This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/323830363a3230663a3a2f33322d3332203d3e203238343038.roa
File: 323830363a3230663a3a2f33322d3332203d3e203238343038.roa (raw, json)
Hash identifier: A7j4KAwX7srdutgoA1bKp/garsAZLJz6waV122kpRdc=
Subject key identifier: BA:75:31:3A:66:97:FC:DC:21:CF:40:8D:88:42:BF:31:8D:4D:EE:64
Certificate issuer: /CN=FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2
Certificate serial: 37EA4C42D6ECDDDA817AA9E1695399031152DB8C
Authority key identifier: FC:23:9C:74:A9:FF:2A:74:84:22:66:8C:EC:9C:B0:3F:6D:9A:3F:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/323830363a3230663a3a2f33322d3332203d3e203238343038.roa
Signing time: Thu 20 Nov 2025 23:50:00 +0000
ROA not before: Thu 20 Nov 2025 23:45:00 +0000
ROA not after: Thu 19 Nov 2026 23:50:00 +0000
asID: 28408
IP address blocks: 2806:20f::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.crl
rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 15 Dec 2025 08:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ea:4c:42:d6:ec:dd:da:81:7a:a9:e1:69:53:99:03:11:52:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2
Validity
Not Before: Nov 20 23:45:00 2025 GMT
Not After : Nov 19 23:50:00 2026 GMT
Subject: CN=BA75313A6697FCDC21CF408D8842BF318D4DEE64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:38:08:4e:74:b8:1c:76:59:76:9c:d6:7a:81:
ad:3d:01:12:1e:36:6c:27:f6:e9:db:e8:7a:31:53:
5c:2e:13:20:df:5c:ab:eb:33:a2:a5:de:75:4b:93:
32:a4:f0:39:3a:c1:3f:e4:20:13:aa:5d:36:04:3f:
1c:4e:ab:21:39:11:60:e7:6d:1a:89:16:64:a7:7c:
9e:fb:ab:86:11:78:ed:68:d3:00:9c:bd:7c:1e:06:
05:54:bd:3e:ba:6e:54:6b:25:53:1a:be:f0:82:3d:
a4:7c:db:c0:c5:4e:81:8e:ac:99:90:e8:1b:0f:d8:
e7:56:1e:bd:f2:59:42:b0:df:b2:c8:7c:ab:74:55:
92:cc:da:c5:e1:df:94:69:a3:5d:b0:b7:66:3f:e8:
09:2a:98:70:cf:c9:28:f8:fe:35:ac:1c:a0:4e:5c:
1c:fb:ed:34:69:ef:b3:00:59:72:dd:62:e9:4b:09:
19:06:b2:52:9c:ba:1f:67:d9:0b:77:70:57:9d:fa:
1b:98:26:c3:e7:49:08:c3:3b:a3:64:1f:ea:3e:0b:
38:1c:ac:c0:a2:db:af:55:61:c7:78:d8:bf:27:f4:
80:a0:8b:ee:1d:6c:09:25:95:39:05:69:d9:96:00:
d6:d5:c0:1b:2d:2c:35:50:f3:ad:e2:0b:c0:8e:6e:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:75:31:3A:66:97:FC:DC:21:CF:40:8D:88:42:BF:31:8D:4D:EE:64
X509v3 Authority Key Identifier:
keyid:FC:23:9C:74:A9:FF:2A:74:84:22:66:8C:EC:9C:B0:3F:6D:9A:3F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC239C74A9FF2A748422668CEC9CB03F6D9A3FC2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/323830363a3230663a3a2f33322d3332203d3e203238343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:20f::/32
Signature Algorithm: sha256WithRSAEncryption
55:66:22:69:26:bb:12:39:c0:58:c2:75:d4:31:3c:be:48:b9:
9d:6a:f8:ac:73:46:c0:c1:82:b4:5d:3f:af:99:19:f3:b6:bf:
24:0a:04:c8:5d:46:8b:db:78:ad:98:06:d8:1a:86:75:c9:53:
1c:72:d4:92:6b:1a:c1:1c:c4:74:33:14:8e:86:00:90:8c:4d:
a3:e2:64:1e:82:6d:b6:9e:73:64:ea:18:cd:65:23:6f:22:4f:
ef:13:4e:3d:bd:e3:12:58:95:79:58:92:7b:b4:77:92:75:ca:
b7:8d:03:7c:d4:46:69:99:b8:c8:22:20:05:39:59:cd:90:76:
15:2b:5f:66:ec:58:ed:b6:98:1b:02:53:98:98:19:4b:be:b0:
be:0c:33:d7:05:4b:6d:29:7b:5d:bc:6b:80:da:fd:59:71:36:
3b:b4:85:32:84:fc:5f:b9:81:41:63:0a:b4:a8:2f:fd:f4:fe:
69:28:69:c7:ed:1c:d7:29:a4:be:f0:62:38:c7:25:fe:b7:fa:
11:3d:0c:21:62:c3:da:ae:f8:d7:7d:d2:d2:f3:e5:7d:c7:94:
b6:bd:8d:b2:4c:3e:8f:d4:35:59:6d:30:ca:bf:4f:a9:71:b1:
08:05:51:c3:3c:0f:b2:ee:aa:1e:8d:6f:a8:79:3a:99:bf:47:
7e:c3:d1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 11:59:37 2025 by rpki-client