This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/323830333a633036303a3a2f33322d3332203d3e203631343531.roa
File: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (raw, json)
Hash identifier: L+ywmizwf83korHEOAc77B04u3MNpX37wQ9frbNDUX0=
Subject key identifier: 93:D9:7B:12:2D:1F:45:65:7E:A8:F2:19:FA:B9:D8:C9:AD:03:86:B4
Certificate issuer: /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial: 3432D43E65E6A56920794F4E2F2C1EAB3D8E0E39
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/323830333a633036303a3a2f33322d3332203d3e203631343531.roa
Signing time: Tue 06 Jan 2026 19:34:52 +0000
ROA not before: Tue 06 Jan 2026 19:29:52 +0000
ROA not after: Tue 05 Jan 2027 19:34:52 +0000
asID: 61451
IP address blocks: 2803:c060::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 04:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:32:d4:3e:65:e6:a5:69:20:79:4f:4e:2f:2c:1e:ab:3d:8e:0e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Validity
Not Before: Jan 6 19:29:52 2026 GMT
Not After : Jan 5 19:34:52 2027 GMT
Subject: CN=93D97B122D1F45657EA8F219FAB9D8C9AD0386B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:30:71:4a:db:6a:2f:64:79:2c:b4:7f:24:b7:
58:6f:e8:e7:67:c3:f7:42:d2:aa:fd:57:3f:a5:19:
bc:ba:d6:67:5d:91:55:3b:44:6d:47:c5:a2:07:45:
94:dc:1e:60:bf:67:32:4f:8c:2b:9d:00:24:4a:5a:
e7:af:5a:5d:35:8c:73:97:ed:e1:56:b7:f1:a1:9c:
12:92:da:66:82:9d:c1:86:2f:11:e3:dd:b2:87:84:
b4:13:0e:fd:01:c7:bf:1b:bd:b4:2f:eb:db:c1:00:
29:fd:aa:65:4e:ba:ee:9b:7b:bd:ac:b2:41:f4:cf:
8e:5a:a7:1d:7d:01:d4:d3:15:c3:37:6b:d6:c1:88:
b4:80:a6:d2:e8:f0:1b:9c:d1:58:c0:0a:fd:e4:b1:
b2:58:c0:7a:69:0a:61:b7:65:58:cb:cf:9a:82:3c:
83:81:bc:07:11:19:c9:d3:a9:c8:bb:1b:a1:d2:b0:
37:ae:54:85:9b:8e:1b:16:f2:f0:31:89:63:29:cc:
d3:ad:be:bc:a4:66:8c:7f:8c:f1:72:d1:df:0e:e7:
ad:3d:22:ad:2a:77:98:07:ad:2f:d6:3e:9c:98:cf:
04:15:7e:65:3d:3d:45:86:7e:75:29:8f:87:93:e8:
0f:63:09:0a:2a:a6:f1:be:9f:00:29:ab:e0:1c:85:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D9:7B:12:2D:1F:45:65:7E:A8:F2:19:FA:B9:D8:C9:AD:03:86:B4
X509v3 Authority Key Identifier:
keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/323830333a633036303a3a2f33322d3332203d3e203631343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c060::/32
Signature Algorithm: sha256WithRSAEncryption
3f:06:56:42:b4:19:c8:39:72:03:3c:00:4f:ca:e2:67:95:7c:
63:ba:8f:e6:de:61:19:19:52:2e:36:5e:d5:04:71:b7:4c:51:
d3:75:4d:ec:6b:fe:a6:0f:b8:64:b4:af:df:b7:0c:17:84:ff:
e5:20:14:67:c1:3b:d3:a5:0a:4e:24:b3:71:b5:1e:2f:0f:34:
1a:82:6e:a5:fd:41:cc:a3:f0:20:57:00:5a:95:92:73:fe:04:
11:55:90:b7:e5:9d:df:6b:b1:51:a3:bc:d2:c2:9f:26:1f:67:
06:51:56:2e:d4:2e:ff:8a:a5:d2:66:2f:1c:2d:55:ae:70:c7:
e9:c8:73:c1:bd:7a:32:cf:52:1e:b5:90:08:1d:b8:22:b9:f1:
b9:0b:3a:36:55:ba:ac:74:b7:d1:b6:f5:eb:46:09:3d:79:8b:
c0:41:ce:30:14:34:2d:bb:6e:8d:ec:da:e5:16:b4:89:4f:6c:
c3:85:14:ac:d3:05:3a:68:7e:f0:e8:56:3b:42:f8:a0:05:da:
28:fb:50:20:9c:9c:6e:e0:9d:68:0c:9d:d2:b9:f6:22:19:9e:
5a:fe:5c:8f:72:01:58:6b:27:25:b2:e4:5c:78:ac:93:a5:73:
85:80:ae:f8:42:ee:ad:9c:17:df:7c:c4:bc:58:7b:4e:61:c0:
2d:57:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:33:20 2026 by rpki-client