This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/323830333a313130303a3a2f33322d3332203d3e203630303232.roa
File: 323830333a313130303a3a2f33322d3332203d3e203630303232.roa (raw, json)
Hash identifier: 1QYF1gd7EtQTiZYNo99NbpZ2/Hz61PflT5ZDSx6bVls=
Subject key identifier: 29:0C:4B:83:4A:A3:48:26:69:8F:B9:7D:71:F0:54:24:4A:A9:71:84
Certificate issuer: /CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
Certificate serial: 652F4C5E4936755C5CD658E7B52968385A94B651
Authority key identifier: 32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/323830333a313130303a3a2f33322d3332203d3e203630303232.roa
Signing time: Tue 06 Jan 2026 19:22:28 +0000
ROA not before: Tue 06 Jan 2026 19:17:28 +0000
ROA not after: Tue 05 Jan 2027 19:22:28 +0000
asID: 60022
IP address blocks: 2803:1100::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl
rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 00:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2f:4c:5e:49:36:75:5c:5c:d6:58:e7:b5:29:68:38:5a:94:b6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
Validity
Not Before: Jan 6 19:17:28 2026 GMT
Not After : Jan 5 19:22:28 2027 GMT
Subject: CN=290C4B834AA34826698FB97D71F054244AA97184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:e0:3d:4b:bb:db:ab:30:57:2c:08:ac:b4:
5a:9c:be:dc:e1:01:d3:55:3d:af:17:c0:e1:9e:5a:
1d:a9:3e:d3:9a:09:ef:89:e1:61:32:d6:be:e2:97:
79:5a:43:25:91:ff:3c:43:0d:ba:60:8f:7b:70:3e:
82:b8:5a:4b:e4:b2:d9:ee:ce:53:fa:5e:ab:97:a0:
05:48:69:9f:f4:ab:30:7b:d3:c4:3e:4d:17:0d:a5:
00:fc:b6:09:8b:58:c8:1d:bf:87:e7:a6:9d:22:96:
ce:4a:f8:6d:4a:ef:6d:fb:e3:52:84:6d:aa:47:43:
d2:b2:95:77:c5:9d:3f:fe:8a:ff:a6:f1:39:6b:2f:
57:d4:b8:36:cf:96:91:14:22:b9:b6:6f:6c:09:c2:
b6:69:94:c5:da:4a:59:2b:5d:92:d2:d8:eb:42:a7:
1b:04:8f:7a:94:3c:01:62:1c:8b:de:5d:d5:dd:17:
b7:4e:c9:33:40:09:f3:37:fe:b3:70:9e:b4:89:83:
6f:c6:3d:b1:52:2e:a7:8d:8d:66:89:f0:d5:e2:95:
73:8c:8c:1e:f5:22:6d:bf:e1:1f:2a:1d:40:c6:ed:
cf:98:4a:f6:4a:cd:70:b7:75:fa:3c:7d:13:b6:f0:
9c:6c:bc:26:40:d7:bd:13:e9:06:ec:02:3a:25:da:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:4B:83:4A:A3:48:26:69:8F:B9:7D:71:F0:54:24:4A:A9:71:84
X509v3 Authority Key Identifier:
keyid:32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/323830333a313130303a3a2f33322d3332203d3e203630303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1100::/32
Signature Algorithm: sha256WithRSAEncryption
19:05:70:94:72:96:83:b2:c9:3c:0a:49:51:b6:52:ba:49:72:
4f:37:16:63:b3:29:e9:f3:b1:1c:3e:32:ee:59:17:ac:c4:70:
90:0e:32:f7:91:39:b9:0a:7c:87:72:01:ae:65:09:d9:f6:ed:
4a:30:3e:54:13:0e:37:d5:14:37:7b:03:76:5c:97:8b:26:35:
12:31:3d:40:4d:58:3c:a7:28:62:b0:b3:a4:02:9c:98:18:43:
78:fc:64:47:70:e4:43:ad:e3:10:46:bf:12:70:5e:e7:32:2b:
5b:31:a2:7f:71:79:57:35:b8:77:0d:53:3b:07:a8:41:27:4c:
9b:df:3f:a3:4f:0f:6d:ba:19:6e:cb:ac:0f:20:b7:71:41:d9:
2f:2f:04:62:e4:e3:14:45:61:b1:11:f2:f0:bc:ed:a5:5a:86:
24:c4:53:f5:a2:ef:34:8b:06:ab:78:3d:13:0e:5c:cf:ec:b6:
a4:67:1a:ba:46:b2:2f:65:bc:d8:9f:39:0d:67:fd:cc:05:e2:
87:1c:ce:f9:b9:89:d9:a8:a2:5c:3e:5b:ee:70:fa:bf:13:30:
b9:cb:64:c2:18:f5:fb:32:83:43:d1:a0:bd:c5:46:0a:d6:d0:
ec:e3:5d:f1:14:4c:0b:fd:d3:c3:0f:98:84:64:66:e3:02:21:
04:e7:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:12:57 2026 by rpki-client