This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a333a3a2f36342d3634203d3e203532343538.roa
File: 323830333a3438303a333a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier: 55XmdyT2uCe3/lQe+rW4m4BsGAtwVWjdnGUqqttVw54=
Subject key identifier: 4D:89:83:0D:68:8E:BC:2D:01:F9:B5:04:75:97:1D:8C:97:BD:5B:7E
Certificate issuer: /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial: 44EF3BD3B04C24EC99B09542B4621B203A53A486
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a333a3a2f36342d3634203d3e203532343538.roa
Signing time: Tue 06 Jan 2026 19:19:47 +0000
ROA not before: Tue 06 Jan 2026 19:14:47 +0000
ROA not after: Tue 05 Jan 2027 19:19:47 +0000
asID: 52458
IP address blocks: 2803:480:3::/64 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Jan 2026 01:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ef:3b:d3:b0:4c:24:ec:99:b0:95:42:b4:62:1b:20:3a:53:a4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Validity
Not Before: Jan 6 19:14:47 2026 GMT
Not After : Jan 5 19:19:47 2027 GMT
Subject: CN=4D89830D688EBC2D01F9B50475971D8C97BD5B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:94:d5:ec:b6:65:25:57:63:f9:3a:ce:7a:
2a:2d:4a:e3:b3:f5:64:bd:58:56:9d:cb:29:b1:e9:
77:72:73:00:56:11:93:d9:34:3f:27:29:2b:fb:0a:
bb:14:2e:ef:bf:d6:ea:c7:92:50:d7:fe:b1:52:23:
e1:19:99:11:3d:56:90:91:c4:73:cc:4f:2d:a5:ac:
96:02:d7:33:b7:ce:9e:ef:b2:d2:44:24:60:be:60:
fb:b6:3d:d4:14:63:82:b3:41:57:19:75:22:44:d1:
35:64:aa:c5:04:78:fb:96:9c:76:34:2d:ed:98:bb:
49:a7:e7:a0:e8:2d:b3:7a:bf:0c:1b:53:7b:a9:96:
5a:82:87:3f:90:bd:ff:c3:39:d2:30:a0:8d:75:ff:
90:e9:cf:3a:93:24:73:02:c3:1e:43:39:1e:ac:51:
b5:b1:28:ed:9c:31:18:2f:9f:f8:38:0d:36:c1:c9:
2e:88:58:fe:46:bc:7b:97:cb:6a:24:cb:34:0a:2a:
da:fb:5f:bd:27:9a:a3:53:fc:0a:40:c3:07:ab:99:
bf:bb:d4:a5:91:2a:aa:db:84:69:de:61:13:67:1b:
d3:6b:9e:db:6f:a2:1d:b2:5c:28:54:11:ee:50:98:
23:e4:90:89:1a:60:25:ed:a7:de:3a:5e:c5:5e:ab:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:83:0D:68:8E:BC:2D:01:F9:B5:04:75:97:1D:8C:97:BD:5B:7E
X509v3 Authority Key Identifier:
keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a333a3a2f36342d3634203d3e203532343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:480:3::/64
Signature Algorithm: sha256WithRSAEncryption
80:2b:6a:f5:e5:68:59:67:18:6e:f6:16:81:6b:a8:e7:e2:25:
f7:e9:33:21:a3:f2:ce:c6:1d:01:77:20:e8:c8:ed:07:1a:b8:
5f:21:ee:52:4c:fe:08:0b:7e:4f:8f:f8:4e:bb:12:22:13:ef:
df:bf:03:e5:53:94:7a:3f:98:da:d5:dc:fc:9d:d3:51:51:6c:
d7:08:15:5d:83:c6:61:21:d2:84:55:5c:81:a6:32:0e:a6:1f:
27:06:39:8f:5c:d0:ec:96:29:ec:54:4a:50:08:18:62:7d:2c:
58:0d:78:19:ab:e6:0c:9a:03:06:65:43:75:1c:bc:5f:4f:1c:
c2:0e:2e:91:77:3c:74:41:b2:21:4d:47:49:bc:b6:81:62:47:
56:a7:03:4b:36:9f:7e:11:9d:e2:27:ca:fa:ac:44:a7:bc:e6:
d4:8b:a0:b8:ec:ac:22:92:2d:56:7a:e6:cd:0a:7d:95:ee:45:
7a:aa:3c:56:f4:f1:16:da:45:c1:5a:59:56:95:4b:ed:0d:a8:
16:c6:1b:71:21:a8:cc:da:ad:17:35:04:53:78:66:47:7c:2a:
73:a4:be:26:71:3a:59:d3:e4:01:35:4c:b0:02:13:c5:fe:4b:
d1:28:9f:11:8c:ca:d0:82:7c:3e:3e:f7:21:ca:23:c1:9d:79:
f4:6a:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 18:11:12 2026 by rpki-client