This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/323830333a653631303a3a2f33322d3438203d3e20323731393435.roa
File: 323830333a653631303a3a2f33322d3438203d3e20323731393435.roa (raw, json)
Hash identifier: 2P7RFCK7VpDXczeRi+bM3BlIhZ8kbofBM3yid2U3gqg=
Subject key identifier: 11:D4:7D:8C:33:6E:09:1C:DF:C4:C3:96:8F:1C:82:A8:49:3C:6B:BE
Certificate issuer: /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial: 171FADA300F6FEB6D1E88176F23C291AC32EF84D
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/323830333a653631303a3a2f33322d3438203d3e20323731393435.roa
Signing time: Tue 06 Jan 2026 19:34:26 +0000
ROA not before: Tue 06 Jan 2026 19:29:26 +0000
ROA not after: Tue 05 Jan 2027 19:34:26 +0000
asID: 271945
IP address blocks: 2803:e610::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 10:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1f:ad:a3:00:f6:fe:b6:d1:e8:81:76:f2:3c:29:1a:c3:2e:f8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Validity
Not Before: Jan 6 19:29:26 2026 GMT
Not After : Jan 5 19:34:26 2027 GMT
Subject: CN=11D47D8C336E091CDFC4C3968F1C82A8493C6BBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:72:4c:58:1f:43:7e:1a:6e:53:35:d2:e6:
46:e5:bf:b1:33:51:e4:a3:c2:81:13:7b:8e:c6:ac:
41:96:8d:54:95:9d:bb:48:05:97:6a:b9:8f:da:42:
2c:33:dd:cb:95:a5:5b:09:3a:6d:7b:bc:3e:1d:d7:
f0:9e:fb:a3:a8:9d:84:fe:a8:c5:10:2b:85:a2:8b:
b0:eb:0f:fc:2a:5f:15:36:4f:ba:20:00:5f:2a:23:
ec:44:00:12:e9:42:d6:d4:d6:3d:01:13:47:83:43:
d2:40:87:0b:c4:15:b1:43:be:74:04:61:99:8e:12:
c8:6c:d5:58:28:b3:7b:1b:bc:5d:6a:19:82:b1:25:
8f:a4:c5:65:5e:e6:b7:8b:c9:00:21:cc:54:01:68:
70:11:5b:61:f7:86:15:0b:05:c1:f3:ad:b2:57:6b:
a0:6e:93:cd:88:eb:aa:98:11:bb:0f:8c:27:ca:be:
75:b4:da:7f:99:50:78:28:3f:61:57:a1:90:2b:cd:
f3:1e:cc:86:dc:b1:4b:ed:9e:7b:f9:18:48:2f:31:
35:3b:e8:8b:80:e1:1b:cd:f3:56:60:ce:5d:c2:71:
75:5b:12:c7:2b:16:a8:c6:0c:2f:a3:6b:e2:90:a9:
20:c4:61:c2:75:f0:b6:ba:0f:dd:5a:c3:ae:d5:80:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:7D:8C:33:6E:09:1C:DF:C4:C3:96:8F:1C:82:A8:49:3C:6B:BE
X509v3 Authority Key Identifier:
keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/323830333a653631303a3a2f33322d3438203d3e20323731393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e610::/32
Signature Algorithm: sha256WithRSAEncryption
10:40:61:ca:b8:5c:cc:92:d8:51:ab:e1:9b:36:4d:d0:d2:01:
be:37:de:a8:b2:ff:4f:a8:2f:6c:c6:6a:1b:d4:cb:65:22:7f:
fd:9c:1b:80:09:25:1c:2c:30:79:5d:77:36:7b:19:85:5e:71:
c3:a4:3a:af:d9:7d:b2:7a:8b:a3:69:71:77:8e:db:53:87:aa:
2f:dc:0e:bd:2e:54:ba:ea:32:78:29:89:76:dc:d2:c0:15:aa:
50:b3:59:8a:19:51:2d:0c:bb:b2:4e:72:a1:62:95:e2:66:da:
92:5a:88:15:18:eb:15:19:b7:5e:a1:6c:b5:75:f8:51:20:4c:
f8:6c:43:66:4d:56:f1:14:9a:e2:99:e2:36:45:de:cd:b7:ec:
b9:f9:98:1f:07:12:35:2c:68:b8:43:c4:81:4f:c9:38:70:62:
ee:68:8d:d3:c0:ba:e8:37:e5:f8:42:c3:61:1d:60:04:9e:1a:
d5:7e:77:de:0b:55:4d:66:fd:9f:dd:98:52:14:9d:34:1f:0e:
b6:78:c7:4b:3f:98:fb:51:62:27:7c:36:a2:50:50:5b:74:15:
d3:0a:35:bd:3b:ee:55:ed:40:b2:be:15:46:1d:88:c6:17:26:
5f:7a:11:4b:67:c5:fe:6e:71:30:27:1c:ae:60:59:e0:ba:25:
fb:72:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:16:47 2026 by rpki-client