This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65613a343030303a3a2f34372d3438203d3e203133343839.roa
File: 323830303a65613a343030303a3a2f34372d3438203d3e203133343839.roa (raw, json)
Hash identifier: gOjJnRd5qGYcNmrc54+Hz+VjTDXuDCn1brAsJB0uexg=
Subject key identifier: 18:76:CE:4D:D0:A6:14:C4:78:C4:72:9E:14:4C:1A:0E:EA:5C:6A:AB
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 5CA96D2243B936C1A1060CBAB432FF6B8FF05925
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65613a343030303a3a2f34372d3438203d3e203133343839.roa
Signing time: Mon 17 Nov 2025 19:52:56 +0000
ROA not before: Mon 17 Nov 2025 19:47:56 +0000
ROA not after: Mon 16 Nov 2026 19:52:56 +0000
asID: 13489
IP address blocks: 2800:ea:4000::/47 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a9:6d:22:43:b9:36:c1:a1:06:0c:ba:b4:32:ff:6b:8f:f0:59:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Nov 17 19:47:56 2025 GMT
Not After : Nov 16 19:52:56 2026 GMT
Subject: CN=1876CE4DD0A614C478C4729E144C1A0EEA5C6AAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4b:ed:87:97:ba:c2:6e:1c:73:65:69:1c:ab:
0d:3b:b9:60:60:49:11:cd:1d:81:a3:9d:e4:2f:9a:
3b:33:9c:7b:2c:e9:03:61:c1:8b:cc:aa:1a:6c:89:
59:dc:c8:1f:df:7b:e1:14:00:86:b2:47:b6:8c:61:
7f:03:e3:7e:f7:b8:26:46:99:be:d5:57:89:b3:05:
75:12:dd:bc:5c:e2:14:c7:29:b6:b0:5e:4e:d1:27:
00:91:f9:5e:2a:1f:aa:d3:46:f4:34:0a:47:df:cc:
01:eb:d7:8e:99:cd:60:52:4b:3a:cd:e6:36:da:6d:
44:28:c1:fe:ba:8e:97:c6:73:9d:8c:68:12:dd:fe:
47:01:6e:64:42:21:62:05:93:73:53:91:28:ce:c2:
98:c8:5f:c5:82:bd:c6:69:d3:3d:2b:be:72:5e:a7:
ad:1f:b1:ac:d9:7c:3b:c5:29:3a:5b:e0:10:dd:98:
6a:56:eb:51:a6:d6:ce:a1:03:1d:e5:a9:35:2e:73:
0f:78:76:31:0f:bb:1d:07:d8:d5:1f:7d:6e:1c:8a:
13:40:bf:2f:ed:0a:30:e2:d1:d3:27:24:fb:6d:99:
e1:10:89:7b:4a:0b:0e:81:b7:81:01:aa:3e:65:2c:
27:63:e7:14:91:31:5a:c6:40:d4:db:49:96:66:73:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:76:CE:4D:D0:A6:14:C4:78:C4:72:9E:14:4C:1A:0E:EA:5C:6A:AB
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65613a343030303a3a2f34372d3438203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:ea:4000::/47
Signature Algorithm: sha256WithRSAEncryption
8a:71:1b:73:4f:48:bd:3d:9a:88:8f:f4:ce:dc:4d:bf:f0:a5:
4e:fe:49:5b:1e:00:2e:5a:6d:23:26:c2:79:f5:6b:ad:d3:c1:
24:96:80:83:1d:62:d7:7a:56:9e:ba:96:dc:d1:91:8a:24:2d:
a7:97:d7:b3:66:91:de:7f:e4:70:3d:21:94:6d:4a:af:8b:2a:
f3:93:a6:21:b0:76:ff:92:b8:f8:b6:d2:46:f5:b8:82:94:83:
22:f3:9a:25:94:da:bd:ca:2b:83:d6:12:c1:50:43:5a:7f:e2:
5d:9f:2b:31:4f:72:a0:02:9a:7d:97:3a:b4:2d:b8:ce:98:ce:
c7:6c:f3:d2:be:52:46:b4:3b:33:bb:2d:f9:a0:dc:b4:b0:dd:
c3:09:3c:18:11:30:db:f0:60:8f:be:4f:ad:11:d5:e0:00:d9:
eb:50:00:4d:f6:f4:ad:08:54:4e:7b:37:1a:52:83:25:5c:24:
1f:33:db:47:8a:a3:5a:d7:14:76:d6:5b:33:6f:c5:f7:83:f7:
f1:92:52:9d:1d:54:57:fe:5b:28:7a:bb:9f:72:ce:0d:0b:bd:
d4:a6:11:62:6c:cc:44:10:20:c4:63:f7:e1:2b:7d:c7:a5:cc:
63:96:22:6c:c3:e2:b4:72:c9:20:1b:94:2d:55:e1:ec:b8:e2:
70:ab:67:31
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUXKltIkO5NsGhBgy6tDL/a4/wWSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNTExMTcxOTQ3NTZaFw0yNjExMTYxOTUyNTZaMDMxMTAvBgNV
BAMTKDE4NzZDRTRERDBBNjE0QzQ3OEM0NzI5RTE0NEMxQTBFRUE1QzZBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOS+2Hl7rCbhxzZWkcqw07uWBg
SRHNHYGjneQvmjsznHss6QNhwYvMqhpsiVncyB/fe+EUAIayR7aMYX8D4373uCZG
mb7VV4mzBXUS3bxc4hTHKbawXk7RJwCR+V4qH6rTRvQ0CkffzAHr146ZzWBSSzrN
5jbabUQowf66jpfGc52MaBLd/kcBbmRCIWIFk3NTkSjOwpjIX8WCvcZp0z0rvnJe
p60fsazZfDvFKTpb4BDdmGpW61Gm1s6hAx3lqTUucw94djEPux0H2NUffW4cihNA
vy/tCjDi0dMnJPttmeEQiXtKCw6Bt4EBqj5lLCdj5xSRMVrGQNTbSZZmcw0ZAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUGHbOTdCmFMR4xHKeFEwaDupcaqswHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMyMzgzMDMwM2E2NTYxM2EzNDMwMzAz
MDNhM2EyZjM0MzcyZDM0MzgyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEo
AADqQAAwDQYJKoZIhvcNAQELBQADggEBAIpxG3NPSL09moiP9M7cTb/wpU7+SVse
AC5abSMmwnn1a63TwSSWgIMdYtd6Vp66ltzRkYokLaeX17Nmkd5/5HA9IZRtSq+L
KvOTpiGwdv+SuPi20kb1uIKUgyLzmiWU2r3KK4PWEsFQQ1p/4l2fKzFPcqACmn2X
OrQtuM6Yzsds89K+Uka0OzO7Lfmg3LSw3cMJPBgRMNvwYI++T60R1eAA2etQAE32
9K0IVE57NxpSgyVcJB8z20eKo1rXFHbWWzNvxfeD9/GSUp0dVFf+Wyh6u59yzg0L
vdSmEWJszEQQIMRj9+ErfcelzGOWImzD4rRyySAblC1V4ey44nCrZzE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:06:46 2025 by rpki-client