This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a373030303a3a2f33362d3336203d3e20323639373832.roa
File: 323830333a323336303a373030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier: oQlia0HzyzuTd0tZytLky40SYY4ZWUxKfxqiIA3ZL4w=
Subject key identifier: E7:CB:59:6F:31:7D:DC:E4:3E:A1:4F:BF:EB:5A:F5:F6:F7:74:E8:C4
Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial: 76AE3442EA119D9EC2F9F146F1E3FED9EC00CD42
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a373030303a3a2f33362d3336203d3e20323639373832.roa
Signing time: Tue 06 Jan 2026 19:12:21 +0000
ROA not before: Tue 06 Jan 2026 19:07:21 +0000
ROA not after: Tue 05 Jan 2027 19:12:21 +0000
asID: 269782
IP address blocks: 2803:2360:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 03:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ae:34:42:ea:11:9d:9e:c2:f9:f1:46:f1:e3:fe:d9:ec:00:cd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Validity
Not Before: Jan 6 19:07:21 2026 GMT
Not After : Jan 5 19:12:21 2027 GMT
Subject: CN=E7CB596F317DDCE43EA14FBFEB5AF5F6F774E8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:41:f8:fd:62:d4:f3:68:68:a7:15:f4:1b:
30:20:a6:01:b1:2c:6c:7c:43:1d:d5:b3:8f:a6:90:
13:95:b9:db:bb:1c:0b:72:89:4c:da:a6:45:ce:ef:
f0:d0:ef:75:f4:07:05:40:47:c8:14:29:a9:a0:42:
34:10:93:ce:75:27:ff:ae:8e:04:4b:a3:a4:de:94:
03:b5:a4:8b:1c:86:8e:a0:55:02:68:da:2f:c4:19:
54:b8:93:2e:70:66:81:68:7a:8e:63:0d:09:60:1e:
83:e0:74:a6:48:83:7a:a1:e0:5c:9c:eb:0c:c6:23:
9b:98:bb:ab:83:44:90:f0:f6:90:d4:51:70:f2:c3:
45:fe:23:a3:a9:4c:cb:2e:cb:31:c8:17:ba:27:99:
e7:ff:dd:cb:6e:77:6f:3c:f6:ac:98:96:3a:60:ce:
a9:c9:f4:79:4c:49:64:33:48:9a:fb:99:0f:26:1d:
7f:25:4a:8e:4b:9d:d4:a4:9f:2e:6e:6a:23:ec:16:
4b:e7:5c:8f:ac:85:30:eb:b0:32:fe:b1:2c:62:9f:
fb:2d:e8:f7:0a:33:a3:1e:44:1d:03:d6:36:eb:e4:
35:df:48:67:83:d0:2e:37:d6:0d:4e:eb:6a:44:6c:
84:7c:c9:17:58:e5:9f:ef:93:b0:50:80:e2:3d:6b:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CB:59:6F:31:7D:DC:E4:3E:A1:4F:BF:EB:5A:F5:F6:F7:74:E8:C4
X509v3 Authority Key Identifier:
keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a373030303a3a2f33362d3336203d3e20323639373832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2360:7000::/36
Signature Algorithm: sha256WithRSAEncryption
58:25:e7:bb:2e:61:13:6a:e3:22:bb:e9:d3:40:57:c6:49:d7:
8d:d8:5d:35:4b:99:13:e9:a9:5b:08:84:e8:0c:94:2b:70:7e:
ec:1f:54:b6:fc:cd:79:96:3d:ab:13:05:0d:42:46:d0:d6:c4:
8e:c7:e4:ca:96:b8:c7:ee:90:08:61:33:3b:35:da:8a:c8:95:
0f:d3:9a:b0:9d:e9:c1:9f:ba:46:eb:bd:96:62:36:e3:ae:29:
ea:7d:30:7c:6a:0c:55:db:f5:4c:fd:77:23:c4:cf:d6:bf:f9:
a0:ee:d5:3b:69:a2:22:1c:04:91:ad:9f:f2:62:f9:d8:ee:bc:
75:9b:0b:c0:a8:b8:e6:28:26:53:43:1e:61:5e:e9:40:9e:94:
e0:c4:a9:0f:77:70:eb:17:33:33:ac:1c:d5:dc:66:d7:5c:e6:
0e:b4:23:da:90:80:c1:ed:44:d9:36:35:0d:1e:d0:96:01:b9:
03:5e:72:d3:c6:ab:9a:e3:dd:98:04:d4:72:07:f6:a9:af:30:
f6:5d:5c:55:ae:aa:16:49:fa:7b:29:ff:76:c3:47:d2:d0:35:
8f:d3:b8:b5:e7:7d:3f:47:6c:d9:60:16:a7:94:bb:ea:86:00:
ea:77:04:26:b2:6c:3c:03:eb:15:7e:02:07:56:b2:58:8c:a0:
cf:dd:f9:b8
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUdq40QuoRnZ7C+fFG8eP+2ewAzUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix
QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjFaFw0yNzAxMDUxOTEyMjFaMDMxMTAvBgNV
BAMTKEU3Q0I1OTZGMzE3RERDRTQzRUExNEZCRkVCNUFGNUY2Rjc3NEU4QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BkH4/WLU82hopxX0GzAgpgGx
LGx8Qx3Vs4+mkBOVudu7HAtyiUzapkXO7/DQ73X0BwVAR8gUKamgQjQQk851J/+u
jgRLo6TelAO1pIscho6gVQJo2i/EGVS4ky5wZoFoeo5jDQlgHoPgdKZIg3qh4Fyc
6wzGI5uYu6uDRJDw9pDUUXDyw0X+I6OpTMsuyzHIF7onmef/3ctud2889qyYljpg
zqnJ9HlMSWQzSJr7mQ8mHX8lSo5LndSkny5uaiPsFkvnXI+shTDrsDL+sSxin/st
6PcKM6MeRB0D1jbr5DXfSGeD0C431g1O62pEbIR8yRdY5Z/vk7BQgOI9a6yDAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU58tZbzF93OQ+oU+/61r19vd06MQwHwYDVR0j
BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD
RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE
MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2
RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5
MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhMzcz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoAyNgcDANBgkqhkiG9w0BAQsFAAOCAQEAWCXnuy5hE2rjIrvp00BXxknX
jdhdNUuZE+mpWwiE6AyUK3B+7B9UtvzNeZY9qxMFDUJG0NbEjsfkypa4x+6QCGEz
OzXaisiVD9OasJ3pwZ+6Ruu9lmI2464p6n0wfGoMVdv1TP13I8TP1r/5oO7VO2mi
IhwEka2f8mL52O68dZsLwKi45igmU0MeYV7pQJ6U4MSpD3dw6xczM6wc1dxm11zm
DrQj2pCAwe1E2TY1DR7QlgG5A15y08armuPdmATUcgf2qa8w9l1cVa6qFkn6eyn/
dsNH0tA1j9O4ted9P0ds2WAWp5S76oYA6ncEJrJsPAPrFX4CB1ayWIygz935uA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 01:53:43 2026 by rpki-client