This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/323830333a316239303a3a2f33322d3438203d3e20323733303434.roa
File: 323830333a316239303a3a2f33322d3438203d3e20323733303434.roa (raw, json)
Hash identifier: z4unn4fVusabosWwMZW/C+TLj6XuDPsaO+5dSUkWqgM=
Subject key identifier: ED:54:DF:6D:54:40:EE:84:84:15:7A:32:87:0A:43:9E:EB:B6:D0:EB
Certificate issuer: /CN=280C606B42E3E29D27F6E5ADC0ED5E13093C25E8
Certificate serial: 31A88DEE16E3AAE6728DFFA7825C742B430AEC3E
Authority key identifier: 28:0C:60:6B:42:E3:E2:9D:27:F6:E5:AD:C0:ED:5E:13:09:3C:25:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/323830333a316239303a3a2f33322d3438203d3e20323733303434.roa
Signing time: Tue 06 Jan 2026 19:47:49 +0000
ROA not before: Tue 06 Jan 2026 19:42:49 +0000
ROA not after: Tue 05 Jan 2027 19:47:49 +0000
asID: 273044
IP address blocks: 2803:1b90::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl
rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 07:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a8:8d:ee:16:e3:aa:e6:72:8d:ff:a7:82:5c:74:2b:43:0a:ec:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280C606B42E3E29D27F6E5ADC0ED5E13093C25E8
Validity
Not Before: Jan 6 19:42:49 2026 GMT
Not After : Jan 5 19:47:49 2027 GMT
Subject: CN=ED54DF6D5440EE8484157A32870A439EEBB6D0EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:95:07:41:77:f5:bc:18:c4:aa:2b:f6:8c:
bb:f1:92:3b:f9:d2:ef:85:4f:e7:23:fd:93:6a:78:
5d:88:c7:1f:64:8f:eb:70:4e:3f:8f:79:8c:33:ae:
e5:d0:dd:ec:4d:bc:a5:c3:0a:0d:d0:6e:c6:fc:42:
93:35:49:e9:8d:4f:3e:af:6f:8d:4e:8c:76:77:55:
fe:92:0f:c1:9c:a8:1a:14:71:8d:47:d4:26:f9:17:
48:66:3a:28:06:2c:05:46:53:cc:42:e4:e5:71:d5:
35:15:b4:d0:c0:6f:48:b6:f9:dd:21:4c:04:bc:84:
19:33:a1:83:1d:24:78:71:af:f1:79:53:57:75:d0:
47:0a:8a:c6:fd:dc:98:dc:a1:4a:33:6c:65:c3:cb:
9d:37:a8:fd:c2:16:ba:ba:11:a9:37:c2:fb:42:78:
6e:cc:f7:b7:31:9f:16:53:27:1c:ed:ce:1c:26:dd:
99:c4:22:10:9d:f0:4e:8c:72:dc:f0:10:ae:c6:93:
95:fb:51:a6:77:9c:75:76:15:29:ba:24:1c:38:1e:
c6:5f:67:da:28:82:2d:ab:0e:94:b1:ad:68:51:23:
bc:c4:f3:1a:16:cb:51:02:42:3b:1b:db:e4:bb:3d:
c7:fc:a5:8e:9a:fd:cc:93:ac:de:08:7f:05:4d:ea:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:DF:6D:54:40:EE:84:84:15:7A:32:87:0A:43:9E:EB:B6:D0:EB
X509v3 Authority Key Identifier:
keyid:28:0C:60:6B:42:E3:E2:9D:27:F6:E5:AD:C0:ED:5E:13:09:3C:25:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/323830333a316239303a3a2f33322d3438203d3e20323733303434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1b90::/32
Signature Algorithm: sha256WithRSAEncryption
bd:e6:fc:09:57:6d:b0:92:fd:b3:80:44:77:ac:04:0d:64:f8:
0b:a9:0b:33:3c:54:25:e7:b0:90:c7:81:8e:c4:4d:28:43:c9:
40:5f:5b:c9:e6:16:88:eb:b1:6e:a9:e3:2b:cb:75:b4:fb:d7:
5f:cd:1d:f0:86:26:dd:75:a3:17:cf:a5:a5:8b:3d:1a:29:9e:
11:1a:dc:67:7a:50:12:8b:c8:1f:54:d4:a3:07:f9:d1:9c:a5:
98:63:5b:b6:44:75:a8:b0:35:57:6e:ac:b1:cc:6f:02:f5:e5:
f2:37:ad:f5:dc:2a:84:5e:c3:31:71:53:65:c0:e4:06:97:eb:
37:4a:8e:9f:d9:2a:83:26:69:a9:38:4c:b9:cb:c5:86:06:ab:
c8:3a:bc:93:4e:5e:37:8d:c8:eb:da:53:92:57:d7:a9:b7:ff:
d5:4c:0a:7d:89:56:fc:c4:c1:37:98:87:06:d3:07:9b:8c:74:
a2:0a:bd:89:3f:c4:06:a4:b3:eb:b7:2e:d0:89:0d:d5:36:1f:
cd:8e:7f:ae:82:f0:b2:e7:ec:95:d8:a7:fe:55:07:4c:15:a1:
08:de:28:60:08:ba:e5:50:65:37:a9:ba:f8:ac:7d:5e:db:9c:
af:c0:77:c0:c5:20:39:07:b5:62:27:de:1c:e7:2e:b7:10:b7:
6c:58:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:53:41 2026 by rpki-client