This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa
File: 323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier: LgUeRNM6Fr4KkTILRqsj+pfzrQm6GxYGUA3VvMaFsA8=
Subject key identifier: 99:0A:28:30:C0:87:C8:19:86:DD:44:0E:1F:65:F5:C1:89:6A:99:CC
Certificate issuer: /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial: 3F915643A4EABDB03C81A521D0D98960124EDEFE
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa
Signing time: Tue 06 Jan 2026 20:53:47 +0000
ROA not before: Tue 06 Jan 2026 20:48:47 +0000
ROA not after: Tue 05 Jan 2027 20:53:47 +0000
asID: 269809
IP address blocks: 2803:c4e0:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:91:56:43:a4:ea:bd:b0:3c:81:a5:21:d0:d9:89:60:12:4e:de:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Validity
Not Before: Jan 6 20:48:47 2026 GMT
Not After : Jan 5 20:53:47 2027 GMT
Subject: CN=990A2830C087C81986DD440E1F65F5C1896A99CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:e8:16:f2:6a:ec:26:25:11:c1:b6:32:9c:
01:8e:a4:cf:34:e2:77:76:30:55:32:f5:d1:63:91:
cd:9e:1b:5e:5e:4e:20:78:9a:1b:30:01:77:48:f8:
27:6b:66:99:55:a5:13:b5:64:4a:4e:4b:bb:4f:8a:
ca:72:15:2b:0f:2d:33:07:76:d8:00:63:d9:83:fe:
e7:c8:2f:45:10:07:b3:1a:73:16:48:9e:b0:45:c9:
51:aa:d1:45:c3:f5:b5:99:68:73:1e:a2:6c:1c:38:
d0:24:9e:98:b4:24:72:08:30:24:1a:18:62:c8:e8:
2c:52:be:40:9f:30:d2:73:81:63:b2:68:12:ff:cf:
73:14:7e:c5:01:61:5d:15:c7:23:63:98:89:ad:79:
c3:61:0c:66:d1:43:45:8e:a1:00:91:e0:48:90:7b:
2c:dd:b2:da:44:c1:92:51:8c:73:1a:2f:9e:5d:70:
79:db:e8:63:c0:bf:7c:cd:1c:33:74:12:b8:b8:b9:
8f:da:4b:51:4d:47:f7:fb:f3:92:96:a3:fe:d2:32:
f2:99:0e:64:a1:99:b8:a8:67:c4:b3:c6:73:dc:fd:
e0:8c:5a:85:66:e3:71:9b:4b:ce:71:c7:bb:8c:ae:
2f:e9:1b:09:21:cf:af:94:b9:da:0c:a9:ea:77:a0:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:28:30:C0:87:C8:19:86:DD:44:0E:1F:65:F5:C1:89:6A:99:CC
X509v3 Authority Key Identifier:
keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a653030303a3a2f33362d3336203d3e20323639383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c4e0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
2d:dd:cd:59:11:e3:36:93:57:c8:57:b6:84:21:5e:10:0d:04:
a8:b9:14:b5:87:81:2b:fe:bb:b5:20:bc:d8:c3:f3:e4:d5:cb:
f8:1a:9b:c0:f5:a1:ba:b5:de:2a:fe:99:ca:f7:91:a6:93:50:
06:93:12:c6:eb:68:fa:63:b2:18:74:38:4b:c4:68:cd:48:d6:
6b:f9:28:19:c4:ee:69:e2:2b:54:fc:36:2b:86:d4:93:09:eb:
20:07:9c:7e:5f:33:dc:75:21:c5:16:fe:06:7c:98:e8:21:0c:
f4:6e:7f:06:b1:85:1c:24:a6:32:ea:41:8b:d2:28:e1:19:6b:
c9:84:7f:44:7f:8e:af:be:48:0c:83:d8:1c:aa:09:e8:b3:73:
38:ea:69:ee:87:67:84:fb:ba:10:51:6e:c8:60:88:3c:df:50:
29:6d:3b:7e:09:f1:56:96:9f:47:7b:f0:ab:ff:1a:cd:96:83:
b2:7c:2b:58:aa:05:62:7b:8f:4a:0e:99:ce:de:b9:71:84:d1:
5f:28:22:b7:6c:eb:cc:83:95:41:ef:5b:40:7e:bc:e8:5b:23:
ed:5d:4b:50:ca:aa:c8:dc:fd:8c:d0:8f:29:73:d9:9a:d0:b8:
3f:67:fd:d2:26:03:f0:8d:66:d7:d7:fb:58:e3:44:3b:42:14:
10:b7:52:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 13 02:59:06 2026 by rpki-client