This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/323830333a326163303a3a2f33322d3336203d3e203532333030.roa
File: 323830333a326163303a3a2f33322d3336203d3e203532333030.roa (raw, json)
Hash identifier: mXFSE6aoiHcMiJmQ8w0K65mTAO5VmK7ONQuMxOwGc2A=
Subject key identifier: A0:AE:D8:3F:D3:B1:9C:3E:AA:67:E4:61:35:A5:35:9E:61:F6:35:1C
Certificate issuer: /CN=BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5
Certificate serial: 1C4BF59BCE8EC67CAE151D5AC336B0A99A41B3C4
Authority key identifier: BE:38:E3:4A:9E:F6:02:24:5B:47:57:B8:F3:B6:BB:46:75:E6:B9:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/323830333a326163303a3a2f33322d3336203d3e203532333030.roa
Signing time: Fri 12 Dec 2025 20:54:51 +0000
ROA not before: Fri 12 Dec 2025 20:49:51 +0000
ROA not after: Fri 11 Dec 2026 20:54:51 +0000
asID: 52300
IP address blocks: 2803:2ac0::/32 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.crl
rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 10:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4b:f5:9b:ce:8e:c6:7c:ae:15:1d:5a:c3:36:b0:a9:9a:41:b3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5
Validity
Not Before: Dec 12 20:49:51 2025 GMT
Not After : Dec 11 20:54:51 2026 GMT
Subject: CN=A0AED83FD3B19C3EAA67E46135A5359E61F6351C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:57:56:a0:7f:a8:3b:91:2f:cd:73:a7:6f:
c2:46:21:8c:7b:7a:bc:e5:83:4b:fb:72:8d:56:78:
99:27:5c:4e:ad:4d:ee:18:84:14:22:fa:6c:c5:c9:
84:3a:58:85:72:35:e0:4d:6c:04:c6:fe:d4:ba:c6:
a8:f5:97:11:63:79:4d:14:bd:b5:b2:43:91:b2:29:
81:9b:ec:e6:b0:52:2e:07:29:d7:7e:83:f8:42:ab:
79:9b:98:07:22:c3:7a:6a:9c:d4:1e:07:aa:ef:99:
41:39:de:db:a8:1d:1b:48:a7:2b:66:29:80:1d:0f:
bc:18:d8:1f:99:81:bb:98:26:bb:e0:ed:c2:c4:62:
05:56:67:c9:ea:63:b2:da:1e:74:eb:70:6e:5f:d1:
b5:b1:64:b0:4a:62:8e:2a:de:4a:a9:c9:df:9e:fe:
cb:5c:bd:ca:69:89:cf:70:04:d7:8b:a1:08:1d:a0:
59:d1:45:d1:c0:c9:b2:09:6a:a8:ea:7f:68:ad:09:
f6:2e:90:c1:fd:51:42:33:34:4a:52:02:1f:b5:3a:
23:4a:29:76:2f:5a:76:8a:39:65:c5:63:4e:5c:03:
77:2e:55:9c:67:59:37:21:67:66:31:ea:ad:ff:fd:
64:bc:d3:25:ba:26:7b:50:e0:be:c5:95:cd:a5:91:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:D8:3F:D3:B1:9C:3E:AA:67:E4:61:35:A5:35:9E:61:F6:35:1C
X509v3 Authority Key Identifier:
keyid:BE:38:E3:4A:9E:F6:02:24:5B:47:57:B8:F3:B6:BB:46:75:E6:B9:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/323830333a326163303a3a2f33322d3336203d3e203532333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2ac0::/32
Signature Algorithm: sha256WithRSAEncryption
47:16:82:b2:0f:74:c3:f0:dd:58:77:1d:24:48:bd:49:8f:35:
1f:0b:28:6d:c8:bf:c1:93:7d:83:61:9e:31:e4:58:42:0e:01:
53:2e:63:2e:43:d2:90:28:a3:38:e5:48:f2:03:a0:1f:06:b1:
f4:c0:49:f6:61:74:7c:a6:8a:8c:2f:91:4b:ba:13:2f:d1:02:
0d:1d:d4:9b:37:2f:92:eb:ed:1c:e8:b2:40:4b:f1:4b:74:d2:
06:d1:1f:05:2b:35:4f:bd:88:93:b8:55:f0:9c:d0:1e:50:5e:
e0:96:5c:e0:28:c3:3b:ea:0f:c8:a8:8a:ec:fa:10:db:8e:8d:
ec:0b:06:3f:53:7f:9d:8e:16:da:8d:e6:48:74:54:15:f9:38:
41:35:15:a1:06:b0:9e:aa:3b:d3:ef:f7:e1:e9:f1:09:9d:4a:
ce:f2:b8:03:57:32:ae:f1:b3:ae:78:e0:03:65:c3:c9:18:a4:
4b:ff:e9:47:43:43:68:ed:64:dc:f4:f2:d8:ee:37:99:7d:d0:
b6:86:df:46:fe:5a:0a:26:0d:0a:1c:30:bd:67:4a:02:5f:cc:
21:e4:84:ce:ec:8c:26:dc:57:c2:56:65:9e:b6:37:94:be:dc:
98:5e:b6:0a:b6:fd:82:25:5f:20:d9:1b:5d:53:06:b8:3b:25:
0c:ca:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 04:01:38 2025 by rpki-client