This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65363a363230303a3a2f34382d3438203d3e203133343839.roa
File: 323830303a65363a363230303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier: dzb54rNomSoGkkl1iD0J0mBxaTWFn9ZEt2hmMMLncp0=
Subject key identifier: 0F:DA:F4:44:D8:B6:81:AE:8B:DA:B7:08:DD:3A:53:5D:31:B1:FD:AC
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 531D4C1C540B9ED0D7F10BA5B77DE9FDD9644243
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65363a363230303a3a2f34382d3438203d3e203133343839.roa
Signing time: Mon 17 Nov 2025 19:52:57 +0000
ROA not before: Mon 17 Nov 2025 19:47:57 +0000
ROA not after: Mon 16 Nov 2026 19:52:57 +0000
asID: 13489
IP address blocks: 2800:e6:6200::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1d:4c:1c:54:0b:9e:d0:d7:f1:0b:a5:b7:7d:e9:fd:d9:64:42:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Nov 17 19:47:57 2025 GMT
Not After : Nov 16 19:52:57 2026 GMT
Subject: CN=0FDAF444D8B681AE8BDAB708DD3A535D31B1FDAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:1a:18:e0:b8:16:95:10:24:28:f8:02:1d:
81:1a:04:c8:ee:f6:e0:0a:e1:79:f4:d5:0c:e2:be:
c7:5e:3f:88:b3:11:8e:6c:c3:8c:d0:e1:fc:37:27:
65:5d:03:f6:3a:e0:ea:3b:52:61:c1:b5:89:e2:fa:
ec:59:24:ee:e6:a1:6a:64:14:f1:de:20:42:91:42:
59:3f:57:0b:fa:aa:ff:b1:c5:dc:5f:1f:e3:b3:98:
c8:74:7e:56:0c:3c:82:48:32:d5:3c:d8:76:34:99:
48:49:90:14:59:17:84:27:f6:ec:96:24:7c:3a:85:
cc:a1:de:d8:57:dc:5d:af:74:ec:1d:6b:46:b2:c5:
e7:3e:69:91:30:a0:28:73:8f:59:01:ec:de:02:29:
df:ed:06:53:b3:39:7f:d2:ef:76:86:6d:48:3d:71:
b4:ab:ef:1a:05:cb:da:b4:5d:c6:ce:05:de:de:47:
79:54:9c:32:c9:f8:ff:96:e5:fe:3b:3c:29:f3:33:
a3:90:ba:fa:2a:19:04:b8:7e:b9:dc:a1:8c:c2:4d:
d6:4c:92:1a:2b:ac:f5:f3:12:c0:39:23:15:29:fc:
e6:3c:7e:8e:10:75:76:4d:68:c8:ff:b4:5d:0e:5d:
45:b8:c2:21:9b:0d:2c:12:64:48:6b:20:c9:7b:dc:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DA:F4:44:D8:B6:81:AE:8B:DA:B7:08:DD:3A:53:5D:31:B1:FD:AC
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65363a363230303a3a2f34382d3438203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:e6:6200::/48
Signature Algorithm: sha256WithRSAEncryption
3b:a8:a4:2d:98:68:81:86:08:9b:ad:32:23:80:4c:77:d6:19:
ad:1a:c1:24:65:39:63:77:43:01:40:ef:e2:2d:4e:ad:86:2e:
b4:4b:88:c5:a6:eb:6b:ee:ca:24:f5:33:d8:03:65:a1:ae:c0:
69:15:f4:d3:84:76:32:04:a3:ea:b0:39:32:b7:10:52:2d:7c:
48:e4:05:aa:1b:24:16:51:48:ad:9b:ec:d9:d1:63:33:9d:c1:
64:ee:47:8c:49:e9:a2:c8:e7:8f:68:45:be:87:78:a2:6e:41:
b0:fe:d8:0d:df:83:6e:d9:c0:47:18:ae:b1:c8:16:bb:99:07:
94:b2:b5:41:fb:63:fc:f9:3b:26:cb:59:c8:22:40:db:9b:42:
e9:0d:98:dc:48:f0:62:9b:71:8b:bc:7b:2b:10:fb:2c:d4:65:
b5:4d:2b:7d:cd:d3:c5:b2:6d:ac:b9:79:ea:79:ae:2e:aa:e6:
64:7a:c4:7a:79:f9:37:dd:da:ec:5e:60:e0:c6:ca:af:12:4c:
7a:2b:6a:73:fa:10:fd:aa:94:da:b4:c4:84:89:73:1e:95:aa:
3e:db:ae:8b:3b:1a:a2:9d:fc:e8:14:96:5b:13:0b:8c:a1:3b:
18:55:af:e5:df:2d:c2:97:38:d6:e2:73:0a:4e:7b:de:dd:54:
7e:8b:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:06:38 2025 by rpki-client