This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/323830333a623530303a3a2f33322d3634203d3e20323634373738.roa
File: 323830333a623530303a3a2f33322d3634203d3e20323634373738.roa (raw, json)
Hash identifier: ksqp0tP/ioog8L5uVLafpvnIQXdx+1egnTzHm/cXV7M=
Subject key identifier: 79:5F:AD:0E:76:26:96:78:2B:8C:71:22:DA:A5:8F:D1:10:56:13:A1
Certificate issuer: /CN=3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125
Certificate serial: 514E58ECAB647DCC75F74BDC8C4EFFF288C77923
Authority key identifier: 3E:CA:B9:BE:B1:EA:9E:FB:E8:00:07:81:F7:2B:95:89:FF:DA:21:25
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/323830333a623530303a3a2f33322d3634203d3e20323634373738.roa
Signing time: Tue 06 Jan 2026 19:37:46 +0000
ROA not before: Tue 06 Jan 2026 19:32:46 +0000
ROA not after: Tue 05 Jan 2027 19:37:46 +0000
asID: 264778
IP address blocks: 2803:b500::/32 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl
rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4e:58:ec:ab:64:7d:cc:75:f7:4b:dc:8c:4e:ff:f2:88:c7:79:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125
Validity
Not Before: Jan 6 19:32:46 2026 GMT
Not After : Jan 5 19:37:46 2027 GMT
Subject: CN=795FAD0E762696782B8C7122DAA58FD1105613A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:43:81:23:08:ba:8f:3e:2f:9e:49:81:23:
b0:72:83:e7:3f:15:da:2a:3d:52:85:48:4a:07:0e:
e3:10:d8:f0:20:4f:16:35:63:7e:02:64:1e:74:42:
b7:08:66:a6:0b:2a:20:cc:f6:3b:66:34:9d:24:10:
26:7c:32:fa:23:6f:ae:68:33:cd:42:72:5d:a3:fb:
f6:a0:61:ab:99:bb:c8:ac:18:fe:5a:ee:18:ee:35:
11:0d:8d:a5:6c:2f:ad:2c:cc:06:b4:87:bb:93:a9:
ff:04:04:aa:1e:ab:c7:eb:e8:e4:5a:7e:ff:22:2c:
59:77:29:b0:14:61:70:23:de:85:4a:75:e6:38:fd:
37:52:6c:b8:bb:54:55:e3:97:a9:47:d2:c8:17:99:
a5:83:da:27:92:b4:94:c1:d5:db:09:bc:f1:5a:7a:
b9:16:a4:36:29:d7:9c:d0:b2:8c:7e:5c:bc:06:08:
d1:0e:7a:a3:2f:a1:6f:22:7b:41:3e:89:ff:7f:09:
e0:ff:c9:ed:99:3c:d0:4b:d3:d2:95:42:f0:0e:1e:
0b:92:a4:02:f6:51:0c:27:17:c7:c0:72:a9:1e:70:
1b:46:28:2d:2d:35:02:3f:be:b6:86:6b:f0:d4:0a:
b0:e0:47:72:5c:25:37:22:6e:57:d9:e9:c4:dc:19:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5F:AD:0E:76:26:96:78:2B:8C:71:22:DA:A5:8F:D1:10:56:13:A1
X509v3 Authority Key Identifier:
keyid:3E:CA:B9:BE:B1:EA:9E:FB:E8:00:07:81:F7:2B:95:89:FF:DA:21:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ECAB9BEB1EA9EFBE8000781F72B9589FFDA2125.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F84357DE20C1A1B3E6B6BBEF54D2AC5F55887456A9641D3EFC51AB7BB81A9634/0/323830333a623530303a3a2f33322d3634203d3e20323634373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b500::/32
Signature Algorithm: sha256WithRSAEncryption
01:86:2b:59:6b:9d:62:aa:b4:4b:73:01:b0:56:c9:71:1a:62:
7f:7e:aa:b2:7d:9f:63:96:af:22:73:70:42:2c:a6:e8:cc:f4:
73:32:20:69:db:3f:3c:e1:fe:46:3c:d6:97:2c:82:68:c0:33:
3d:e9:36:08:86:1d:48:43:1c:12:a8:20:49:c4:11:22:48:03:
93:b6:49:11:35:23:4b:1c:78:d4:93:87:2f:f4:de:84:8a:82:
19:3e:0f:9b:96:79:83:1b:e9:3c:67:19:8d:97:f2:e2:f7:77:
a9:4a:b2:b2:1f:23:4e:3b:41:2b:fe:9d:fb:5f:78:20:03:98:
34:d5:d1:36:83:f3:19:19:de:1f:17:27:c3:e0:07:bd:c8:cb:
63:e0:d9:47:d2:3c:fd:1c:07:6b:5c:ae:ae:91:2c:80:52:75:
0c:17:a1:4e:29:99:25:1f:fc:6d:04:bd:18:2c:2c:35:a4:3e:
2e:bb:23:ad:23:47:37:23:f5:70:33:4b:85:17:38:16:ac:4b:
b3:eb:3d:08:1b:1b:88:ed:ff:20:ba:47:b8:71:f1:e6:59:7e:
4f:ee:86:99:9c:e2:d6:5d:0d:5d:3e:95:dd:bc:f0:d7:d2:f3:
d9:9d:a6:2d:a7:c2:f2:f8:4c:85:83:27:78:69:c0:b7:56:d2:
0b:d6:92:5a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUUU5Y7Ktkfcx190vcjE7/8ojHeSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VDQUI5QkVCMUVBOUVGQkU4MDAwNzgxRjcyQjk1ODlG
RkRBMjEyNTAeFw0yNjAxMDYxOTMyNDZaFw0yNzAxMDUxOTM3NDZaMDMxMTAvBgNV
BAMTKDc5NUZBRDBFNzYyNjk2NzgyQjhDNzEyMkRBQTU4RkQxMTA1NjEzQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/r0OBIwi6jz4vnkmBI7Byg+c/
FdoqPVKFSEoHDuMQ2PAgTxY1Y34CZB50QrcIZqYLKiDM9jtmNJ0kECZ8Mvojb65o
M81Ccl2j+/agYauZu8isGP5a7hjuNRENjaVsL60szAa0h7uTqf8EBKoeq8fr6ORa
fv8iLFl3KbAUYXAj3oVKdeY4/TdSbLi7VFXjl6lH0sgXmaWD2ieStJTB1dsJvPFa
erkWpDYp15zQsox+XLwGCNEOeqMvoW8ie0E+if9/CeD/ye2ZPNBL09KVQvAOHguS
pAL2UQwnF8fAcqkecBtGKC0tNQI/vraGa/DUCrDgR3JcJTciblfZ6cTcGa/DAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUeV+tDnYmlngrjHEi2qWP0RBWE6EwHwYDVR0j
BBgwFoAUPsq5vrHqnvvoAAeB9yuVif/aISUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GODQzNTdERTIwQzFBMUIzRTZCNkJCRUY1NEQyQUM1RjU1
ODg3NDU2QTk2NDFEM0VGQzUxQUI3QkI4MUE5NjM0LzAvM0VDQUI5QkVCMUVBOUVG
QkU4MDAwNzgxRjcyQjk1ODlGRkRBMjEyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRUNBQjlCRUIxRUE5RUZCRTgw
MDA3ODFGNzJCOTU4OUZGREEyMTI1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjg0MzU3REUyMEMxQTFCM0U2QjZCQkVGNTREMkFDNUY1NTg4NzQ1NkE5
NjQxRDNFRkM1MUFCN0JCODFBOTYzNC8wLzMyMzgzMDMzM2E2MjM1MzAzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNDM3MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDtQAw
DQYJKoZIhvcNAQELBQADggEBAAGGK1lrnWKqtEtzAbBWyXEaYn9+qrJ9n2OWryJz
cEIspujM9HMyIGnbPzzh/kY81pcsgmjAMz3pNgiGHUhDHBKoIEnEESJIA5O2SRE1
I0sceNSThy/03oSKghk+D5uWeYMb6TxnGY2X8uL3d6lKsrIfI047QSv+nftfeCAD
mDTV0TaD8xkZ3h8XJ8PgB73Iy2Pg2UfSPP0cB2tcrq6RLIBSdQwXoU4pmSUf/G0E
vRgsLDWkPi67I60jRzcj9XAzS4UXOBasS7PrPQgbG4jt/yC6R7hx8eZZfk/uhpmc
4tZdDV0+ld288NfS89mdpi2nwvL4TIWDJ3hpwLdW0gvWklo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:50 2026 by rpki-client