This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353330303a3a2f34342d3434203d3e20323733393537.roa
File: 323830333a376635303a353330303a3a2f34342d3434203d3e20323733393537.roa (raw, json)
Hash identifier: 74cDjybZy2PkAYims27L3shrVxrdIgeHFUlC0AE2qdM=
Subject key identifier: 68:68:8C:CD:FC:12:0B:0A:28:EB:E9:C3:3D:49:FB:25:B5:2C:A7:CB
Certificate issuer: /CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
Certificate serial: 7A57004C86E1C7E07AE95280EFF8BBBF9C04BA7B
Authority key identifier: F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353330303a3a2f34342d3434203d3e20323733393537.roa
Signing time: Fri 07 Nov 2025 21:40:00 +0000
ROA not before: Fri 07 Nov 2025 21:35:00 +0000
ROA not after: Fri 06 Nov 2026 21:40:00 +0000
asID: 273957
IP address blocks: 2803:7f50:5300::/44 maxlen: 44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl
rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 12:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:57:00:4c:86:e1:c7:e0:7a:e9:52:80:ef:f8:bb:bf:9c:04:ba:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F390031CA03915A9B3D5820F0AAA4533AA219D46
Validity
Not Before: Nov 7 21:35:00 2025 GMT
Not After : Nov 6 21:40:00 2026 GMT
Subject: CN=68688CCDFC120B0A28EBE9C33D49FB25B52CA7CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:8b:af:d4:1a:c1:93:fa:7c:78:e3:cc:78:
ef:39:c9:fa:d7:dc:b6:24:7c:a4:c7:b2:36:54:5a:
25:e5:59:ff:c4:e5:3a:b0:48:4d:f3:e4:74:86:58:
a2:27:3c:c9:ce:fe:f2:8c:83:46:f8:87:f8:f1:3c:
70:8e:e3:0a:7d:70:60:54:f5:55:04:3d:d5:55:3b:
5b:09:a0:78:16:0e:77:4b:54:57:1c:09:21:7a:f9:
fb:7f:ac:f6:b7:e4:b9:3e:75:f6:bd:57:1d:82:71:
7e:99:70:51:25:4f:ef:7a:25:1e:30:b2:e7:26:f3:
43:29:a2:b5:d7:a1:77:c2:be:cf:51:fe:3e:56:29:
17:97:b6:0a:79:ca:e2:0b:c6:e2:10:db:b1:8f:45:
89:14:f9:cd:5a:5a:de:b1:94:b5:7c:e9:74:e2:02:
f4:f5:b3:c5:b7:77:85:01:95:84:2c:b4:9f:fc:a6:
66:ca:8d:72:90:bc:04:09:23:c9:36:e1:70:0c:82:
27:6d:b1:4a:6e:71:2c:45:05:16:36:75:df:f3:aa:
83:c2:60:49:fd:cf:34:9c:cd:c7:45:ee:61:a6:04:
18:a5:f0:8d:8f:93:56:99:0f:51:7e:70:5f:0f:33:
23:69:b5:06:87:8b:3d:6c:52:43:b9:f6:29:ef:a6:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:68:8C:CD:FC:12:0B:0A:28:EB:E9:C3:3D:49:FB:25:B5:2C:A7:CB
X509v3 Authority Key Identifier:
keyid:F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/323830333a376635303a353330303a3a2f34342d3434203d3e20323733393537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7f50:5300::/44
Signature Algorithm: sha256WithRSAEncryption
a1:cf:bb:1a:ab:2d:21:31:13:f4:a8:e0:83:b8:4f:e4:ca:21:
07:44:da:8d:d3:3c:21:69:6c:fd:e6:36:78:dd:bc:04:54:87:
e2:32:3a:f1:6d:16:5d:aa:fc:43:67:05:4b:9a:9a:84:0f:b6:
ea:3a:37:9c:47:fa:a6:e6:9e:90:b0:1d:c2:bb:14:1d:5e:0e:
fb:74:4d:a1:d0:a0:5b:7f:66:24:58:a7:93:96:f6:fd:73:5c:
fc:ee:64:e6:56:78:00:c3:f0:13:a9:8e:1b:05:a6:91:75:57:
7f:b7:a8:d8:9c:2e:cb:0e:95:d0:19:12:2d:c5:49:07:f8:ef:
2b:de:4c:3b:e4:c2:5c:8b:40:59:15:74:58:95:09:d0:71:b2:
cb:bc:00:46:6f:85:94:2e:c3:7b:2d:da:98:01:4a:05:1a:8a:
1b:38:69:10:0a:5f:73:3a:33:5b:5d:bf:43:38:e9:4d:c7:9e:
a1:40:56:5c:fc:7d:5c:69:6b:00:13:fb:ba:b4:2f:c5:e5:2f:
b4:f0:7c:76:01:af:e6:76:56:e0:25:09:71:5a:a8:89:53:29:
58:15:3a:89:f9:e9:2b:0a:a3:8c:4b:e9:e6:3c:a9:b6:ac:d5:
ab:c8:14:be:fe:d4:45:ce:db:45:8a:f7:18:63:f6:cc:5d:48:
75:b1:a8:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:08:45 2025 by rpki-client