This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/323830333a333635303a3a2f33322d3438203d3e20323733323038.roa
File: 323830333a333635303a3a2f33322d3438203d3e20323733323038.roa (raw, json)
Hash identifier: w7DUtVS/dEpirVcMXQdcPfC6zG74CFV1RXvfa1s7QZU=
Subject key identifier: 64:AF:A7:F0:2C:23:3D:99:93:3B:5D:A1:1A:F0:DC:38:85:A2:D4:F6
Certificate issuer: /CN=2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9
Certificate serial: 16A6386AC7CAE633AFEBBD6DC86BC42841EECF38
Authority key identifier: 2D:6E:02:9E:FD:DB:CA:B8:D0:BD:DD:E5:27:4D:B6:82:DD:41:54:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/323830333a333635303a3a2f33322d3438203d3e20323733323038.roa
Signing time: Mon 15 Dec 2025 22:50:00 +0000
ROA not before: Mon 15 Dec 2025 22:45:00 +0000
ROA not after: Mon 14 Dec 2026 22:50:00 +0000
asID: 273208
IP address blocks: 2803:3650::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl
rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 17:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a6:38:6a:c7:ca:e6:33:af:eb:bd:6d:c8:6b:c4:28:41:ee:cf:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9
Validity
Not Before: Dec 15 22:45:00 2025 GMT
Not After : Dec 14 22:50:00 2026 GMT
Subject: CN=64AFA7F02C233D99933B5DA11AF0DC3885A2D4F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:f0:6e:0a:f8:e1:0f:f0:66:16:a0:f3:29:
56:48:66:16:21:9d:f0:b9:d5:c1:99:70:3f:d9:54:
0a:97:0d:2b:ee:0d:09:5e:bb:1e:42:56:10:aa:9c:
9b:0b:4b:8f:6d:87:ba:e3:b4:01:b3:61:b0:df:6b:
c4:14:3d:f6:97:dc:f3:b6:43:5d:39:96:03:c8:22:
af:c0:ff:32:0a:18:92:f2:51:21:82:52:6a:76:30:
cf:8d:22:b5:31:f3:b0:0b:b1:9b:6d:33:76:bb:5c:
a2:90:04:9c:a5:5e:e8:60:43:28:d7:f9:7b:ac:27:
ca:f5:d3:ac:54:e1:3d:71:87:9a:ee:08:ff:61:87:
22:dd:ae:48:9d:a0:62:c7:33:62:aa:93:57:d4:f0:
ef:cb:c7:18:85:2d:6a:2b:75:f2:72:bb:07:c9:e2:
56:74:e1:0e:0c:19:f4:d2:85:18:20:db:81:5f:81:
cf:ed:5a:70:a6:77:af:f8:ca:74:97:70:c1:6f:5f:
b2:76:a5:df:93:43:b0:14:7f:76:4a:b3:46:bb:02:
77:3d:d7:52:7d:4c:73:03:7a:92:89:de:93:8b:3f:
cf:c4:82:76:d3:68:ff:06:99:69:ca:8c:d7:33:57:
5f:18:1d:aa:0d:1d:8b:2b:ed:f4:ea:cd:18:7e:16:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:A7:F0:2C:23:3D:99:93:3B:5D:A1:1A:F0:DC:38:85:A2:D4:F6
X509v3 Authority Key Identifier:
keyid:2D:6E:02:9E:FD:DB:CA:B8:D0:BD:DD:E5:27:4D:B6:82:DD:41:54:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/323830333a333635303a3a2f33322d3438203d3e20323733323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3650::/32
Signature Algorithm: sha256WithRSAEncryption
62:ba:b1:82:c4:45:c0:7f:5a:bb:c3:63:5b:52:6a:2d:d7:81:
be:37:e5:be:f7:6c:6a:07:2a:f5:74:da:d8:a6:54:28:6c:4a:
8b:64:3e:dd:9a:fd:da:93:a8:7a:b7:2b:9e:98:4c:36:b8:ae:
0b:45:4a:9b:69:64:4c:29:91:e4:8c:2c:f9:2a:fb:d4:09:ec:
2e:87:67:f2:59:e8:d2:90:97:bf:46:a3:c8:ae:48:34:25:2c:
ea:83:2a:cb:1c:85:4e:92:e2:f5:d7:7f:d6:98:72:fd:2a:25:
19:96:d7:f4:09:29:99:bf:6c:de:70:28:5e:46:8e:91:07:c3:
da:a8:32:6b:da:ad:97:a1:06:62:46:bc:11:8b:2e:b9:3a:f0:
b6:cd:2b:f3:e0:d5:f1:c9:79:4b:fb:03:9f:9a:45:00:34:90:
50:c1:3e:56:a2:f7:b9:0b:7e:a0:d0:bc:44:6d:2d:f2:a3:22:
3b:bb:70:0b:9f:a8:2d:10:7f:15:bd:2d:9f:71:1a:3a:76:da:
97:f2:b6:e4:15:9b:dc:50:cb:84:4d:12:a7:fa:8c:61:83:b4:
0e:dc:06:89:f1:3f:5d:42:db:4f:0a:ea:48:27:71:dd:da:c5:
90:bc:7b:d3:f7:b7:e1:43:26:b5:2f:10:e1:81:44:c4:48:d8:
28:48:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 07:38:10 2025 by rpki-client