This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65653a363230303a3a2f34382d3438203d3e203133343839.roa
File: 323830303a65653a363230303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier: 1Lct2MBbDlTcBAhO7fTaJwjbME44mefrNqiaZjU2A38=
Subject key identifier: 5E:0E:AD:53:DB:94:05:14:67:81:AD:9C:70:7F:B5:21:7B:4D:B3:C2
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 126C79186317408457E84883A5FB99709E719247
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65653a363230303a3a2f34382d3438203d3e203133343839.roa
Signing time: Mon 17 Nov 2025 19:52:58 +0000
ROA not before: Mon 17 Nov 2025 19:47:58 +0000
ROA not after: Mon 16 Nov 2026 19:52:58 +0000
asID: 13489
IP address blocks: 2800:ee:6200::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 03:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6c:79:18:63:17:40:84:57:e8:48:83:a5:fb:99:70:9e:71:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Nov 17 19:47:58 2025 GMT
Not After : Nov 16 19:52:58 2026 GMT
Subject: CN=5E0EAD53DB9405146781AD9C707FB5217B4DB3C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:e4:9f:99:6a:ba:8f:21:fa:be:1e:b5:06:
2d:77:59:fd:89:28:36:f1:22:17:04:94:84:f0:87:
35:cd:22:27:a2:b4:61:3f:62:b6:4b:63:f3:fe:18:
2e:00:10:0a:e6:92:94:8e:c6:95:d0:db:0b:48:e5:
f2:ef:38:a1:92:80:c6:6d:fa:44:07:27:1b:96:64:
64:21:80:00:12:28:70:4e:9d:55:25:c1:a9:0b:f2:
f1:55:4d:e0:5e:39:22:63:63:26:6b:f1:05:e6:d4:
e9:cf:b4:a7:fe:6f:08:b1:b3:5d:d7:bf:2c:03:bf:
0d:b7:b8:84:d9:a3:63:e7:9f:cc:2d:a2:0b:05:0e:
5e:51:63:6d:c9:aa:76:89:84:95:67:8a:68:18:b4:
9c:94:2c:f8:68:81:9b:af:37:9b:85:17:fd:f1:b7:
f0:98:5e:3b:62:5c:3e:ef:79:96:36:a6:18:37:e2:
0f:35:98:9d:83:10:48:8c:38:dd:71:0c:6f:61:cd:
27:a8:b3:67:ac:6f:d8:3a:17:ce:51:a0:a0:32:66:
9a:14:ff:39:1f:2d:56:c0:d7:09:55:7b:3b:88:a1:
3b:08:bf:6e:3a:d9:9b:2c:03:fd:74:50:8f:d0:2b:
84:f5:af:6b:56:ac:54:f4:54:84:ad:04:21:06:41:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0E:AD:53:DB:94:05:14:67:81:AD:9C:70:7F:B5:21:7B:4D:B3:C2
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65653a363230303a3a2f34382d3438203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:ee:6200::/48
Signature Algorithm: sha256WithRSAEncryption
05:10:e4:19:01:5d:f6:b8:b1:91:ed:62:3e:12:a0:e7:1f:94:
c6:72:95:b6:01:71:a6:8e:e3:8c:ff:12:a9:7d:e4:c5:cb:e6:
40:b3:7f:6e:24:f0:71:4b:96:47:d8:0c:e0:2b:5b:db:e2:03:
99:df:0f:94:fb:54:50:f6:c1:55:22:6f:a5:d8:c1:2c:66:61:
e6:03:b3:56:07:00:02:94:42:98:8f:5b:52:d7:93:fd:c0:c0:
69:73:d7:c2:83:d5:7b:e2:af:72:49:53:90:a7:b6:af:6e:56:
ee:ea:2c:23:7f:9d:db:c4:be:d1:8f:ca:fb:d3:fa:76:d6:92:
da:51:f7:59:d9:7f:fe:07:3b:cd:a0:2a:1a:ea:8a:b2:e5:1c:
d9:bd:aa:17:f7:2b:40:31:8f:0a:47:89:74:b9:fc:1d:ac:99:
8f:46:07:65:68:0a:f4:2e:ff:b0:6c:6e:49:e8:d4:30:39:7d:
06:ce:9c:66:b9:e7:8d:fe:2d:46:ef:ed:64:1b:7f:4f:9e:cd:
cb:3b:2a:29:db:84:69:82:07:1f:b6:cc:97:50:6f:da:a6:ea:
b3:54:3c:54:02:0b:9f:53:6e:a4:1c:78:b0:9e:ae:3e:ee:cd:
8e:19:85:89:0b:90:2b:75:5c:1a:5c:4f:a3:9d:77:b9:96:7b:
5f:18:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:06:41 2025 by rpki-client