This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323830303a3a2f33372d3430203d3e20323730303335.roa
File: 323830333a653565303a323830303a3a2f33372d3430203d3e20323730303335.roa (raw, json)
Hash identifier: QhAIyS5H7+7tzt/LTOzRAOztQ0v059PJtqEwhnaiHRk=
Subject key identifier: 2A:F8:37:77:62:FF:23:8E:28:F7:40:90:B4:5D:62:34:B9:3B:19:D8
Certificate issuer: /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
Certificate serial: 51B9F124C6498AF477E59591C82F3287EF971DBD
Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323830303a3a2f33372d3430203d3e20323730303335.roa
Signing time: Wed 28 Jan 2026 15:28:04 +0000
ROA not before: Wed 28 Jan 2026 15:23:04 +0000
ROA not after: Wed 27 Jan 2027 15:28:04 +0000
asID: 270035
IP address blocks: 2803:e5e0:2800::/37 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl
rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b9:f1:24:c6:49:8a:f4:77:e5:95:91:c8:2f:32:87:ef:97:1d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
Validity
Not Before: Jan 28 15:23:04 2026 GMT
Not After : Jan 27 15:28:04 2027 GMT
Subject: CN=2AF8377762FF238E28F74090B45D6234B93B19D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:34:82:95:0f:51:c0:58:63:53:10:be:b1:
ef:7b:b8:c2:f5:d0:3a:85:a0:68:86:4c:21:90:6e:
e0:24:15:e4:27:6a:89:a2:b8:11:d0:4c:04:af:6a:
f8:c8:47:0f:bf:4f:a9:6f:37:2d:b9:14:e2:2a:55:
2e:15:b5:70:17:16:81:8a:b2:eb:af:09:9c:da:1f:
89:f2:cb:3a:d5:78:83:8d:df:ff:4e:cc:90:5b:03:
e2:42:7a:6a:09:a9:06:60:b8:5e:ba:a4:b6:32:b6:
72:c9:4b:f9:cf:3d:9a:98:39:be:03:18:28:24:b2:
4d:79:8b:68:a0:a8:e8:39:57:d8:dd:97:fd:d2:ec:
11:b1:20:33:b5:10:65:7e:34:c0:fa:8d:f7:47:48:
55:aa:df:f9:e8:00:5d:52:ce:53:4e:04:d7:91:20:
54:82:a5:5a:34:53:b3:a2:e9:b1:3e:de:98:8d:10:
01:d0:f7:92:b2:85:68:c4:b6:44:64:86:e1:31:1a:
60:22:1a:f9:1a:91:7e:2e:02:07:cb:ee:d9:bc:61:
be:06:de:4d:a0:4a:d8:58:1e:2f:c0:ef:c1:15:c8:
63:16:4d:88:42:38:7b:96:00:3a:e4:38:b8:09:6c:
a9:0d:7b:ff:b7:cc:8c:8a:70:43:fb:f4:9e:61:57:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F8:37:77:62:FF:23:8E:28:F7:40:90:B4:5D:62:34:B9:3B:19:D8
X509v3 Authority Key Identifier:
keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323830303a3a2f33372d3430203d3e20323730303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e5e0:2800::/37
Signature Algorithm: sha256WithRSAEncryption
54:fa:1b:dd:f3:2f:33:bb:93:f7:5d:d5:93:5b:17:c4:ec:e0:
d2:b4:32:47:db:be:d4:bc:b2:3a:3e:ea:36:db:c3:f3:8c:da:
62:a6:84:45:62:1e:b6:6a:40:27:bc:7a:9d:9e:15:e9:8e:23:
0d:8e:93:ee:7b:16:a3:3a:2b:a9:cc:a1:73:d2:fe:0d:b9:43:
85:74:47:a7:dd:23:8f:5a:75:88:a6:72:dc:b2:3f:6a:08:1e:
ee:a4:e2:ce:d8:49:80:2e:61:26:b0:a7:a2:26:6a:d0:a5:57:
e2:ed:3b:c4:2b:22:08:cd:77:50:f9:ed:27:77:1b:d6:09:dc:
75:ad:bf:0a:3d:ce:74:30:28:d7:59:c1:74:23:ee:79:7a:8d:
f0:ac:50:22:6f:63:cc:28:69:50:17:6d:c8:0f:08:0d:1e:52:
35:0f:30:8d:01:be:ed:21:16:dc:cc:1d:54:0c:da:e9:0e:8e:
63:56:f8:c5:64:d1:18:ca:58:d9:22:28:91:29:13:c8:71:54:
d2:eb:bc:89:ef:03:29:5c:6a:e1:8e:fb:34:20:34:73:af:5d:
7e:ef:1d:44:fa:8e:b6:79:6a:f1:74:d3:62:df:98:88:08:18:
0a:ef:92:f6:7d:e7:34:b5:85:f8:ee:9f:4d:9a:39:74:26:03:
84:5b:f5:06
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUUbnxJMZJivR35ZWRyC8yh++XHb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ5QjNFQjg1RUJBRUM1QUU3MzczQTYzOThDNDI1MDY4
REU0MjU3QTAeFw0yNjAxMjgxNTIzMDRaFw0yNzAxMjcxNTI4MDRaMDMxMTAvBgNV
BAMTKDJBRjgzNzc3NjJGRjIzOEUyOEY3NDA5MEI0NUQ2MjM0QjkzQjE5RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QzSClQ9RwFhjUxC+se97uML1
0DqFoGiGTCGQbuAkFeQnaomiuBHQTASvavjIRw+/T6lvNy25FOIqVS4VtXAXFoGK
suuvCZzaH4nyyzrVeION3/9OzJBbA+JCemoJqQZguF66pLYytnLJS/nPPZqYOb4D
GCgksk15i2igqOg5V9jdl/3S7BGxIDO1EGV+NMD6jfdHSFWq3/noAF1SzlNOBNeR
IFSCpVo0U7Oi6bE+3piNEAHQ95KyhWjEtkRkhuExGmAiGvkakX4uAgfL7tm8Yb4G
3k2gSthYHi/A78EVyGMWTYhCOHuWADrkOLgJbKkNe/+3zIyKcEP79J5hV01rAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUKvg3d2L/I44o90CQtF1iNLk7GdgwHwYDVR0j
BBgwFoAUxJs+uF667FrnNzpjmMQlBo3kJXowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOTUwOTg4RTVBRUVFRjFGRTg3NkJGRDhCMEYyNEQ1NjAw
QzQwRDJCMDUzQTFCRDc4NkZENUE4QUQzRUJBNTZDLzAvQzQ5QjNFQjg1RUJBRUM1
QUU3MzczQTYzOThDNDI1MDY4REU0MjU3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDlCM0VCODVFQkFFQzVBRTcz
NzNBNjM5OEM0MjUwNjhERTQyNTdBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTk1MDk4OEU1QUVFRUYxRkU4NzZCRkQ4QjBGMjRENTYwMEM0MEQyQjA1
M0ExQkQ3ODZGRDVBOEFEM0VCQTU2Qy8wLzMyMzgzMDMzM2E2NTM1NjUzMDNhMzIz
ODMwMzAzYTNhMmYzMzM3MmQzNDMwMjAzZDNlMjAzMjM3MzAzMDMzMzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMoA+XgKDANBgkqhkiG9w0BAQsFAAOCAQEAVPob3fMvM7uT913Vk1sXxOzg
0rQyR9u+1LyyOj7qNtvD84zaYqaERWIetmpAJ7x6nZ4V6Y4jDY6T7nsWozorqcyh
c9L+DblDhXRHp90jj1p1iKZy3LI/agge7qTizthJgC5hJrCnoiZq0KVX4u07xCsi
CM13UPntJ3cb1gncda2/Cj3OdDAo11nBdCPueXqN8KxQIm9jzChpUBdtyA8IDR5S
NQ8wjQG+7SEW3MwdVAza6Q6OY1b4xWTRGMpY2SIokSkTyHFU0uu8ie8DKVxq4Y77
NCA0c69dfu8dRPqOtnlq8XTTYt+YiAgYCu+S9n3nNLWF+O6fTZo5dCYDhFv1Bg==
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:17:07 2026 by rpki-client