This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/323830333a323338303a3a2f33322d3332203d3e203631343930.roa
File: 323830333a323338303a3a2f33322d3332203d3e203631343930.roa (raw, json)
Hash identifier: Ak3xXoHbWd0mnVPEOjNPO1RTUut2ivf1/UQFk1JSd0E=
Subject key identifier: 20:76:68:7D:F6:F0:BC:CD:49:70:F1:36:38:03:10:3B:26:35:16:F2
Certificate issuer: /CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Certificate serial: 48380E750EEF64810C5C38A1C38098EA3590810A
Authority key identifier: D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/323830333a323338303a3a2f33322d3332203d3e203631343930.roa
Signing time: Tue 06 Jan 2026 18:57:45 +0000
ROA not before: Tue 06 Jan 2026 18:52:45 +0000
ROA not after: Tue 05 Jan 2027 18:57:45 +0000
asID: 61490
IP address blocks: 2803:2380::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 22:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:38:0e:75:0e:ef:64:81:0c:5c:38:a1:c3:80:98:ea:35:90:81:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Validity
Not Before: Jan 6 18:52:45 2026 GMT
Not After : Jan 5 18:57:45 2027 GMT
Subject: CN=2076687DF6F0BCCD4970F1363803103B263516F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:e9:40:31:87:6f:d1:df:c9:fe:86:70:d1:
03:e7:c1:35:d6:49:96:8a:a8:30:c3:b0:1f:b0:06:
95:94:cd:3c:91:52:63:56:b6:94:2e:1d:8d:68:21:
21:39:35:fa:9d:27:69:43:3a:cb:ce:3b:56:2d:39:
e4:f2:19:60:11:1e:63:0a:f1:7d:0d:b5:00:41:35:
8e:0c:e8:26:0c:f3:52:5f:56:96:2b:ca:a8:43:ff:
b2:f4:5f:63:11:c7:84:11:88:c8:71:f3:d6:5c:e4:
f9:9f:e0:7b:1b:f0:21:a2:fc:4a:ae:d6:6e:49:f6:
ca:c6:12:77:08:16:69:38:c8:d9:80:c0:9e:f2:f0:
47:e6:70:e0:67:92:aa:0e:37:23:dd:ff:35:ab:b5:
b5:79:c2:bb:3f:65:e0:1d:18:a4:b0:6b:d1:f2:82:
74:6e:c1:dc:d4:2c:6d:17:e7:c2:31:e3:88:d3:f6:
61:db:bb:d4:61:fa:3e:ce:1b:b5:b7:61:dc:7f:8c:
35:94:c3:d1:df:e4:f4:ef:bc:11:74:ef:0f:b1:84:
79:d6:fd:34:d6:27:88:bf:9c:a0:00:17:f3:a8:8e:
43:00:1c:bc:8d:d5:60:d7:02:2a:89:72:26:49:a3:
93:a2:29:a3:04:d3:db:09:78:90:5a:cc:f9:6d:ec:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:76:68:7D:F6:F0:BC:CD:49:70:F1:36:38:03:10:3B:26:35:16:F2
X509v3 Authority Key Identifier:
keyid:D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/323830333a323338303a3a2f33322d3332203d3e203631343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2380::/32
Signature Algorithm: sha256WithRSAEncryption
51:d2:0c:ab:ee:69:69:8b:73:47:1f:dd:5e:f6:0b:51:5c:22:
88:99:1c:49:40:e4:bd:0c:c9:db:2f:b2:ec:34:23:ac:33:cf:
a8:26:4d:3f:27:f1:8d:2b:ef:26:f9:23:fb:d2:9e:87:d2:8b:
59:ae:4e:72:a3:51:ff:39:c5:5b:cc:59:49:76:bf:c9:c2:ef:
2e:1c:fc:72:5c:52:3c:ad:8e:3e:ed:19:84:83:68:6d:db:01:
65:08:11:e9:18:8d:ae:69:68:6b:99:d9:d0:7d:f7:65:25:68:
4a:69:58:41:db:7c:27:b5:d9:b0:b3:b1:97:f0:3e:76:6c:f7:
2e:f1:a0:44:1c:43:6e:07:b5:9f:55:52:15:4c:9c:84:e7:28:
d1:65:d1:64:89:aa:b9:ad:72:56:f0:1c:95:2b:f0:65:ae:ec:
a4:88:8b:7a:7a:49:6c:17:71:1e:02:e3:3b:05:97:cf:3b:8f:
61:2c:56:cd:74:14:25:ca:d7:e0:51:b6:ca:82:ec:ed:b3:87:
db:20:e1:70:19:b9:e9:b5:f3:15:94:9a:8b:ad:c1:66:7b:9a:
29:8e:86:de:51:01:33:fc:45:e5:33:ce:4b:bf:4f:28:9d:34:
e3:a9:cd:18:3d:ff:a0:2d:82:40:54:b4:18:fc:34:79:2c:63:
53:63:95:0e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUSDgOdQ7vZIEMXDihw4CY6jWQgQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc0RUVDMzMyODAyNTcyMDQ3Q0JFMEZBQjEzRjNDRjJC
QTQxN0FGRjAeFw0yNjAxMDYxODUyNDVaFw0yNzAxMDUxODU3NDVaMDMxMTAvBgNV
BAMTKDIwNzY2ODdERjZGMEJDQ0Q0OTcwRjEzNjM4MDMxMDNCMjYzNTE2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrelAMYdv0d/J/oZw0QPnwTXW
SZaKqDDDsB+wBpWUzTyRUmNWtpQuHY1oISE5NfqdJ2lDOsvOO1YtOeTyGWARHmMK
8X0NtQBBNY4M6CYM81JfVpYryqhD/7L0X2MRx4QRiMhx89Zc5Pmf4Hsb8CGi/Equ
1m5J9srGEncIFmk4yNmAwJ7y8EfmcOBnkqoONyPd/zWrtbV5wrs/ZeAdGKSwa9Hy
gnRuwdzULG0X58Ix44jT9mHbu9Rh+j7OG7W3Ydx/jDWUw9Hf5PTvvBF07w+xhHnW
/TTWJ4i/nKAAF/OojkMAHLyN1WDXAiqJciZJo5OiKaME09sJeJBazPlt7M3VAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUIHZoffbwvM1JcPE2OAMQOyY1FvIwHwYDVR0j
BBgwFoAU107sMygCVyBHy+D6sT888rpBev8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTZDQUNGNERCRUU3NzUwMjk0MEZBRDUwMjc5NzIzQUYw
REExMzlFNUM3NUE2QjVCQ0VCQTZCMUMxNDNEQjg4LzAvRDc0RUVDMzMyODAyNTcy
MDQ3Q0JFMEZBQjEzRjNDRjJCQTQxN0FGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENzRFRUMzMzI4MDI1NzIwNDdD
QkUwRkFCMTNGM0NGMkJBNDE3QUZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk2Q0FDRjREQkVFNzc1MDI5NDBGQUQ1MDI3OTcyM0FGMERBMTM5RTVD
NzVBNkI1QkNFQkE2QjFDMTQzREI4OC8wLzMyMzgzMDMzM2EzMjMzMzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzEzNDM5MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAyOAMA0G
CSqGSIb3DQEBCwUAA4IBAQBR0gyr7mlpi3NHH91e9gtRXCKImRxJQOS9DMnbL7Ls
NCOsM8+oJk0/J/GNK+8m+SP70p6H0otZrk5yo1H/OcVbzFlJdr/Jwu8uHPxyXFI8
rY4+7RmEg2ht2wFlCBHpGI2uaWhrmdnQffdlJWhKaVhB23wntdmws7GX8D52bPcu
8aBEHENuB7WfVVIVTJyE5yjRZdFkiaq5rXJW8ByVK/BlruykiIt6eklsF3EeAuM7
BZfPO49hLFbNdBQlytfgUbbKguzts4fbIOFwGbnptfMVlJqLrcFme5opjobeUQEz
/EXlM85Lv08onTTjqc0YPf+gLYJAVLQY/DR5LGNTY5UO
-----END CERTIFICATE-----
Generated at Sun Jan 11 19:23:58 2026 by rpki-client