This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/323830363a3434623a653030303a3a2f33352d3335203d3e20323733323736.roa
File: 323830363a3434623a653030303a3a2f33352d3335203d3e20323733323736.roa (raw, json)
Hash identifier: ngARnHWhlarGCf2H6HYELvFS9MU41Imy+Ow2/X2HCxM=
Subject key identifier: 83:68:FC:6C:A4:2D:3E:87:9E:88:AB:8A:87:3A:4E:41:FE:B4:2C:00
Certificate issuer: /CN=3360E7A4F7043EDDC877AD1A89727CA151E15193
Certificate serial: 223B3621E0D7394C00C83BF7C2FDD202D1800789
Authority key identifier: 33:60:E7:A4:F7:04:3E:DD:C8:77:AD:1A:89:72:7C:A1:51:E1:51:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/323830363a3434623a653030303a3a2f33352d3335203d3e20323733323736.roa
Signing time: Wed 10 Dec 2025 02:00:00 +0000
ROA not before: Wed 10 Dec 2025 01:55:00 +0000
ROA not after: Wed 09 Dec 2026 02:00:00 +0000
asID: 273276
IP address blocks: 2806:44b:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.crl
rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 22:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:3b:36:21:e0:d7:39:4c:00:c8:3b:f7:c2:fd:d2:02:d1:80:07:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3360E7A4F7043EDDC877AD1A89727CA151E15193
Validity
Not Before: Dec 10 01:55:00 2025 GMT
Not After : Dec 9 02:00:00 2026 GMT
Subject: CN=8368FC6CA42D3E879E88AB8A873A4E41FEB42C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:78:2e:7c:27:a0:67:1b:e5:1d:c2:82:1a:
4f:cd:ae:94:04:91:c1:5e:ae:0b:36:25:c0:b8:f0:
9e:38:4b:74:d3:d1:13:c9:5b:b8:c6:48:b9:28:15:
78:0c:60:11:05:5a:51:46:6f:db:b2:41:70:e4:1e:
fa:42:0c:f2:87:93:4a:04:6d:a5:66:f7:cb:a7:4d:
6b:85:15:a3:32:17:39:ee:4d:6c:24:37:bc:f6:5e:
c0:7b:1a:57:03:05:13:d3:88:47:2c:85:7f:8d:ca:
a4:66:31:b7:b4:de:70:c7:89:ac:1d:c4:c2:e1:8d:
da:4e:d1:9d:87:45:79:86:b5:fd:84:62:5e:91:cd:
71:3f:1e:06:02:9f:6b:46:c2:14:d5:e1:b1:8f:81:
0f:50:2a:7c:52:6d:4e:77:37:31:78:af:da:09:04:
76:e1:df:7c:e1:5c:ec:45:31:5c:5e:15:10:e5:fb:
51:c1:1b:8d:a7:c1:5c:3b:49:92:11:db:86:fd:3d:
d1:86:5a:10:ae:62:fc:24:09:36:7a:a5:38:50:de:
4d:23:57:8b:4a:fc:1a:57:5c:0b:15:a9:2d:02:51:
59:78:df:af:3b:90:1d:e4:4b:90:8d:e1:05:6d:4f:
0b:fa:e4:e0:15:ae:9f:a6:fd:da:b4:d4:fe:0e:b9:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:68:FC:6C:A4:2D:3E:87:9E:88:AB:8A:87:3A:4E:41:FE:B4:2C:00
X509v3 Authority Key Identifier:
keyid:33:60:E7:A4:F7:04:3E:DD:C8:77:AD:1A:89:72:7C:A1:51:E1:51:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/323830363a3434623a653030303a3a2f33352d3335203d3e20323733323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:44b:e000::/35
Signature Algorithm: sha256WithRSAEncryption
94:f2:7e:ed:cd:ff:17:76:84:e2:17:0c:ff:a9:2a:ac:af:54:
bc:8e:c3:fa:82:29:18:7b:47:74:0e:0e:96:48:ba:64:10:1d:
a9:45:57:64:e7:89:4c:b1:81:63:31:bc:c3:4d:2d:de:f9:d4:
dd:e2:43:10:ff:ee:fe:22:ee:b8:1b:50:9c:ec:30:39:b5:63:
a8:2e:18:6a:b9:b3:cd:0c:f3:09:e5:e5:c5:9f:f8:86:15:3f:
60:30:f7:ab:7b:0a:b0:35:15:cb:ec:a9:10:07:b8:c0:51:47:
3a:2b:9d:3e:83:8b:51:08:35:88:ee:c4:f7:1a:e8:9d:cd:59:
90:49:e4:a2:7f:0f:e2:d5:c9:39:09:07:8d:6b:51:34:17:b1:
bf:e1:57:03:21:bc:ac:db:2f:57:2d:73:d6:de:d4:f9:55:58:
8d:7c:be:03:b6:e7:b3:d4:7e:71:b7:0b:01:c8:dc:30:d5:bb:
1c:2b:c9:6a:2e:d1:f0:76:f6:43:57:2b:1e:8d:fc:b5:85:23:
39:1d:e3:b1:63:bf:2d:0c:b1:49:3a:fd:24:dd:a4:02:ef:2e:
1f:4a:c2:73:cd:51:08:f1:12:33:b8:6e:be:4c:0c:59:78:e3:
a4:b3:cb:f9:dd:20:6f:20:05:8f:0f:93:dd:f5:a9:ff:ce:9d:
fb:2c:4c:6c
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUIjs2IeDXOUwAyDv3wv3SAtGAB4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM2MEU3QTRGNzA0M0VEREM4NzdBRDFBODk3MjdDQTE1
MUUxNTE5MzAeFw0yNTEyMTAwMTU1MDBaFw0yNjEyMDkwMjAwMDBaMDMxMTAvBgNV
BAMTKDgzNjhGQzZDQTQyRDNFODc5RTg4QUI4QTg3M0E0RTQxRkVCNDJDMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2HgufCegZxvlHcKCGk/NrpQE
kcFergs2JcC48J44S3TT0RPJW7jGSLkoFXgMYBEFWlFGb9uyQXDkHvpCDPKHk0oE
baVm98unTWuFFaMyFznuTWwkN7z2XsB7GlcDBRPTiEcshX+NyqRmMbe03nDHiawd
xMLhjdpO0Z2HRXmGtf2EYl6RzXE/HgYCn2tGwhTV4bGPgQ9QKnxSbU53NzF4r9oJ
BHbh33zhXOxFMVxeFRDl+1HBG42nwVw7SZIR24b9PdGGWhCuYvwkCTZ6pThQ3k0j
V4tK/BpXXAsVqS0CUVl43687kB3kS5CN4QVtTwv65OAVrp+m/dq01P4OuZd1AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUg2j8bKQtPoeeiKuKhzpOQf60LAAwHwYDVR0j
BBgwFoAUM2DnpPcEPt3Id60aiXJ8oVHhUZMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MUM0MzA2NkY1Njk0QzRCQUY3RDdGNEY0OUI1ODE5NDI3
RDVDRjE1NzA4QkM5MUZFMDFEMENGMzY1QUY1NDNBLzAvMzM2MEU3QTRGNzA0M0VE
REM4NzdBRDFBODk3MjdDQTE1MUUxNTE5My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzYwRTdBNEY3MDQzRUREQzg3
N0FEMUE4OTcyN0NBMTUxRTE1MTkzLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDFDNDMwNjZGNTY5NEM0QkFGN0Q3RjRGNDlCNTgxOTQyN0Q1Q0YxNTcw
OEJDOTFGRTAxRDBDRjM2NUFGNTQzQS8wLzMyMzgzMDM2M2EzNDM0NjIzYTY1MzAz
MDMwM2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNzMzMzIzNzM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYFKAYES+AwDQYJKoZIhvcNAQELBQADggEBAJTyfu3N/xd2hOIXDP+pKqyvVLyO
w/qCKRh7R3QODpZIumQQHalFV2TniUyxgWMxvMNNLd751N3iQxD/7v4i7rgbUJzs
MDm1Y6guGGq5s80M8wnl5cWf+IYVP2Aw96t7CrA1FcvsqRAHuMBRRzornT6Di1EI
NYjuxPca6J3NWZBJ5KJ/D+LVyTkJB41rUTQXsb/hVwMhvKzbL1ctc9be1PlVWI18
vgO257PUfnG3CwHI3DDVuxwryWou0fB29kNXKx6N/LWFIzkd47Fjvy0MsUk6/STd
pALvLh9KwnPNUQjxEjO4br5MDFl446Szy/ndIG8gBY8Pk931qf/OnfssTGw=
-----END CERTIFICATE-----
Generated at Mon Dec 15 21:52:05 2025 by rpki-client