This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4519DE198013F754ED09EE78FBA04ED83A6A9DD895D814E88968403623032AE/0/323830333a623833303a3a2f33322d3438203d3e20323733313731.roa
File: 323830333a623833303a3a2f33322d3438203d3e20323733313731.roa (raw, json)
Hash identifier: NnxvrABcHE59IJsChvOjWGoS/wahi0CG3V3TEXfKgB4=
Subject key identifier: AE:97:A7:A9:6D:A6:68:EB:BE:98:6F:46:F4:03:E9:28:32:AF:65:E5
Certificate issuer: /CN=86E4F783C6FB3230F690F5B1C852C045C6DDDB27
Certificate serial: 25F9D6A243CC4CA1D39BE91EC39B59ADBBEE4478
Authority key identifier: 86:E4:F7:83:C6:FB:32:30:F6:90:F5:B1:C8:52:C0:45:C6:DD:DB:27
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86E4F783C6FB3230F690F5B1C852C045C6DDDB27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D4519DE198013F754ED09EE78FBA04ED83A6A9DD895D814E88968403623032AE/0/323830333a623833303a3a2f33322d3438203d3e20323733313731.roa
Signing time: Thu 29 Jan 2026 17:40:00 +0000
ROA not before: Thu 29 Jan 2026 17:35:00 +0000
ROA not after: Thu 28 Jan 2027 17:40:00 +0000
asID: 273171
IP address blocks: 2803:b830::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D4519DE198013F754ED09EE78FBA04ED83A6A9DD895D814E88968403623032AE/0/86E4F783C6FB3230F690F5B1C852C045C6DDDB27.crl
rsync://repository.lacnic.net/rpki/lacnic/D4519DE198013F754ED09EE78FBA04ED83A6A9DD895D814E88968403623032AE/0/86E4F783C6FB3230F690F5B1C852C045C6DDDB27.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86E4F783C6FB3230F690F5B1C852C045C6DDDB27.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 14 Feb 2026 12:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f9:d6:a2:43:cc:4c:a1:d3:9b:e9:1e:c3:9b:59:ad:bb:ee:44:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86E4F783C6FB3230F690F5B1C852C045C6DDDB27
Validity
Not Before: Jan 29 17:35:00 2026 GMT
Not After : Jan 28 17:40:00 2027 GMT
Subject: CN=AE97A7A96DA668EBBE986F46F403E92832AF65E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:de:a7:56:c8:ee:ae:17:cc:41:78:e5:a4:
d2:61:4c:9f:6f:de:cd:2b:62:a6:fd:9b:90:e0:c8:
dd:03:ae:22:c3:7b:b4:3e:ef:f4:eb:77:c8:8d:f3:
4c:2d:b6:61:72:1c:f7:ad:d2:c1:46:09:0e:d0:b3:
52:73:2a:d7:ee:60:63:ee:1c:79:c2:99:de:75:97:
7a:e5:32:4e:21:4a:1f:5d:fa:32:a2:9b:4b:f0:7a:
fe:3d:60:ef:b9:f2:29:4b:d2:b6:a0:2a:12:10:8a:
26:69:76:ca:eb:21:87:c7:97:c5:c1:52:51:77:95:
a2:30:26:c9:45:64:c8:8a:a0:10:39:cc:05:8e:2a:
3b:ef:14:80:29:08:80:2a:8d:ba:4a:3d:c9:db:f3:
73:e0:09:f6:49:fd:37:10:d9:74:ea:bd:1a:66:84:
11:57:cb:2f:ea:0b:48:b4:8b:0b:16:aa:1b:69:d3:
52:5b:d4:98:a5:97:3d:19:c6:7a:9a:c3:e7:78:a8:
3d:6f:f6:4d:a0:e3:25:66:5d:02:76:2c:dc:65:8e:
62:94:aa:f3:65:fd:d3:b3:90:33:0b:db:30:b0:a2:
85:5f:4e:36:47:d1:18:01:8e:2e:25:0a:9a:f8:12:
b2:31:7c:97:1b:ef:ad:cf:5e:21:11:92:ae:eb:3a:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:97:A7:A9:6D:A6:68:EB:BE:98:6F:46:F4:03:E9:28:32:AF:65:E5
X509v3 Authority Key Identifier:
keyid:86:E4:F7:83:C6:FB:32:30:F6:90:F5:B1:C8:52:C0:45:C6:DD:DB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D4519DE198013F754ED09EE78FBA04ED83A6A9DD895D814E88968403623032AE/0/86E4F783C6FB3230F690F5B1C852C045C6DDDB27.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86E4F783C6FB3230F690F5B1C852C045C6DDDB27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4519DE198013F754ED09EE78FBA04ED83A6A9DD895D814E88968403623032AE/0/323830333a623833303a3a2f33322d3438203d3e20323733313731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b830::/32
Signature Algorithm: sha256WithRSAEncryption
79:aa:0f:53:78:e0:89:a2:93:cc:5f:21:2b:25:98:5d:a2:6c:
48:f3:04:1b:35:cb:a6:cb:10:3a:54:64:01:95:c2:97:f9:1a:
5f:29:10:6a:22:97:5e:8e:34:f3:0e:c7:cc:32:13:4d:c0:59:
f6:a2:a0:b4:8c:4d:2c:d1:b3:6a:33:2c:f6:ac:89:d3:d1:52:
35:1c:5a:12:7e:9c:29:63:bc:4c:28:b9:84:b8:c8:43:02:7b:
0b:af:4c:c0:be:31:6f:64:a5:94:23:03:58:74:0d:a3:94:c8:
7f:45:c5:db:4d:9e:33:ea:dd:3d:5a:5b:ee:41:b1:56:ab:34:
a7:2b:7a:4f:94:43:9e:9b:eb:85:8c:be:63:91:78:d0:07:53:
5b:0c:8e:b6:9f:63:d8:ed:4f:b3:70:ac:a9:e0:3f:1b:fe:f5:
30:e9:90:e3:f8:60:de:21:6d:04:3e:a3:d7:d4:ca:f9:c8:ab:
68:9a:95:79:17:0a:34:5f:49:17:3a:0f:4b:db:06:e0:81:a4:
38:fd:0c:56:40:47:bd:f0:31:34:4e:c4:5c:85:54:97:63:ee:
52:7c:66:e4:c6:6b:04:0b:b9:a8:f3:af:08:14:5e:64:b8:29:
cc:20:86:6c:8e:08:d1:31:da:9d:99:33:88:86:33:a4:66:90:
7f:b0:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:50:48 2026 by rpki-client