This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/323830333a396539303a393030303a3a2f33362d3336203d3e20323732393231.roa
File: 323830333a396539303a393030303a3a2f33362d3336203d3e20323732393231.roa (raw, json)
Hash identifier: 2NfUSEDbuSlmOt8cPMTll2qhvv6GoQYKACyrmjoTzhs=
Subject key identifier: F6:7D:70:E7:A3:6F:76:DC:05:C5:8D:92:E1:65:36:EE:F0:47:19:E9
Certificate issuer: /CN=9AAD2F02A801741992977CEB681E0BF3863AF511
Certificate serial: 6DD87BED0239B7A5FF510797BEC1BC7A291F8785
Authority key identifier: 9A:AD:2F:02:A8:01:74:19:92:97:7C:EB:68:1E:0B:F3:86:3A:F5:11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AAD2F02A801741992977CEB681E0BF3863AF511.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/323830333a396539303a393030303a3a2f33362d3336203d3e20323732393231.roa
Signing time: Tue 27 Jan 2026 16:27:46 +0000
ROA not before: Tue 27 Jan 2026 16:22:46 +0000
ROA not after: Tue 26 Jan 2027 16:27:46 +0000
asID: 272921
IP address blocks: 2803:9e90:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.crl
rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AAD2F02A801741992977CEB681E0BF3863AF511.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d8:7b:ed:02:39:b7:a5:ff:51:07:97:be:c1:bc:7a:29:1f:87:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AAD2F02A801741992977CEB681E0BF3863AF511
Validity
Not Before: Jan 27 16:22:46 2026 GMT
Not After : Jan 26 16:27:46 2027 GMT
Subject: CN=F67D70E7A36F76DC05C58D92E16536EEF04719E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ea:90:87:88:bc:a7:d0:38:6d:25:a5:00:8b:
8f:d5:0e:d0:76:67:fb:06:34:14:3f:24:e8:2d:1c:
c3:b6:cc:69:a9:80:18:d1:34:08:3d:66:e8:41:4f:
64:79:3a:54:d5:90:af:7d:3f:1a:d2:e6:52:77:d3:
ed:52:a3:23:85:88:33:11:1f:e3:ab:a1:38:ea:47:
59:b1:8d:a9:50:b2:ce:9d:ad:90:32:2c:92:62:a2:
3e:93:22:af:ca:75:9f:ff:59:bc:5d:76:84:2e:f3:
8c:a8:89:06:f6:99:f0:62:e7:79:53:7f:3d:f7:94:
97:f2:77:94:13:f2:6c:87:a1:d0:aa:f4:21:b9:4e:
ca:43:3c:08:19:a2:9e:03:1e:65:f1:cd:03:88:94:
61:8c:d3:ea:00:ee:22:9d:d3:23:aa:29:62:eb:85:
0e:d5:7c:c7:c2:10:d8:ef:d4:83:a3:02:3b:03:f4:
ab:fb:bf:0a:64:ce:ed:32:61:e3:aa:dc:44:b2:72:
d6:5a:1a:33:27:99:8c:db:25:8b:25:a3:f0:01:a0:
49:19:64:1a:82:11:e6:85:38:ef:4a:f6:9c:da:d1:
d6:36:b0:d6:a3:40:84:07:a6:d5:c0:9e:5a:d8:bf:
89:32:a8:52:e6:30:03:93:86:cb:6a:ab:8e:6f:4e:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7D:70:E7:A3:6F:76:DC:05:C5:8D:92:E1:65:36:EE:F0:47:19:E9
X509v3 Authority Key Identifier:
keyid:9A:AD:2F:02:A8:01:74:19:92:97:7C:EB:68:1E:0B:F3:86:3A:F5:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AAD2F02A801741992977CEB681E0BF3863AF511.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/323830333a396539303a393030303a3a2f33362d3336203d3e20323732393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9e90:9000::/36
Signature Algorithm: sha256WithRSAEncryption
52:8e:1d:1b:17:39:af:88:00:26:f2:5a:32:78:18:25:41:93:
ea:53:e1:69:5c:00:00:67:2d:86:10:3e:10:76:fe:21:66:23:
f2:61:00:70:b1:bf:55:3d:6a:be:ee:a1:e6:7c:3d:6f:8b:14:
e8:2f:f1:41:ed:d5:f1:f7:f1:e8:37:e2:5a:c4:e0:2f:2b:3d:
f9:c4:fd:b1:13:6f:f0:f3:75:e1:b0:0c:0a:bc:da:14:a9:ed:
e8:c3:76:f1:84:11:43:18:15:89:b7:a3:ee:c3:b5:40:51:04:
79:86:02:24:83:60:7c:b4:fe:9f:a4:a6:7b:d1:60:47:b8:4f:
36:c3:91:c5:ff:2d:66:db:df:9f:af:ee:3a:91:7a:17:a8:0e:
84:32:73:c2:d5:d0:50:f0:6e:d3:fa:00:79:15:1f:e6:0b:76:
15:04:32:bb:45:d1:ef:27:50:b2:a2:da:be:ae:f7:8c:af:35:
f5:e5:1f:f1:71:b4:87:d7:f2:33:a1:00:fc:f6:f8:7f:b4:81:
9d:64:2a:b8:26:27:67:ae:97:f9:69:54:8b:34:23:a4:e6:76:
88:67:3a:e1:c7:95:61:09:45:92:3a:df:2f:e0:bf:c5:91:34:
4c:b9:07:6e:ef:fe:2c:4e:7c:13:d3:e8:0f:21:9a:2e:11:d7:
e2:ed:65:fe
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUbdh77QI5t6X/UQeXvsG8eikfh4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFBRDJGMDJBODAxNzQxOTkyOTc3Q0VCNjgxRTBCRjM4
NjNBRjUxMTAeFw0yNjAxMjcxNjIyNDZaFw0yNzAxMjYxNjI3NDZaMDMxMTAvBgNV
BAMTKEY2N0Q3MEU3QTM2Rjc2REMwNUM1OEQ5MkUxNjUzNkVFRjA0NzE5RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG6pCHiLyn0DhtJaUAi4/VDtB2
Z/sGNBQ/JOgtHMO2zGmpgBjRNAg9ZuhBT2R5OlTVkK99PxrS5lJ30+1SoyOFiDMR
H+OroTjqR1mxjalQss6drZAyLJJioj6TIq/KdZ//WbxddoQu84yoiQb2mfBi53lT
fz33lJfyd5QT8myHodCq9CG5TspDPAgZop4DHmXxzQOIlGGM0+oA7iKd0yOqKWLr
hQ7VfMfCENjv1IOjAjsD9Kv7vwpkzu0yYeOq3ESyctZaGjMnmYzbJYslo/ABoEkZ
ZBqCEeaFOO9K9pza0dY2sNajQIQHptXAnlrYv4kyqFLmMAOThstqq45vTnMLAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU9n1w56NvdtwFxY2S4WU27vBHGekwHwYDVR0j
BBgwFoAUmq0vAqgBdBmSl3zraB4L84Y69REwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjA0MTRBNjkwQzYzOThENUM1Njc1RDVCQjYwRjM5RDE1
ODhBMTNGMDAzODgxNjcxRTU4NzQ1OTY1NDc1Rjc1LzAvOUFBRDJGMDJBODAxNzQx
OTkyOTc3Q0VCNjgxRTBCRjM4NjNBRjUxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QUFEMkYwMkE4MDE3NDE5OTI5
NzdDRUI2ODFFMEJGMzg2M0FGNTExLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYwNDE0QTY5MEM2Mzk4RDVDNTY3NUQ1QkI2MEYzOUQxNTg4QTEzRjAw
Mzg4MTY3MUU1ODc0NTk2NTQ3NUY3NS8wLzMyMzgzMDMzM2EzOTY1MzkzMDNhMzkz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzOTMyMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA56QkDANBgkqhkiG9w0BAQsFAAOCAQEAUo4dGxc5r4gAJvJaMngYJUGT
6lPhaVwAAGcthhA+EHb+IWYj8mEAcLG/VT1qvu6h5nw9b4sU6C/xQe3V8ffx6Dfi
WsTgLys9+cT9sRNv8PN14bAMCrzaFKnt6MN28YQRQxgVibej7sO1QFEEeYYCJINg
fLT+n6Sme9FgR7hPNsORxf8tZtvfn6/uOpF6F6gOhDJzwtXQUPBu0/oAeRUf5gt2
FQQyu0XR7ydQsqLavq73jK819eUf8XG0h9fyM6EA/Pb4f7SBnWQquCYnZ66X+WlU
izQjpOZ2iGc64ceVYQlFkjrfL+C/xZE0TLkHbu/+LE58E9PoDyGaLhHX4u1l/g==
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:06:24 2026 by rpki-client