This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316530303a3a2f34302d3438203d3e20323733303732.roa
File: 323830333a636639303a316530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier: 9obROpaqw4vDpSUr70QIFcaRA3xs/Z0xdShZEOWCUAc=
Subject key identifier: 3A:A0:50:C2:53:70:2F:64:88:E7:ED:C3:19:31:26:23:1E:63:F6:B0
Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial: 6087186DDDCEF3F5F069F51591F406CB04A39D
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316530303a3a2f34302d3438203d3e20323733303732.roa
Signing time: Tue 06 Jan 2026 20:49:21 +0000
ROA not before: Tue 06 Jan 2026 20:44:21 +0000
ROA not after: Tue 05 Jan 2027 20:49:21 +0000
asID: 273072
IP address blocks: 2803:cf90:1e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:87:18:6d:dd:ce:f3:f5:f0:69:f5:15:91:f4:06:cb:04:a3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Validity
Not Before: Jan 6 20:44:21 2026 GMT
Not After : Jan 5 20:49:21 2027 GMT
Subject: CN=3AA050C253702F6488E7EDC3193126231E63F6B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:02:24:77:a4:9c:8d:8e:b2:28:6c:2d:cc:
f2:d7:24:4c:60:6c:b2:60:da:0c:97:e8:94:21:19:
ff:e7:a0:db:54:a9:1f:92:bf:0d:e6:d1:28:ae:7d:
06:b9:dc:81:f2:0e:9e:d8:c4:7c:eb:a1:3f:f8:e6:
30:bf:ca:42:ff:f1:b0:f0:11:bd:5b:9d:77:8f:da:
9b:67:b3:39:0c:19:76:8a:34:8b:37:eb:b6:92:f2:
45:f2:f9:ae:61:76:a7:80:42:b6:b7:ee:4f:67:26:
e2:77:99:55:51:be:60:b5:59:18:97:a7:eb:e2:7f:
5c:96:30:cb:e2:64:50:28:bd:1d:1b:3f:40:21:a8:
be:eb:c7:e8:12:db:9f:7d:b0:9c:d8:bd:fa:c7:ca:
cb:f6:86:87:9f:8d:ed:7c:78:55:c2:66:5a:a1:63:
ca:70:20:a5:be:a8:ac:f2:f6:bb:13:4e:9b:ff:83:
72:4e:e4:57:05:3f:93:82:34:8f:11:a8:04:dc:cc:
56:e5:c6:bc:00:29:26:05:16:05:ad:84:43:1f:11:
8e:db:0a:11:66:f5:d2:91:0a:1d:c3:67:a6:2e:13:
56:97:1c:b0:71:c9:35:e8:16:46:26:ed:47:e8:f6:
57:62:29:92:54:06:5d:e3:44:ba:4a:c6:77:eb:1e:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A0:50:C2:53:70:2F:64:88:E7:ED:C3:19:31:26:23:1E:63:F6:B0
X509v3 Authority Key Identifier:
keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316530303a3a2f34302d3438203d3e20323733303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cf90:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
58:3e:3f:21:e4:be:2b:48:40:91:db:86:16:8c:6f:52:bd:08:
0d:d1:6a:ab:94:fd:7d:3a:4d:f2:77:44:f7:fa:40:00:67:0d:
3f:48:c4:0e:3d:3a:10:ce:c5:62:99:14:c1:09:f0:89:0e:da:
dd:b3:e6:f8:89:53:a2:42:44:83:81:29:17:57:b1:f2:15:f3:
13:d0:f1:f4:66:dc:26:b4:ba:b6:32:f0:72:3e:04:24:ac:38:
0e:38:40:a3:e8:53:29:20:0f:37:74:31:1c:91:4f:d7:10:54:
cf:28:15:cf:a7:b1:35:ae:0e:91:3e:6d:12:0a:a1:c8:cf:07:
7b:df:47:8d:32:a3:6e:d2:99:d3:e3:26:aa:48:0d:ed:6a:46:
0d:17:fb:de:1e:9b:17:82:a0:ac:1a:93:78:a0:04:8f:04:7e:
88:45:80:a9:01:b2:15:fd:b6:83:0f:56:93:ce:21:70:80:63:
87:ec:f1:4b:59:be:be:46:ab:4f:4a:27:43:5f:a5:e8:44:15:
32:ca:46:b1:cd:e8:dd:cc:65:df:0b:12:b6:08:21:e2:72:01:
ca:5b:c5:72:32:f8:86:32:32:b5:07:f8:09:42:84:e5:f9:94:
b4:2e:bd:61:2c:f8:09:e4:3a:02:fc:28:21:ea:1a:a9:d8:ef:
89:62:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:23:09 2026 by rpki-client