This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/323830333a663461303a3a2f33322d3332203d3e20323636383330.roa
File: 323830333a663461303a3a2f33322d3332203d3e20323636383330.roa (raw, json)
Hash identifier: Cv7Iqe2f5pAkehYchYl2oJtV1dYAvygtriCYpzzUvIQ=
Subject key identifier: 8E:9C:F6:AF:39:4E:69:8A:FC:F7:90:C9:22:B2:BF:A6:9F:13:7E:D9
Certificate issuer: /CN=F9EA39151165D2A448DFE339D82161C0BE689819
Certificate serial: 09F65DC84A41ED0B5E58F17B6DE8C0F7880B943B
Authority key identifier: F9:EA:39:15:11:65:D2:A4:48:DF:E3:39:D8:21:61:C0:BE:68:98:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9EA39151165D2A448DFE339D82161C0BE689819.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/323830333a663461303a3a2f33322d3332203d3e20323636383330.roa
Signing time: Tue 06 Jan 2026 19:46:06 +0000
ROA not before: Tue 06 Jan 2026 19:41:06 +0000
ROA not after: Tue 05 Jan 2027 19:46:06 +0000
asID: 266830
IP address blocks: 2803:f4a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/F9EA39151165D2A448DFE339D82161C0BE689819.crl
rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/F9EA39151165D2A448DFE339D82161C0BE689819.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9EA39151165D2A448DFE339D82161C0BE689819.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f6:5d:c8:4a:41:ed:0b:5e:58:f1:7b:6d:e8:c0:f7:88:0b:94:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9EA39151165D2A448DFE339D82161C0BE689819
Validity
Not Before: Jan 6 19:41:06 2026 GMT
Not After : Jan 5 19:46:06 2027 GMT
Subject: CN=8E9CF6AF394E698AFCF790C922B2BFA69F137ED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:7e:9c:0c:0f:52:59:86:47:38:69:96:7e:
d5:2b:cd:2d:d7:69:30:0b:20:54:eb:93:11:39:83:
51:65:33:f6:27:03:1b:7b:3a:21:0d:d1:1b:48:7c:
23:e7:5a:0a:02:15:31:59:21:a1:46:56:24:54:c2:
6d:dd:f4:96:ca:5c:f8:9d:d6:e0:d9:da:a0:19:ce:
3f:eb:1c:e3:6e:08:9f:48:48:36:6e:8a:b8:33:dc:
f1:a8:3f:50:1b:e3:1c:ca:17:c9:aa:45:e7:2e:0d:
10:13:b5:b9:64:be:c2:ae:35:ef:db:56:2c:b3:e6:
c4:02:a7:44:16:f7:a1:0c:ae:38:26:7c:56:44:00:
50:89:38:f0:9c:35:dc:26:b9:53:96:7d:93:53:a5:
ec:0a:6b:4c:14:2f:53:00:e0:8f:e6:ca:e3:c6:b9:
50:51:52:1b:56:5a:99:3b:40:ae:92:3a:65:85:47:
87:57:6c:36:c2:99:f7:c5:57:78:9b:a6:b0:db:ab:
1c:53:33:42:28:3b:07:3d:77:10:4c:97:e3:31:e2:
2c:af:cd:ce:40:16:7d:e2:36:94:b8:e1:c3:92:03:
08:3e:70:a5:cf:df:a4:2a:06:8e:96:ac:ba:5e:c5:
16:92:a8:06:77:6f:12:a8:ac:c3:21:ef:05:31:dc:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:F6:AF:39:4E:69:8A:FC:F7:90:C9:22:B2:BF:A6:9F:13:7E:D9
X509v3 Authority Key Identifier:
keyid:F9:EA:39:15:11:65:D2:A4:48:DF:E3:39:D8:21:61:C0:BE:68:98:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/F9EA39151165D2A448DFE339D82161C0BE689819.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9EA39151165D2A448DFE339D82161C0BE689819.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/323830333a663461303a3a2f33322d3332203d3e20323636383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f4a0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:9e:1a:be:0a:d7:39:5d:36:4e:47:b2:22:21:ca:04:c7:ea:
47:2a:34:05:b0:21:f0:96:d9:76:35:9f:21:da:ce:d8:f4:9a:
e3:b2:6b:c7:e4:ff:63:14:e6:f7:07:ea:30:89:5b:fc:f1:9c:
7f:f8:cf:b2:d0:7e:e4:47:47:b9:da:29:10:da:d9:16:fd:9a:
ef:fb:35:be:d8:81:91:64:30:6e:c5:de:b9:55:aa:da:d1:e4:
43:f0:78:bf:70:95:6d:d9:6c:b6:cf:b2:12:36:d0:12:c0:a1:
06:a9:b8:0f:2c:41:cf:be:80:13:24:c1:8a:dd:6a:14:52:4e:
89:4d:fc:34:20:17:6b:19:6f:9d:92:dd:6a:e1:ce:15:5b:49:
c2:56:09:8b:97:dd:75:13:0d:b3:36:2a:96:33:32:f9:09:af:
5c:de:c3:ad:1f:aa:b9:b5:f0:63:bf:43:9f:eb:7f:17:5a:f5:
26:2b:39:7c:3e:5f:a6:62:ef:d1:7f:31:e6:9c:ff:74:7d:9b:
b7:7f:36:3e:32:09:40:d6:76:f7:bb:c7:ed:02:76:cb:59:85:
fd:f8:d2:c6:25:bf:d2:bf:ea:64:93:79:5b:b8:fb:47:ce:48:
07:53:49:ce:fd:47:b0:7b:5c:20:d9:3c:78:a1:64:ea:a1:44:
d2:44:bd:e3
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUCfZdyEpB7QteWPF7bejA94gLlDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlFQTM5MTUxMTY1RDJBNDQ4REZFMzM5RDgyMTYxQzBC
RTY4OTgxOTAeFw0yNjAxMDYxOTQxMDZaFw0yNzAxMDUxOTQ2MDZaMDMxMTAvBgNV
BAMTKDhFOUNGNkFGMzk0RTY5OEFGQ0Y3OTBDOTIyQjJCRkE2OUYxMzdFRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa4H6cDA9SWYZHOGmWftUrzS3X
aTALIFTrkxE5g1FlM/YnAxt7OiEN0RtIfCPnWgoCFTFZIaFGViRUwm3d9JbKXPid
1uDZ2qAZzj/rHONuCJ9ISDZuirgz3PGoP1Ab4xzKF8mqRecuDRATtblkvsKuNe/b
Viyz5sQCp0QW96EMrjgmfFZEAFCJOPCcNdwmuVOWfZNTpewKa0wUL1MA4I/myuPG
uVBRUhtWWpk7QK6SOmWFR4dXbDbCmffFV3ibprDbqxxTM0IoOwc9dxBMl+Mx4iyv
zc5AFn3iNpS44cOSAwg+cKXP36QqBo6WrLpexRaSqAZ3bxKorMMh7wUx3H4ZAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUjpz2rzlOaYr895DJIrK/pp8TftkwHwYDVR0j
BBgwFoAU+eo5FRFl0qRI3+M52CFhwL5omBkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTMzRTMxMkZFQTJGRTk3RjU5QTJCNEZFRkEzNENEOTMw
RjNDRTUwNUU3QjExNjNFNDVBNjU3NTA3NjQ2NUEyLzAvRjlFQTM5MTUxMTY1RDJB
NDQ4REZFMzM5RDgyMTYxQzBCRTY4OTgxOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GOUVBMzkxNTExNjVEMkE0NDhE
RkUzMzlEODIxNjFDMEJFNjg5ODE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTEzM0UzMTJGRUEyRkU5N0Y1OUEyQjRGRUZBMzRDRDkzMEYzQ0U1MDVF
N0IxMTYzRTQ1QTY1NzUwNzY0NjVBMi8wLzMyMzgzMDMzM2E2NjM0NjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM4MzMzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD9KAw
DQYJKoZIhvcNAQELBQADggEBAGqeGr4K1zldNk5HsiIhygTH6kcqNAWwIfCW2XY1
nyHaztj0muOya8fk/2MU5vcH6jCJW/zxnH/4z7LQfuRHR7naKRDa2Rb9mu/7Nb7Y
gZFkMG7F3rlVqtrR5EPweL9wlW3ZbLbPshI20BLAoQapuA8sQc++gBMkwYrdahRS
TolN/DQgF2sZb52S3WrhzhVbScJWCYuX3XUTDbM2KpYzMvkJr1zew60fqrm18GO/
Q5/rfxda9SYrOXw+X6Zi79F/Meac/3R9m7d/Nj4yCUDWdve7x+0CdstZhf340sYl
v9K/6mSTeVu4+0fOSAdTSc79R7B7XCDZPHihZOqhRNJEveM=
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:33:31 2026 by rpki-client