This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e203532343638.roa
File: 323830333a363239303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier: gIigktVJ2m1C3UnMgzkQZrbo3C9WTAQD6eMwW7qaD48=
Subject key identifier: 34:D1:8A:2A:36:F8:05:0F:18:CD:EB:A0:64:C6:46:8A:84:5A:BC:C4
Certificate issuer: /CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Certificate serial: 733569B155D25121A15C84316CA42CAEEE7FB7C6
Authority key identifier: 3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e203532343638.roa
Signing time: Tue 06 Jan 2026 19:05:39 +0000
ROA not before: Tue 06 Jan 2026 19:00:39 +0000
ROA not after: Tue 05 Jan 2027 19:05:39 +0000
asID: 52468
IP address blocks: 2803:6290::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl
rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 06:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:35:69:b1:55:d2:51:21:a1:5c:84:31:6c:a4:2c:ae:ee:7f:b7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Validity
Not Before: Jan 6 19:00:39 2026 GMT
Not After : Jan 5 19:05:39 2027 GMT
Subject: CN=34D18A2A36F8050F18CDEBA064C6468A845ABCC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:7a:0d:42:b4:eb:b2:be:d7:da:c7:b8:e9:
09:d6:94:61:80:ea:e7:1f:ea:a2:50:d2:24:5f:11:
25:1a:fd:58:46:d1:70:53:b5:ad:b6:71:f3:07:59:
e4:93:ff:d8:d0:81:0f:f4:97:59:e3:e4:8c:54:87:
99:74:92:7f:86:d9:4c:a7:d8:4c:3b:90:03:4a:1d:
14:0b:e4:f2:59:9f:71:a4:16:67:10:e4:24:6b:24:
4e:ad:3c:07:3a:8a:e9:0d:ed:a2:1e:7f:ac:cb:21:
4e:8e:ac:8a:65:01:3c:b1:5a:77:76:61:05:01:01:
8b:e5:60:12:23:c4:75:8d:74:69:f4:20:62:84:c4:
40:c7:3b:a3:56:14:57:67:58:6f:76:d7:68:6f:23:
b6:74:12:ff:0d:ed:54:21:1d:46:38:9c:f2:9d:a5:
61:b1:60:53:7e:87:e1:23:7a:b0:41:76:28:67:7c:
e4:23:cc:4c:7d:dc:be:64:e5:4d:05:56:1f:44:08:
51:16:75:a4:64:ca:d3:c1:a0:50:67:62:aa:6f:08:
ca:ef:22:4d:13:81:ed:0d:b4:39:fc:7b:34:9e:68:
d1:a8:06:3c:ea:e3:52:79:7a:2b:7a:8f:b7:0a:54:
2b:a7:61:26:09:c4:f0:2d:ce:4d:0c:cf:b1:a4:b2:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D1:8A:2A:36:F8:05:0F:18:CD:EB:A0:64:C6:46:8A:84:5A:BC:C4
X509v3 Authority Key Identifier:
keyid:3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6290::/32
Signature Algorithm: sha256WithRSAEncryption
44:4d:41:35:ee:9d:4e:c1:27:d3:fa:62:00:41:29:27:32:90:
d1:dc:17:43:b7:95:d9:5c:7f:d1:7c:1f:53:8f:3d:1b:13:3a:
c5:ed:b6:fa:c3:d9:bc:eb:9b:a2:9a:6d:b4:f3:68:8f:3e:8e:
aa:50:fc:37:74:82:a8:cb:96:ae:8f:18:97:46:c9:fe:7f:78:
a0:87:4a:80:c5:70:56:1a:7c:50:59:70:dc:64:68:3d:80:08:
45:ea:62:66:e2:b7:9a:52:4b:70:d2:00:03:6a:56:f8:8b:94:
94:19:62:a9:b2:5b:d4:89:26:11:01:01:6a:e5:1b:7b:83:d8:
6b:be:12:72:85:4b:14:4e:98:24:37:b1:f1:f4:28:f0:4f:ea:
68:5c:29:66:58:93:80:0b:a8:87:5a:0a:b1:87:78:e1:27:3d:
32:69:44:a9:79:12:f8:e1:4f:c1:68:57:21:a2:11:2e:9e:e4:
95:01:3c:53:12:06:9c:35:20:8e:09:bd:d5:d9:94:84:4c:85:
da:c8:5e:01:4e:90:a4:6b:22:2a:88:cb:79:d7:eb:a4:c8:8a:
da:f9:85:cc:07:63:1a:6a:d3:d3:d1:22:e7:06:e6:77:28:50:
db:3a:6e:b1:4f:34:72:5a:cc:23:0b:e2:86:89:ae:4d:dd:6f:
3d:ae:f4:f2
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUczVpsVXSUSGhXIQxbKQsru5/t8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y0MEQ5NkE0RkJCQkVGNThCREMxQThBMDJBQjBEODlC
MkIxNjI5MjAeFw0yNjAxMDYxOTAwMzlaFw0yNzAxMDUxOTA1MzlaMDMxMTAvBgNV
BAMTKDM0RDE4QTJBMzZGODA1MEYxOENERUJBMDY0QzY0NjhBODQ1QUJDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzHoNQrTrsr7X2se46QnWlGGA
6ucf6qJQ0iRfESUa/VhG0XBTta22cfMHWeST/9jQgQ/0l1nj5IxUh5l0kn+G2Uyn
2Ew7kANKHRQL5PJZn3GkFmcQ5CRrJE6tPAc6iukN7aIef6zLIU6OrIplATyxWnd2
YQUBAYvlYBIjxHWNdGn0IGKExEDHO6NWFFdnWG9212hvI7Z0Ev8N7VQhHUY4nPKd
pWGxYFN+h+EjerBBdihnfOQjzEx93L5k5U0FVh9ECFEWdaRkytPBoFBnYqpvCMrv
Ik0Tge0NtDn8ezSeaNGoBjzq41J5eit6j7cKVCunYSYJxPAtzk0Mz7Gksn4BAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUNNGKKjb4BQ8YzeugZMZGioRavMQwHwYDVR0j
BBgwFoAUP0DZak+7vvWL3BqKAqsNibKxYpIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjFBOTAzNTQ1MjQ4ODU1RkYyMTg1RjI0QTMxRjFGQjlG
RUIyNUFGRUUzQURCMENCODJEQzk3NTg0NkU4Nzg1LzAvM0Y0MEQ5NkE0RkJCQkVG
NThCREMxQThBMDJBQjBEODlCMkIxNjI5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjQwRDk2QTRGQkJCRUY1OEJE
QzFBOEEwMkFCMEQ4OUIyQjE2MjkyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YxQTkwMzU0NTI0ODg1NUZGMjE4NUYyNEEzMUYxRkI5RkVCMjVBRkVF
M0FEQjBDQjgyREM5NzU4NDZFODc4NS8wLzMyMzgzMDMzM2EzNjMyMzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA2KQMA0G
CSqGSIb3DQEBCwUAA4IBAQBETUE17p1OwSfT+mIAQSknMpDR3BdDt5XZXH/RfB9T
jz0bEzrF7bb6w9m865uimm2082iPPo6qUPw3dIKoy5aujxiXRsn+f3igh0qAxXBW
GnxQWXDcZGg9gAhF6mJm4reaUktw0gADalb4i5SUGWKpslvUiSYRAQFq5Rt7g9hr
vhJyhUsUTpgkN7Hx9CjwT+poXClmWJOAC6iHWgqxh3jhJz0yaUSpeRL44U/BaFch
ohEunuSVATxTEgacNSCOCb3V2ZSETIXayF4BTpCkayIqiMt51+ukyIra+YXMB2Ma
atPT0SLnBuZ3KFDbOm6xTzRyWswjC+KGia5N3W89rvTy
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:21:55 2026 by rpki-client