This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/323830333a316236303a3a2f33322d3332203d3e20323639383037.roa
File: 323830333a316236303a3a2f33322d3332203d3e20323639383037.roa (raw, json)
Hash identifier: 2spIw8UmG8X221bJaGAmKT81D0qJ5yQj75I4fhxi25s=
Subject key identifier: B9:B3:57:DD:2A:77:92:B7:97:AE:B8:67:98:E5:41:E5:0E:A6:CD:CB
Certificate issuer: /CN=F68803BAD715CA869FCCE393884E6C602582BFF4
Certificate serial: 2A14AC379CAD21F2CD13E668B642034DBB664670
Authority key identifier: F6:88:03:BA:D7:15:CA:86:9F:CC:E3:93:88:4E:6C:60:25:82:BF:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/323830333a316236303a3a2f33322d3332203d3e20323639383037.roa
Signing time: Tue 06 Jan 2026 19:41:33 +0000
ROA not before: Tue 06 Jan 2026 19:36:33 +0000
ROA not after: Tue 05 Jan 2027 19:41:33 +0000
asID: 269807
IP address blocks: 2803:1b60::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.crl
rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 07:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:14:ac:37:9c:ad:21:f2:cd:13:e6:68:b6:42:03:4d:bb:66:46:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F68803BAD715CA869FCCE393884E6C602582BFF4
Validity
Not Before: Jan 6 19:36:33 2026 GMT
Not After : Jan 5 19:41:33 2027 GMT
Subject: CN=B9B357DD2A7792B797AEB86798E541E50EA6CDCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:ca:24:7e:e5:42:98:6b:24:5e:8c:55:ae:
ff:e2:56:7f:42:10:9a:00:3c:7b:e0:7d:39:ec:80:
85:a8:48:70:fc:ff:db:87:33:c4:33:a7:b8:39:9e:
7b:06:22:88:e6:47:ef:c3:a5:88:28:f8:4f:e2:ff:
70:a7:aa:75:b5:bf:ca:05:10:39:8e:e8:cc:92:99:
63:22:98:c8:ac:05:92:cd:cf:32:6f:fb:28:4f:b4:
71:5d:bf:62:da:3f:74:18:b9:d0:c9:5f:22:77:7c:
6c:24:c3:e7:6e:fa:41:81:39:69:d1:5a:70:2a:2b:
f5:bc:b8:d6:4b:ff:12:14:e5:ec:d6:b1:27:54:21:
aa:be:5d:61:2c:c7:b8:85:6e:36:42:f9:d7:c6:e1:
4c:9f:a9:1d:99:b8:e4:22:b5:16:11:09:08:51:c3:
96:4c:6b:e3:e2:7b:3a:13:c1:72:b4:ae:3b:1c:a4:
32:84:43:01:4b:f7:6e:ac:90:64:33:c4:31:a2:85:
47:bd:27:a2:11:0a:a2:5d:e2:95:88:96:17:f2:dc:
8d:d7:52:c3:26:9b:00:67:cd:1c:50:99:e1:23:59:
b7:82:28:49:f3:84:c5:dc:6e:b8:70:f1:5d:9d:bc:
ad:32:a4:02:9e:e8:9c:45:a7:4f:b2:01:4f:4a:b2:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:57:DD:2A:77:92:B7:97:AE:B8:67:98:E5:41:E5:0E:A6:CD:CB
X509v3 Authority Key Identifier:
keyid:F6:88:03:BA:D7:15:CA:86:9F:CC:E3:93:88:4E:6C:60:25:82:BF:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/323830333a316236303a3a2f33322d3332203d3e20323639383037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1b60::/32
Signature Algorithm: sha256WithRSAEncryption
5f:aa:84:0a:66:c3:70:a1:a9:be:41:9c:59:90:ad:c4:60:20:
5c:b7:21:3d:44:40:a1:97:36:bf:87:21:a1:4c:09:99:3e:11:
b1:ac:56:f4:05:6c:f3:0e:1a:ca:14:d7:da:86:f3:55:e1:d3:
36:15:53:1d:f5:ef:c3:3e:0d:57:c4:d8:7c:51:86:37:01:86:
71:3e:ea:18:20:98:93:3f:f8:0b:8a:1d:08:7e:fe:8d:a3:94:
2c:7b:05:fa:04:34:69:fc:79:c5:1d:cc:1f:9f:c8:5d:a8:a3:
76:bb:0c:c7:11:ff:c7:a2:3b:84:54:eb:9c:bd:ee:c6:c2:16:
f0:81:a9:a1:14:76:d4:53:6c:06:a6:d5:ca:07:57:82:26:dd:
38:80:e8:3f:62:b4:b3:e6:26:10:e1:ac:47:3d:8e:94:5c:dc:
5d:c1:ae:e2:a7:fa:7d:8d:11:98:d5:1d:3e:c6:86:bf:a9:04:
d4:c5:70:21:a7:48:6e:d2:fa:9b:ae:68:80:04:02:73:45:2b:
6f:75:44:4f:93:80:11:e9:5e:06:c1:d5:4e:8c:e9:96:30:0c:
26:2e:da:f5:9f:31:75:6a:09:9a:b4:68:f5:bb:6e:ff:ea:04:
35:02:58:5a:c6:30:70:00:13:3b:00:9f:a6:1e:09:42:43:e1:
af:d0:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:39:03 2026 by rpki-client