This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646230303a3a2f34302d3430203d3e203631343631.roa
File: 323830333a643730303a646230303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier: rLEJZlXD+XMeqr3BDaztWJRtFnXaUrYLnv1Ud3Ur+YQ=
Subject key identifier: 22:36:3F:FC:BC:9D:65:4C:38:2C:72:EF:3B:67:CB:F7:ED:35:08:F1
Certificate issuer: /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial: 4D88310C54669F1FEDE49D88224A1E6C3BC9CF25
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646230303a3a2f34302d3430203d3e203631343631.roa
Signing time: Tue 06 Jan 2026 19:11:32 +0000
ROA not before: Tue 06 Jan 2026 19:06:32 +0000
ROA not after: Tue 05 Jan 2027 19:11:32 +0000
asID: 61461
IP address blocks: 2803:d700:db00::/40 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 12:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:88:31:0c:54:66:9f:1f:ed:e4:9d:88:22:4a:1e:6c:3b:c9:cf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
Validity
Not Before: Jan 6 19:06:32 2026 GMT
Not After : Jan 5 19:11:32 2027 GMT
Subject: CN=22363FFCBC9D654C382C72EF3B67CBF7ED3508F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:95:cb:b4:31:91:41:ac:df:ed:84:b5:6e:
2b:70:d6:24:ec:5b:58:e2:32:7e:4f:5e:87:63:71:
ef:db:2a:f1:b1:4f:2f:ac:a7:58:82:db:af:4d:f2:
59:4d:b1:b7:47:12:30:69:b5:7e:a9:22:cb:44:15:
1b:5b:0c:dd:40:bc:3a:b6:b1:e3:58:3a:89:fd:64:
06:45:1f:43:14:6b:f7:94:cf:64:ff:94:6a:ee:a7:
17:9f:47:fb:b2:ea:0d:9b:2a:57:f1:a1:85:0e:d7:
6d:a4:91:68:d6:89:a0:69:8e:cb:20:84:c7:7c:b3:
fc:08:a1:dd:30:03:4c:f3:66:ba:1f:6d:b8:67:45:
28:8f:52:0b:57:32:33:7c:22:f5:fb:5a:4b:f9:05:
c4:59:67:5f:1e:c5:a3:ce:f8:4b:ea:b3:33:22:26:
e5:6b:76:e3:7f:a9:fd:b8:36:66:dc:3d:e7:4e:bb:
8b:a7:9b:b7:da:67:6f:d9:14:5e:ac:8f:56:45:2e:
ab:91:02:6b:0c:86:2d:77:fa:32:e6:b9:88:f2:f6:
aa:f5:06:fb:09:3b:ba:96:23:c3:93:37:32:df:88:
e0:c3:ad:f0:5f:81:90:03:b4:48:ab:c5:65:bf:65:
3f:58:e0:67:b9:ce:d5:c2:78:9f:ae:6b:09:8e:0e:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:36:3F:FC:BC:9D:65:4C:38:2C:72:EF:3B:67:CB:F7:ED:35:08:F1
X509v3 Authority Key Identifier:
keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646230303a3a2f34302d3430203d3e203631343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d700:db00::/40
Signature Algorithm: sha256WithRSAEncryption
5d:51:8c:04:c1:bb:7d:a0:49:0e:4f:63:1a:ae:bd:67:eb:80:
4c:f5:19:98:71:f3:6b:e5:fc:44:bf:c2:26:69:d6:4b:ea:ad:
bb:8f:43:ef:15:14:18:62:55:1f:d6:60:1f:d0:e6:84:9e:30:
f5:14:dc:c0:e4:b7:17:2c:45:5b:30:80:c3:23:89:8d:a2:2e:
90:2c:99:45:9f:0d:e5:4a:cc:ee:db:68:1e:88:6c:86:23:c7:
3d:18:69:a1:7b:23:54:7d:88:c0:ff:c4:ad:95:09:40:49:fa:
95:23:65:1e:52:01:f0:e8:bf:3a:93:e7:15:1d:c8:c9:a2:af:
73:39:59:41:b4:64:a2:d1:ea:ca:89:ea:4d:24:c0:83:ad:4d:
be:b0:63:2f:93:f9:aa:fc:77:e0:43:0d:6c:97:9d:49:dd:63:
b3:4d:a5:6f:c7:5c:69:d6:39:a1:a7:6c:2a:2d:90:fd:b6:be:
1a:0b:53:9a:01:53:57:5e:01:62:4f:0e:c0:bf:54:05:00:3b:
1b:ee:a7:36:4d:9d:47:7e:15:04:6e:5d:a8:f9:e8:40:4d:23:
43:78:be:0c:88:8d:9e:99:0d:71:ed:0b:90:aa:d7:f2:60:37:
a8:77:0b:81:cf:bb:93:9e:89:92:63:77:86:ec:41:e1:6e:77:
82:64:06:d3
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUTYgxDFRmnx/t5J2IIkoebDvJzyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzNzE0Mjc1NERFRDkxNUQzMzQxNjI4RTc0QThCOTFB
RjBDQjc2QTAeFw0yNjAxMDYxOTA2MzJaFw0yNzAxMDUxOTExMzJaMDMxMTAvBgNV
BAMTKDIyMzYzRkZDQkM5RDY1NEMzODJDNzJFRjNCNjdDQkY3RUQzNTA4RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCJXLtDGRQazf7YS1bitw1iTs
W1jiMn5PXodjce/bKvGxTy+sp1iC269N8llNsbdHEjBptX6pIstEFRtbDN1AvDq2
seNYOon9ZAZFH0MUa/eUz2T/lGrupxefR/uy6g2bKlfxoYUO122kkWjWiaBpjssg
hMd8s/wIod0wA0zzZrofbbhnRSiPUgtXMjN8IvX7Wkv5BcRZZ18exaPO+EvqszMi
JuVrduN/qf24NmbcPedOu4unm7faZ2/ZFF6sj1ZFLquRAmsMhi13+jLmuYjy9qr1
BvsJO7qWI8OTNzLfiODDrfBfgZADtEirxWW/ZT9Y4Ge5ztXCeJ+uawmODodRAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUIjY//LydZUw4LHLvO2fL9+01CPEwHwYDVR0j
BBgwFoAUsTcUJ1Te2RXTNBYo50qLka8Mt2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTdCNjQzMDk3MjdGNDQ2N0I2OEE3NkQ5MEQzMDVCRkUz
Q0NGQzkxNTE4NTM1QkQ4NzVFRTU1MDM4MUExREZDLzAvQjEzNzE0Mjc1NERFRDkx
NUQzMzQxNjI4RTc0QThCOTFBRjBDQjc2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTM3MTQyNzU0REVEOTE1RDMz
NDE2MjhFNzRBOEI5MUFGMENCNzZBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU3QjY0MzA5NzI3RjQ0NjdCNjhBNzZEOTBEMzA1QkZFM0NDRkM5MTUx
ODUzNUJEODc1RUU1NTAzODFBMURGQy8wLzMyMzgzMDMzM2E2NDM3MzAzMDNhNjQ2
MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNjMxMzQzNjMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPXANswDQYJKoZIhvcNAQELBQADggEBAF1RjATBu32gSQ5PYxquvWfrgEz1
GZhx82vl/ES/wiZp1kvqrbuPQ+8VFBhiVR/WYB/Q5oSeMPUU3MDktxcsRVswgMMj
iY2iLpAsmUWfDeVKzO7baB6IbIYjxz0YaaF7I1R9iMD/xK2VCUBJ+pUjZR5SAfDo
vzqT5xUdyMmir3M5WUG0ZKLR6sqJ6k0kwIOtTb6wYy+T+ar8d+BDDWyXnUndY7NN
pW/HXGnWOaGnbCotkP22vhoLU5oBU1deAWJPDsC/VAUAOxvupzZNnUd+FQRuXaj5
6EBNI0N4vgyIjZ6ZDXHtC5Cq1/JgN6h3C4HPu5OeiZJjd4bsQeFud4JkBtM=
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:53:12 2026 by rpki-client