This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a623030303a3a2f33362d3336203d3e20323639383030.roa
File: 323830333a373336303a623030303a3a2f33362d3336203d3e20323639383030.roa (raw, json)
Hash identifier: 7I1VmlyT3t5CuRxnW9ScFy4r6Fj6zKQMZOLiM3EsNVA=
Subject key identifier: 5F:63:9B:AF:B2:30:AE:A7:03:6D:B5:83:D8:2A:FC:2A:3C:04:B9:CA
Certificate issuer: /CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5
Certificate serial: 5567BBE15F20F66A5446D35EE677D76F98B8B7BE
Authority key identifier: 0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a623030303a3a2f33362d3336203d3e20323639383030.roa
Signing time: Tue 06 Jan 2026 19:06:52 +0000
ROA not before: Tue 06 Jan 2026 19:01:52 +0000
ROA not after: Tue 05 Jan 2027 19:06:52 +0000
asID: 269800
IP address blocks: 2803:7360:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.crl
rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Jan 2026 09:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:67:bb:e1:5f:20:f6:6a:54:46:d3:5e:e6:77:d7:6f:98:b8:b7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5
Validity
Not Before: Jan 6 19:01:52 2026 GMT
Not After : Jan 5 19:06:52 2027 GMT
Subject: CN=5F639BAFB230AEA7036DB583D82AFC2A3C04B9CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:c6:21:ca:70:45:28:cf:21:11:7c:c1:53:
a5:03:5f:9e:44:d1:9f:a5:27:4b:c8:4e:46:4c:da:
18:43:2a:07:18:da:95:a0:26:3c:14:61:b7:0d:d4:
ec:d3:1c:16:2f:7d:47:ef:2e:7a:6c:b2:4c:a0:93:
78:ea:e6:71:4e:39:7e:13:6b:d5:cf:7c:6b:48:c6:
1f:77:d0:35:e3:0b:8b:bb:d2:78:9d:a5:7d:d8:b7:
c6:15:ad:9b:09:b6:54:7e:7f:1e:92:a5:2a:0e:26:
d7:61:dd:31:43:f3:59:04:34:a5:3e:29:51:c7:8f:
cb:61:b8:c0:27:2f:5d:aa:d0:bf:d1:51:32:8b:af:
d2:d1:6f:98:a7:78:83:57:53:fb:32:33:b7:65:87:
ef:59:19:30:8d:16:bb:a4:bc:95:fd:5f:6d:12:5f:
13:48:81:2a:26:ed:4b:c0:9b:72:54:5d:23:59:f9:
8b:9d:19:91:35:39:9c:cd:ff:46:f1:4f:c8:64:ab:
0c:53:e0:6a:7a:49:28:5a:f9:a0:f0:68:49:d9:a3:
19:f7:81:b8:ef:5f:06:9b:a2:f7:d7:6d:15:ce:dd:
27:75:56:02:19:b1:25:b8:b6:4c:81:5b:77:99:cd:
14:8d:c2:43:38:b0:4c:30:53:3c:12:3f:9b:95:08:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:9B:AF:B2:30:AE:A7:03:6D:B5:83:D8:2A:FC:2A:3C:04:B9:CA
X509v3 Authority Key Identifier:
keyid:0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a623030303a3a2f33362d3336203d3e20323639383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7360:b000::/36
Signature Algorithm: sha256WithRSAEncryption
50:5c:87:6a:f7:76:b3:de:b7:34:e6:c1:f6:bf:9a:94:c3:1c:
31:1b:18:7c:5d:e7:03:7b:3d:01:89:82:fa:98:62:e8:7c:82:
d6:89:f9:36:cd:54:71:5e:9f:a1:93:67:a2:f3:e5:64:a2:2b:
b6:be:60:00:a6:f0:54:cf:51:b8:61:00:08:9f:06:2e:90:22:
aa:f2:1d:2b:0a:27:40:7f:e2:0a:93:90:3b:03:e8:ce:7a:10:
d0:18:cd:90:9f:0e:66:3f:96:26:08:d3:03:7b:bd:e7:51:5c:
7b:d9:4d:6e:d2:64:1b:a6:89:d9:77:96:a0:d4:0d:51:13:c8:
90:0b:16:84:1f:91:20:fb:a7:1b:39:32:18:73:fa:0a:ab:97:
6e:d0:db:28:55:e2:9f:2a:a9:cd:e8:29:d8:6c:c8:08:a7:ef:
4b:71:0c:70:f8:bf:a0:31:05:30:11:60:4a:76:ba:9b:ba:c2:
75:3f:6b:c4:2e:3e:f6:b1:37:eb:53:28:84:27:82:51:eb:4b:
2d:03:c3:01:14:c7:b6:ce:98:09:d3:ac:34:4c:2a:71:24:b5:
e9:a8:9c:00:92:49:95:bf:13:33:08:e0:e2:b3:b7:81:45:3d:
2c:ff:5e:2c:85:63:f5:f4:9c:9a:fa:85:ca:62:87:14:03:a6:
e9:97:e8:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 15:41:38 2026 by rpki-client