This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/323830333a333031303a3a2f33322d3332203d3e20323731383038.roa
File: 323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (raw, json)
Hash identifier: ycgTaa6XtkZ44he6da0OLX1fdjnjoEwGBmaH4AloShg=
Subject key identifier: B9:E6:CD:8D:4D:FA:6C:C0:47:21:ED:3D:89:6F:E8:C4:1E:9C:54:DB
Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A
Certificate serial: 12FAFD1D1A0F0EFCC21BA19BAEAEA51E81996B82
Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/323830333a333031303a3a2f33322d3332203d3e20323731383038.roa
Signing time: Tue 06 Jan 2026 19:08:08 +0000
ROA not before: Tue 06 Jan 2026 19:03:08 +0000
ROA not after: Tue 05 Jan 2027 19:08:08 +0000
asID: 271808
IP address blocks: 2803:3010::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl
rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fa:fd:1d:1a:0f:0e:fc:c2:1b:a1:9b:ae:ae:a5:1e:81:99:6b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A
Validity
Not Before: Jan 6 19:03:08 2026 GMT
Not After : Jan 5 19:08:08 2027 GMT
Subject: CN=B9E6CD8D4DFA6CC04721ED3D896FE8C41E9C54DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:fb:2d:7d:2a:49:8f:0e:55:eb:33:69:36:
b3:18:d4:12:77:a8:bb:84:87:ac:dc:6c:40:a9:26:
6d:a7:75:85:c1:4d:28:64:37:a2:dd:6c:d1:74:1d:
9e:ae:c6:43:a5:58:6c:b6:47:75:5c:54:c2:ad:f4:
cb:6f:54:0a:07:c3:6e:80:30:65:7b:be:5a:41:af:
c6:79:91:17:f5:b1:8f:9a:22:3d:a7:19:c1:d2:9d:
14:7c:58:49:9a:e7:9f:18:38:90:41:1a:ff:17:e5:
c9:16:2d:ec:a6:7c:2e:fe:e0:9b:95:8c:2b:7b:0f:
db:60:47:70:9d:fd:7b:77:76:ce:ab:e7:ac:61:6c:
8c:c7:e3:ab:e5:da:38:52:a5:d9:3f:eb:6d:4e:6e:
a1:99:6a:91:e3:3f:17:96:17:36:ff:da:f3:63:59:
fb:49:27:42:87:aa:9c:84:cc:85:24:2b:ee:c2:dd:
9c:c7:7c:a9:36:cd:3e:a3:22:7a:89:9b:00:dd:e6:
7b:16:00:04:d9:92:83:d3:56:64:d8:57:d5:bf:45:
28:26:c6:ea:cd:89:bd:37:cb:f2:aa:67:d2:a9:5c:
90:80:92:70:e2:77:c7:0a:2a:75:d8:4f:05:25:16:
b3:95:23:e7:8e:5d:31:6a:56:37:43:51:01:db:c6:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E6:CD:8D:4D:FA:6C:C0:47:21:ED:3D:89:6F:E8:C4:1E:9C:54:DB
X509v3 Authority Key Identifier:
keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/323830333a333031303a3a2f33322d3332203d3e20323731383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3010::/32
Signature Algorithm: sha256WithRSAEncryption
27:fd:08:78:be:a6:17:78:03:f0:4e:3e:90:94:95:02:ee:75:
20:c8:fb:65:b5:eb:52:fc:38:f0:8b:85:aa:ec:50:71:a0:63:
de:36:13:d5:ea:2f:b1:03:36:33:5e:d1:11:81:ff:ee:26:2e:
76:ec:d1:bd:0b:fc:a0:d0:49:9d:32:76:07:85:f8:11:5e:e9:
f5:cb:6a:4c:82:be:10:a5:fa:0b:18:1d:39:2b:5c:ed:d9:30:
d4:1e:20:1f:f3:79:99:30:3a:c2:1b:56:e8:ba:ab:8c:73:f2:
b5:3f:13:64:ca:41:fc:67:86:2b:df:bb:70:79:43:28:4e:2a:
48:0e:10:4b:b2:42:ce:d4:c5:85:cf:74:e2:05:47:56:6b:da:
ed:ed:bf:7c:71:d5:d7:b7:07:cd:fc:3e:c0:fc:bb:66:9e:08:
04:86:da:e1:68:51:e4:56:08:db:3f:b5:e9:eb:29:e4:9a:2d:
91:99:12:5a:8a:db:b6:66:2f:20:f1:21:99:4b:f3:13:6b:5d:
4a:2e:bd:71:e6:6e:5a:c5:7f:09:82:b8:9f:1d:3e:45:a5:90:
91:c6:1e:41:7d:ee:ba:57:aa:a5:6b:f4:7c:9c:5e:34:9a:21:
ea:2b:cc:c2:35:41:95:f0:a6:e4:6c:c2:7c:41:0f:9d:00:96:
24:b8:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:05 2026 by rpki-client