:8b:
f0:56:e6:26:4c:cc:04:77:e7:94:3e:eb:11:74:f0:bf:34:f9:
4f:e6:e1:5f
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUSStQaH4+HPqO8QHA26MF/9PGxO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI3NUExRjFCQzY5MjgyQ0QwRjRCRDMzRjEyMDE1NTZD
NjZDRkQ1ODAeFw0yNTExMjcxOTQ4NDRaFw0yNjExMjYxOTUzNDRaMDMxMTAvBgNV
BAMTKERGQTYzODA1NDVDNkIzQkJERkM5NTQ5OEJBODkwMkU4MDA4OTAzM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvwm8g33s64G2G1Uq/GtbMK03
LTtR5VtERaQmTkTZT+FDB6Danf9qLlLgxs56kgO2M4RML/RayBBgtfnJd2gXdGEI
0skd0uKuYXKjdafbqK34I4RMlBZU+Uj9EOqqbDv1Q5eRQ/Jil0hTu4INO6/drYfz
3Hs3u9UUTj43kzZouzkAxDWIdBN4CQcbcxZSz5WCqbjn+b+qTIVrwKXEGMdHiGYn
dYbMF8sGEI6BiK5gC0ZL5GPw/kgGrieTHg0wTiEZxDdVrT+RBeo5drKcwMeaf1NM
LDz77aEV3v5OXRkHqneZAsisSnXkjKMHsKhWxoLXSj67mAsF3AErdvSANkh5AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU36Y4BUXGs7vfyVSYuokC6ACJAz4wHwYDVR0j
BBgwFoAUQnWh8bxpKCzQ9L0z8SAVVsZs/VgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDI1RTNEMEQzOUQzQjc5MUJCQUI0NkY3QTFDQTEyMjE2
QjJCMzE1MzgxOEI3RjVBQzExOTg4M0ExNUMzNjA3LzAvNDI3NUExRjFCQzY5Mjgy
Q0QwRjRCRDMzRjEyMDE1NTZDNjZDRkQ1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Mjc1QTFGMUJDNjkyODJDRDBG
NEJEMzNGMTIwMTU1NkM2NkNGRDU4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQyNUUzRDBEMzlEM0I3OTFCQkFCNDZGN0ExQ0ExMjIxNkIyQjMxNTM4
MThCN0Y1QUMxMTk4ODNBMTVDMzYwNy8wLzMyMzgzMDMwM2E2MjMxMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzgzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAALEDANBgkq
hkiG9w0BAQsFAAOCAQEAZ3QBdnn8rxf/8Sb8zokvN6njWguuXShAHpgOAdqCrb6K
L33q67kNV81yLyaf/GZQtAQ8MUgaM/MlYTgpIImdBMM5TO8KHxhWI8SzlS91iHcR
3kVDJViccbBT1lnoiZZb3inpjXjckledSFH+RUzFqhg9WnJJhJ4dwtsnIMxCw4NZ
P6aJaqAktZa/ofS/1NzP9bWUaAVJ6/6TwJXIeV9GOiOMUgmn+0nNyib9KfCX/AfX
GivxTEaWK5shXpp6N51wzss+76RsjV9wk80vQRCehCC2xOflLzpoXereI7praDE8
Aop6oObftSWL8FbmJkzMBHfnlD7rEXTwvzT5T+bhXw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:48:30 2025 by rpki-client