This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f34302d3430203d3e203237393531.roa
File: 323830333a646132303a3a2f34302d3430203d3e203237393531.roa (raw, json)
Hash identifier: 99pxzmiMtoHQMhxr1RizqukxKeWUSlwuu4wKojSh1C4=
Subject key identifier: B4:96:E4:65:C8:7D:58:31:CB:A0:CA:41:84:78:C6:CE:D2:CF:70:E0
Certificate issuer: /CN=F341739AE08457A031B734E9D432A5F3E22893FE
Certificate serial: 46B64CB533274A3D9396AA653496AC2F5D9B2C99
Authority key identifier: F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f34302d3430203d3e203237393531.roa
Signing time: Tue 06 Jan 2026 19:03:29 +0000
ROA not before: Tue 06 Jan 2026 18:58:29 +0000
ROA not after: Tue 05 Jan 2027 19:03:29 +0000
asID: 27951
IP address blocks: 2803:da20::/40 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl
rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b6:4c:b5:33:27:4a:3d:93:96:aa:65:34:96:ac:2f:5d:9b:2c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F341739AE08457A031B734E9D432A5F3E22893FE
Validity
Not Before: Jan 6 18:58:29 2026 GMT
Not After : Jan 5 19:03:29 2027 GMT
Subject: CN=B496E465C87D5831CBA0CA418478C6CED2CF70E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:eb:74:88:b8:c1:c5:3a:1e:06:0e:89:bc:
3c:cb:ea:e4:ac:dc:36:20:12:6d:bf:13:80:fe:84:
5f:cd:af:04:74:4d:cf:22:62:e6:3c:9d:6e:84:1b:
16:46:b4:e8:ac:6d:22:7e:60:60:78:a9:cd:e8:ac:
c3:86:4d:be:cb:44:ab:c8:12:17:25:7a:80:db:c6:
d9:35:9f:df:21:99:01:dd:79:e2:3e:dc:2a:f2:94:
1a:65:b1:22:29:95:1e:73:80:1e:aa:21:78:a9:a6:
7f:df:bf:39:eb:a4:91:9b:3a:d3:92:4c:86:c3:44:
69:fe:b8:2e:f9:45:f9:bd:b6:52:08:ce:60:98:45:
c8:e3:63:fe:fd:a6:64:06:48:e8:e8:f7:4c:41:91:
96:f7:85:b1:11:65:e7:11:32:a1:df:8f:b0:31:44:
16:bc:0c:62:47:d6:9f:8e:a6:4e:4c:93:a4:34:4d:
20:99:2e:bf:d5:a4:39:9d:4d:b2:40:e4:20:2e:f9:
c7:bb:9c:dc:54:23:03:2c:25:54:8b:ec:5b:52:29:
4a:13:1f:fa:1a:6f:c1:41:9c:86:ad:cc:da:54:93:
0e:30:80:6b:5b:20:31:be:37:91:53:4a:ef:bf:2f:
c4:4e:5c:95:23:4e:b3:5e:c5:fa:45:f6:0e:b6:de:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:E4:65:C8:7D:58:31:CB:A0:CA:41:84:78:C6:CE:D2:CF:70:E0
X509v3 Authority Key Identifier:
keyid:F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f34302d3430203d3e203237393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:da20::/40
Signature Algorithm: sha256WithRSAEncryption
2c:0a:76:40:0f:d4:ab:fa:4c:bc:1b:47:45:26:ff:c5:b8:73:
13:58:ee:ea:61:a4:d1:a6:e1:59:c4:c3:97:2c:bc:33:7e:d2:
79:bf:28:e9:65:5c:45:1c:06:6a:44:28:38:a3:c1:3d:f4:8a:
4b:33:43:e9:b1:30:2b:7b:72:36:d8:09:6e:f3:42:72:cf:e8:
da:9d:1f:39:c9:88:34:d6:96:a6:97:58:36:35:44:1a:41:c6:
96:f0:ea:cd:33:e7:9c:13:13:78:ad:da:bd:38:a3:12:fb:32:
06:d0:8c:e3:97:b2:41:ad:39:c0:f7:c0:a2:14:46:3d:3c:5b:
fd:aa:79:4b:aa:43:93:91:ac:02:a8:68:1c:9d:61:07:6d:ad:
34:2b:7b:76:49:90:88:f3:28:0e:33:3e:40:1f:05:ac:6f:57:
3f:3d:16:5b:ce:e6:cb:73:2f:4e:69:f5:64:35:97:0c:10:2a:
f3:f1:00:80:6b:fd:07:0c:66:59:f0:39:8e:0c:ea:55:02:e8:
3b:b5:9a:c5:d0:cc:86:a9:ef:b0:c4:49:a6:9c:06:bf:d6:f7:
03:33:b1:2f:8b:4b:fe:d2:0e:35:40:a7:46:a1:b5:e6:b8:01:
e1:91:52:fb:ac:d8:fd:49:3c:9b:8f:4f:27:a5:08:6c:c4:de:
3b:2f:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:53:31 2026 by rpki-client