This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/323830333a346365303a3a2f33322d3332203d3e20323639393035.roa
File: 323830333a346365303a3a2f33322d3332203d3e20323639393035.roa (raw, json)
Hash identifier: DtyZiyoF2BCQlWYMvTvscSNZz/yPxjhnm3VkLiH033I=
Subject key identifier: F3:68:6D:6E:84:48:9E:24:04:42:DE:4C:9B:E2:CE:A1:9D:62:B5:A3
Certificate issuer: /CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
Certificate serial: 519836F83F0AEE04034DA5B877FDBB27F7E7889E
Authority key identifier: BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/323830333a346365303a3a2f33322d3332203d3e20323639393035.roa
Signing time: Tue 06 Jan 2026 20:48:53 +0000
ROA not before: Tue 06 Jan 2026 20:43:53 +0000
ROA not after: Tue 05 Jan 2027 20:48:53 +0000
asID: 269905
IP address blocks: 2803:4ce0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl
rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:98:36:f8:3f:0a:ee:04:03:4d:a5:b8:77:fd:bb:27:f7:e7:88:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
Validity
Not Before: Jan 6 20:43:53 2026 GMT
Not After : Jan 5 20:48:53 2027 GMT
Subject: CN=F3686D6E84489E240442DE4C9BE2CEA19D62B5A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:12:54:43:94:d9:46:eb:a0:9b:02:7f:51:
c6:d7:59:df:15:72:33:e4:c9:45:24:27:5a:37:d3:
1b:c4:44:97:73:31:f4:e4:04:3c:77:ae:29:5f:d7:
42:42:c1:7d:b6:6f:ca:5a:c6:0b:78:e6:f1:7d:5e:
75:b7:fc:91:8b:8d:fc:5e:45:0e:e5:a1:cc:bd:a2:
3e:61:2b:da:7b:0a:8e:dd:63:b0:5e:47:f8:64:a6:
b6:54:2b:0d:8f:d3:20:6a:c4:76:6d:61:4d:d0:87:
9e:bb:c3:03:02:f3:3b:e6:e9:d2:45:48:a0:fa:54:
10:75:42:02:1d:26:36:e5:63:5c:54:e0:f3:ac:1c:
68:72:6e:f2:77:b2:6c:90:07:b3:fb:8f:35:3a:0f:
26:9c:84:5f:9e:c4:39:9e:fb:11:c2:15:d4:d7:1a:
d5:3c:8f:ee:b8:25:9d:fb:00:1c:e8:83:a6:fb:1f:
98:2d:cf:33:37:30:50:66:07:c4:c3:0d:ef:8c:1d:
7c:b9:15:9b:28:07:1b:23:82:ab:91:75:85:2a:f9:
62:05:54:8c:35:20:99:00:75:1c:f0:f5:d9:c5:5e:
d4:87:65:5a:35:da:05:b0:f6:8c:02:66:b9:a7:cc:
e6:da:ca:76:86:bd:a1:a5:2a:24:79:64:e8:e1:d6:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:68:6D:6E:84:48:9E:24:04:42:DE:4C:9B:E2:CE:A1:9D:62:B5:A3
X509v3 Authority Key Identifier:
keyid:BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/323830333a346365303a3a2f33322d3332203d3e20323639393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4ce0::/32
Signature Algorithm: sha256WithRSAEncryption
40:f4:45:fb:c1:4b:4e:16:47:c0:6d:58:0c:cc:e5:d4:d6:e6:
f8:ef:b4:20:be:2c:1a:f4:e0:6c:e8:e7:a3:c1:de:48:fe:d8:
6d:34:74:90:4e:f5:5a:3e:d2:48:47:25:00:7c:63:75:c0:ab:
2b:11:fb:1a:b4:99:9e:a6:03:b9:4f:2f:00:0c:b2:6e:8a:f2:
4a:12:84:51:7f:2e:2d:e8:ef:36:a0:9c:b7:11:0b:a5:19:03:
e0:00:7f:5e:4e:be:ec:ed:c3:84:be:ea:49:f3:26:a5:05:14:
59:66:b2:2d:09:7e:04:79:62:0d:d1:3a:7b:8c:d5:e0:a8:bf:
c5:34:a6:e1:95:88:3e:1c:aa:64:2c:b0:bb:6e:b8:0a:44:c1:
06:90:71:bc:09:ad:49:e1:b4:aa:69:b8:8b:94:c4:ce:9c:bb:
13:c2:59:c1:49:b8:93:17:d6:66:49:8b:8b:4d:f9:c1:86:0d:
3d:c4:3a:ca:24:1b:19:c8:ef:6e:4a:86:91:03:70:08:e6:61:
fa:f4:f9:38:ac:21:8c:3e:4f:96:7d:02:26:75:81:38:39:37:
b6:b6:8e:04:40:82:12:bc:d1:55:67:1e:fe:39:1b:dd:6b:4d:
ed:03:cc:20:60:f9:c9:d3:42:04:b0:d1:3f:30:24:96:a3:36:
6b:69:07:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:46:27 2026 by rpki-client