This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/323830333a346534303a3a2f33322d3438203d3e20323634363038.roa
File: 323830333a346534303a3a2f33322d3438203d3e20323634363038.roa (raw, json)
Hash identifier: U+QsLsnptXRCI7yOF/+YCkKWhsTaxDEnokctoOqmnoQ=
Subject key identifier: 9D:97:4B:44:0A:B3:23:64:E4:6A:1A:CE:12:FD:8E:1E:C7:30:8A:F4
Certificate issuer: /CN=D579CC6AF8308A8BC0A633B894777F89547B9F81
Certificate serial: 6CFDF87BFE2E0A3D030F3AA158E3777E2D036E21
Authority key identifier: D5:79:CC:6A:F8:30:8A:8B:C0:A6:33:B8:94:77:7F:89:54:7B:9F:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/323830333a346534303a3a2f33322d3438203d3e20323634363038.roa
Signing time: Tue 06 Jan 2026 19:01:24 +0000
ROA not before: Tue 06 Jan 2026 18:56:24 +0000
ROA not after: Tue 05 Jan 2027 19:01:24 +0000
asID: 264608
IP address blocks: 2803:4e40::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.crl
rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 01:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fd:f8:7b:fe:2e:0a:3d:03:0f:3a:a1:58:e3:77:7e:2d:03:6e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D579CC6AF8308A8BC0A633B894777F89547B9F81
Validity
Not Before: Jan 6 18:56:24 2026 GMT
Not After : Jan 5 19:01:24 2027 GMT
Subject: CN=9D974B440AB32364E46A1ACE12FD8E1EC7308AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:c8:f1:86:8f:8b:6e:a6:04:80:7d:50:22:
96:aa:1c:30:1a:49:12:d3:77:7d:e6:43:bc:0e:e9:
fb:bf:97:45:67:84:27:84:3c:66:55:e5:ed:b1:a6:
34:1a:77:74:ec:cd:b5:aa:c7:c0:6a:fa:3b:c4:db:
89:2a:ff:ab:41:a3:80:3d:ed:4f:ac:69:d4:1e:7b:
9f:61:ce:4a:e2:22:71:38:44:1d:01:89:08:8a:3a:
52:5a:ad:8d:2d:00:16:81:50:2b:eb:0c:aa:76:b4:
d0:29:23:cb:fd:96:f1:c8:77:fe:20:99:e8:35:b3:
d8:b4:87:a5:64:17:48:f9:9c:2a:a2:62:04:86:0c:
66:e0:73:26:30:79:43:93:72:8b:ca:4c:fb:7d:1e:
d6:d7:72:df:4a:24:25:86:ed:de:61:95:8b:f1:69:
e9:9a:4c:30:43:3f:60:ad:02:4b:e8:70:de:f1:ff:
b0:c1:f9:04:cc:1d:60:63:09:9f:e7:3e:6a:32:ae:
fd:19:1c:e8:8b:99:2b:3e:0a:8a:c9:12:0f:ca:f6:
5a:69:58:8a:ad:d2:97:e5:db:f1:fd:b6:01:ae:8a:
1e:74:e6:e5:34:f0:0b:77:66:50:bd:c7:8f:af:63:
9d:13:2a:f5:c3:ab:32:52:6b:27:35:d7:1f:aa:0a:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:97:4B:44:0A:B3:23:64:E4:6A:1A:CE:12:FD:8E:1E:C7:30:8A:F4
X509v3 Authority Key Identifier:
keyid:D5:79:CC:6A:F8:30:8A:8B:C0:A6:33:B8:94:77:7F:89:54:7B:9F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/323830333a346534303a3a2f33322d3438203d3e20323634363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4e40::/32
Signature Algorithm: sha256WithRSAEncryption
c3:f2:c3:42:ad:93:b1:7a:dd:1e:eb:fd:08:b5:58:c2:02:2d:
e2:1f:e6:72:db:96:c2:df:8e:a2:05:34:c4:93:04:f1:ca:ef:
70:f6:bf:ed:b4:78:e1:ed:91:b2:aa:cf:c5:2f:f8:40:fb:ba:
84:d6:1e:69:33:75:63:96:1f:b4:a8:88:88:d1:c9:15:4c:f1:
1a:cf:9d:51:2b:19:2d:95:00:8d:89:76:f6:25:bb:4a:6b:b0:
a5:8e:ea:af:9d:49:1a:ce:e5:27:d7:f0:8b:76:03:f0:11:1d:
ed:47:d3:a4:21:e0:26:67:53:d8:7e:a5:4d:85:04:9c:9d:ac:
55:a2:d7:bf:6d:23:d0:fb:d0:55:0b:66:b6:43:c2:21:2e:6f:
6e:b0:29:20:ec:16:42:0d:75:70:e7:61:d7:9c:74:35:7f:f7:
df:71:a9:45:fd:50:30:69:f9:8a:4a:52:4e:07:7b:b8:fe:c2:
92:92:e2:32:81:5b:8b:71:56:e7:83:73:a1:b8:59:17:4a:03:
de:be:b3:55:3c:4e:76:d3:5a:97:00:80:4f:0b:4c:68:3f:9a:
38:80:b7:52:c8:da:22:45:e6:f9:14:3a:d3:ba:06:04:ce:a7:
f1:73:b0:62:fc:86:dd:b9:fe:9a:3d:a2:e5:6f:9f:52:9c:b7:
4f:f3:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:38:51 2026 by rpki-client