This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/323830333a383063303a3a2f33322d3438203d3e20323634373537.roa
File: 323830333a383063303a3a2f33322d3438203d3e20323634373537.roa (raw, json)
Hash identifier: 3uPxzCfbk9qHdrMCV8uGh1dVBfwADHaYI5yhGbEqBzk=
Subject key identifier: 71:62:96:D2:D9:21:BA:07:BE:59:DE:93:5B:B0:1B:57:23:6A:D3:5A
Certificate issuer: /CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2
Certificate serial: 594A06288B12E15583508EA35DF07DFDB43B6EEB
Authority key identifier: F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/323830333a383063303a3a2f33322d3438203d3e20323634373537.roa
Signing time: Tue 06 Jan 2026 19:01:19 +0000
ROA not before: Tue 06 Jan 2026 18:56:19 +0000
ROA not after: Tue 05 Jan 2027 19:01:19 +0000
asID: 264757
IP address blocks: 2803:80c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl
rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4a:06:28:8b:12:e1:55:83:50:8e:a3:5d:f0:7d:fd:b4:3b:6e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2
Validity
Not Before: Jan 6 18:56:19 2026 GMT
Not After : Jan 5 19:01:19 2027 GMT
Subject: CN=716296D2D921BA07BE59DE935BB01B57236AD35A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:93:70:06:f1:1c:ab:23:37:41:af:80:49:
4f:57:1d:a3:4a:5a:34:97:31:57:5f:31:07:1d:84:
24:04:65:29:2b:1a:e2:01:83:17:44:1d:46:9b:40:
6b:85:1c:09:ce:88:a6:da:02:67:a3:2e:a1:32:e7:
7a:21:a9:a7:2a:95:be:22:cb:19:4a:86:35:3e:c0:
96:58:ef:78:53:d8:8a:b7:fb:54:a7:e2:97:b2:85:
f7:5b:cd:b6:e9:d4:52:32:c6:c0:3c:92:b4:0b:b5:
b3:35:0b:11:42:89:61:24:48:86:90:84:a5:9b:4a:
0c:15:75:bf:7d:68:79:bb:1d:61:13:10:bd:8d:be:
c0:e8:3f:6e:c7:81:36:d5:46:02:de:21:8a:87:8e:
8e:9d:f7:2e:4e:5f:e6:44:15:b5:a5:9d:08:1c:2d:
91:25:c2:cf:38:79:d0:e6:8c:16:1a:3b:68:e1:fb:
f8:ba:8e:52:3a:6a:c1:a1:0a:35:ef:80:a5:59:b8:
60:6f:07:b0:87:45:fb:e3:11:2e:97:ef:48:6d:59:
af:94:a9:c0:6a:49:fd:95:f6:f6:3b:2a:d0:2b:70:
77:60:6f:38:ee:6d:6e:b2:c8:09:29:7c:20:68:2b:
e0:32:f7:41:88:02:e1:b5:d7:d9:58:92:bf:6f:46:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:62:96:D2:D9:21:BA:07:BE:59:DE:93:5B:B0:1B:57:23:6A:D3:5A
X509v3 Authority Key Identifier:
keyid:F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/323830333a383063303a3a2f33322d3438203d3e20323634373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:80c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:59:86:42:24:1b:44:b1:89:1f:02:db:17:ed:57:55:29:e5:
5d:7f:48:16:f9:78:96:4e:12:50:6e:5a:74:b7:2b:3c:28:e4:
8a:75:2f:0b:2c:a1:ba:c7:f0:79:8c:a4:0c:aa:0b:73:1f:da:
3e:8c:f3:a3:af:a5:1e:35:10:e4:2e:5b:6c:cc:dd:ff:74:55:
13:e1:72:77:d5:d3:9d:00:a3:1d:00:29:0a:0d:4e:13:fa:e3:
11:07:74:bf:e0:12:5a:2b:1e:bc:dc:0d:95:5c:4d:32:69:f7:
dd:0e:27:36:6a:fc:20:63:57:e9:b3:15:13:f6:83:dd:99:47:
47:d8:fe:8f:d5:96:01:e7:87:0f:39:24:bb:a4:d8:28:41:ad:
dd:91:20:60:32:24:0e:94:d9:34:a7:d9:02:37:06:e7:01:fe:
3e:e4:f4:07:83:b4:0c:ff:5a:fe:be:eb:00:cd:04:19:5f:9d:
33:42:e4:22:03:23:7e:e6:cd:ce:12:c7:07:74:e1:ab:2e:36:
3d:8c:a3:74:ef:98:62:c3:0a:3b:39:a3:50:78:6c:18:e1:d2:
f2:08:b3:a7:27:82:c1:3a:ab:3e:06:20:43:a3:da:2b:e6:c5:
f8:c2:02:0d:17:b7:01:ef:6c:87:57:55:7f:56:e8:6b:41:09:
95:db:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:05:39 2026 by rpki-client