This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/323830333a663161303a3a2f33322d3438203d3e20323637373035.roa
File: 323830333a663161303a3a2f33322d3438203d3e20323637373035.roa (raw, json)
Hash identifier: lOlWH3izOIP9jT4nkQr5zu9tgsYS+V0gmQeSBDoe8OE=
Subject key identifier: 5A:19:04:90:67:44:6F:C9:79:16:AF:99:36:48:DD:2B:1A:93:86:02
Certificate issuer: /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336
Certificate serial: 12A24DA99AEE1A121A00EED33B4EA3C3885D5D2C
Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/323830333a663161303a3a2f33322d3438203d3e20323637373035.roa
Signing time: Tue 06 Jan 2026 19:34:01 +0000
ROA not before: Tue 06 Jan 2026 19:29:01 +0000
ROA not after: Tue 05 Jan 2027 19:34:01 +0000
asID: 267705
IP address blocks: 2803:f1a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl
rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a2:4d:a9:9a:ee:1a:12:1a:00:ee:d3:3b:4e:a3:c3:88:5d:5d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336
Validity
Not Before: Jan 6 19:29:01 2026 GMT
Not After : Jan 5 19:34:01 2027 GMT
Subject: CN=5A19049067446FC97916AF993648DD2B1A938602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:e2:f5:0e:89:25:3a:af:fe:e0:71:f3:26:
b0:59:be:5c:ad:bc:2f:f9:82:9a:c8:ab:2c:db:75:
d7:a5:09:60:08:39:6d:a6:f2:ea:d7:59:4e:e0:41:
ba:99:06:8f:df:0a:28:38:20:37:41:7c:4c:6f:58:
61:b4:00:fc:bf:a5:09:58:65:5b:ac:4f:ea:1a:15:
4b:84:e9:4a:94:0a:62:ac:d4:96:6c:32:3c:7f:7f:
45:88:28:1c:93:42:65:51:28:de:e3:4a:15:6a:88:
12:ec:d5:18:5a:03:e4:e7:f5:43:10:e7:65:da:d7:
eb:5c:94:63:af:34:a2:2b:75:81:0f:9c:64:18:1f:
88:ff:2c:60:61:82:12:90:93:df:8e:b4:ef:45:c9:
0b:be:a5:ad:cb:f8:a4:28:ae:05:fc:01:71:f0:be:
19:7d:37:ac:6a:79:21:c0:d7:37:1f:2a:c5:fb:9f:
09:03:c3:1d:aa:5d:04:28:35:a4:97:ee:0c:98:7e:
21:a9:2c:55:5c:6d:4f:54:1e:17:61:93:3d:67:a6:
47:f7:11:21:25:3e:3c:66:09:7d:04:e5:3f:15:dc:
2b:a4:7e:58:83:58:c1:fa:07:f8:6a:ee:83:33:59:
c7:9b:96:09:0c:d9:e3:34:c9:f1:81:ca:08:13:07:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:19:04:90:67:44:6F:C9:79:16:AF:99:36:48:DD:2B:1A:93:86:02
X509v3 Authority Key Identifier:
keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/323830333a663161303a3a2f33322d3438203d3e20323637373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f1a0::/32
Signature Algorithm: sha256WithRSAEncryption
20:a6:9f:8a:70:76:9e:d0:f3:52:0f:4d:d1:67:77:74:57:4d:
02:9d:66:83:2f:27:89:6b:4d:cb:29:3c:c1:b5:63:31:5c:d2:
ad:07:d8:f8:f6:3c:28:63:b2:9e:73:b2:26:94:a7:99:9d:46:
ae:f2:3e:d8:3e:88:dc:41:c5:41:36:e7:0f:41:37:16:b3:d7:
0d:70:67:c1:50:fc:a9:33:76:bb:b8:fd:23:cf:19:20:36:c4:
b1:b1:2e:bf:a4:02:0f:0e:5f:b5:3a:15:08:54:21:63:5b:3a:
13:69:c3:fd:fc:04:d3:6e:02:6a:4d:d5:7f:41:ac:14:db:bc:
d0:07:fd:db:b5:7a:34:02:b3:57:e8:5c:69:75:a3:44:56:01:
8c:2a:0c:f3:19:e3:ea:5a:f3:5d:e6:0d:b8:6e:e8:db:a4:91:
91:09:9a:0b:d4:53:4b:93:d5:d2:69:ed:63:a5:a6:73:0d:a4:
45:6c:4a:cf:86:fa:e8:6b:11:7d:d0:db:1a:ac:65:1e:3f:2f:
bd:61:da:94:b2:a1:bb:10:1f:44:74:51:90:05:c7:d5:ee:b5:
93:90:56:4f:f7:ab:7c:0d:7b:b0:1e:c9:d0:82:f2:1c:c8:1e:
14:e7:34:f4:d3:e2:2b:31:f0:29:bc:1e:a5:bc:c3:aa:c2:88:
71:dc:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:26:31 2026 by rpki-client