This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa
File: 323830363a3231663a3a2f33322d3332203d3e20323635353034.roa (raw, json)
Hash identifier: Kx01TirIHZjEaGCvcWgGZ+lzhgVb0uwQ+VHfFB2qfrE=
Subject key identifier: C6:17:9A:A0:B3:DB:B5:B7:0A:8F:B9:1C:3A:04:17:C6:D7:6F:A5:63
Certificate issuer: /CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Certificate serial: 34570AA736876A2C1BC3F91F37922E236363575F
Authority key identifier: 1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa
Signing time: Tue 06 Jan 2026 19:22:40 +0000
ROA not before: Tue 06 Jan 2026 19:17:40 +0000
ROA not after: Tue 05 Jan 2027 19:22:40 +0000
asID: 265504
IP address blocks: 2806:21f::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:57:0a:a7:36:87:6a:2c:1b:c3:f9:1f:37:92:2e:23:63:63:57:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Validity
Not Before: Jan 6 19:17:40 2026 GMT
Not After : Jan 5 19:22:40 2027 GMT
Subject: CN=C6179AA0B3DBB5B70A8FB91C3A0417C6D76FA563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:1b:0d:2d:ba:77:78:23:24:65:ea:1b:0e:
cd:66:4e:b9:02:75:84:24:2a:d3:27:d1:e0:50:6d:
49:0e:e0:e9:85:eb:57:e6:2f:7b:3d:ec:29:23:ce:
87:b7:ee:25:7e:ee:4e:14:ed:27:b4:bd:d2:20:a2:
33:4d:84:d7:7d:e8:74:ea:3e:91:ca:82:48:5a:5d:
ed:0a:48:45:b1:a7:38:9e:22:79:b4:3a:3f:b6:91:
a4:e4:12:5d:37:c4:19:df:b4:a5:40:6d:4b:31:7d:
cb:73:13:27:74:b4:60:5a:9d:a1:be:6f:74:9b:b4:
c9:6c:4c:4d:ec:bf:b7:4f:a1:c7:cb:23:4b:c1:ff:
b8:ad:f5:24:98:56:c9:68:5a:0d:ed:ae:24:d2:f4:
00:6b:2a:90:16:c3:76:4d:4c:aa:ab:4c:77:f4:93:
62:ee:5a:91:b2:23:99:58:a1:a5:f5:7f:04:14:65:
7e:9b:8b:d4:fe:04:79:f3:5c:48:5e:d9:b3:b0:46:
45:5e:2e:8f:8e:83:b5:c6:30:07:dc:09:48:d2:24:
85:f2:da:3e:70:4e:41:3d:e5:eb:3a:4f:e6:2d:bd:
ed:3e:8f:4b:27:bd:d3:90:7b:90:a3:5b:8d:5e:22:
4e:a0:a3:bd:fc:d6:d6:6c:18:71:1c:87:41:b1:71:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:9A:A0:B3:DB:B5:B7:0A:8F:B9:1C:3A:04:17:C6:D7:6F:A5:63
X509v3 Authority Key Identifier:
keyid:1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:21f::/32
Signature Algorithm: sha256WithRSAEncryption
7c:2f:31:8d:2f:7b:87:10:01:bc:c9:5c:96:d3:eb:1f:2a:f1:
ba:73:be:c4:23:3f:c5:77:3b:6a:7a:76:c9:74:42:ce:89:26:
15:61:45:ed:8b:9c:82:a3:90:8e:cd:b9:3b:b1:9e:fd:05:10:
18:ef:c4:32:a8:27:27:73:ce:99:1e:89:5c:d2:7b:41:87:ff:
1f:a2:9c:b4:09:05:45:b7:01:73:7f:1d:ad:78:ad:6c:07:dc:
4e:e7:40:96:c7:b3:23:c7:6d:cc:50:33:a5:91:7a:51:41:f9:
ce:ff:6c:39:b3:cc:b7:0b:3c:43:aa:99:5b:86:8e:2d:01:69:
de:8e:96:5b:86:62:24:28:6e:f0:d6:f7:34:4a:bf:33:f1:64:
e4:f0:23:3e:40:4d:8e:7f:dd:05:38:16:02:d0:a2:9f:46:f7:
0f:da:91:c2:50:12:e1:cd:56:e9:8c:63:cb:7e:e4:49:be:e3:
5d:14:f8:19:7b:88:bc:70:e0:15:8d:48:79:21:ed:64:d1:28:
6c:24:53:14:a1:03:d9:df:17:ca:5c:7e:03:a5:ef:95:c9:c5:
58:51:9c:cc:37:b3:fd:94:f4:8f:b3:a3:10:51:31:3b:bf:83:
5c:40:eb:40:db:62:4c:e6:d4:a4:ca:fb:20:d7:db:76:98:67:
4b:0f:d5:32
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUNFcKpzaHaiwbw/kfN5IuI2NjV18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ2MDA0MEVERTA2NkNCMEE1M0U4QUY0NDNGMEQ4NURB
ODlEN0Y2ODAeFw0yNjAxMDYxOTE3NDBaFw0yNzAxMDUxOTIyNDBaMDMxMTAvBgNV
BAMTKEM2MTc5QUEwQjNEQkI1QjcwQThGQjkxQzNBMDQxN0M2RDc2RkE1NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aBsNLbp3eCMkZeobDs1mTrkC
dYQkKtMn0eBQbUkO4OmF61fmL3s97Ckjzoe37iV+7k4U7Se0vdIgojNNhNd96HTq
PpHKgkhaXe0KSEWxpzieInm0Oj+2kaTkEl03xBnftKVAbUsxfctzEyd0tGBanaG+
b3SbtMlsTE3sv7dPocfLI0vB/7it9SSYVsloWg3triTS9ABrKpAWw3ZNTKqrTHf0
k2LuWpGyI5lYoaX1fwQUZX6bi9T+BHnzXEhe2bOwRkVeLo+Og7XGMAfcCUjSJIXy
2j5wTkE95es6T+Ytve0+j0snvdOQe5CjW41eIk6go7381tZsGHEch0GxcW1ZAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUxheaoLPbtbcKj7kcOgQXxtdvpWMwHwYDVR0j
BBgwFoAUHWAEDt4GbLClPor0Q/DYXaidf2gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTY0OTdFRjI5OTIyNzI3NEMyMDYzQkQ5NzJEQjk3Q0Iy
NDFFQUMwQUE2MjkzMkM5RTc3MkI5RDQ1MUM3NzhDLzAvMUQ2MDA0MEVERTA2NkNC
MEE1M0U4QUY0NDNGMEQ4NURBODlEN0Y2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDYwMDQwRURFMDY2Q0IwQTUz
RThBRjQ0M0YwRDg1REE4OUQ3RjY4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDk2NDk3RUYyOTkyMjcyNzRDMjA2M0JEOTcyREI5N0NCMjQxRUFDMEFB
NjI5MzJDOUU3NzJCOUQ0NTFDNzc4Qy8wLzMyMzgzMDM2M2EzMjMxNjYzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzUzNTMwMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgIfMA0G
CSqGSIb3DQEBCwUAA4IBAQB8LzGNL3uHEAG8yVyW0+sfKvG6c77EIz/FdztqenbJ
dELOiSYVYUXti5yCo5COzbk7sZ79BRAY78QyqCcnc86ZHolc0ntBh/8fopy0CQVF
twFzfx2teK1sB9xO50CWx7Mjx23MUDOlkXpRQfnO/2w5s8y3CzxDqplbho4tAWne
jpZbhmIkKG7w1vc0Sr8z8WTk8CM+QE2Of90FOBYC0KKfRvcP2pHCUBLhzVbpjGPL
fuRJvuNdFPgZe4i8cOAVjUh5Ie1k0ShsJFMUoQPZ3xfKXH4Dpe+VycVYUZzMN7P9
lPSPs6MQUTE7v4NcQOtA22JM5tSkyvsg19t2mGdLD9Uy
-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:09 2026 by rpki-client