This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431323a3a2f34382d3438203d3e20323732383438.roa
File: 323830333a353230303a363431323a3a2f34382d3438203d3e20323732383438.roa (raw, json)
Hash identifier: x077CbEeN0xwNfN4vklgUyUc6zgsu/pA7x3sS0m7QxM=
Subject key identifier: 4D:DF:64:E7:48:CC:76:68:0A:4E:C4:92:E5:B4:56:BD:AC:09:20:7D
Certificate issuer: /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial: 5D01D4418A81A1FF39B166CD2387A3F1F48AB7F2
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431323a3a2f34382d3438203d3e20323732383438.roa
Signing time: Tue 06 Jan 2026 19:45:18 +0000
ROA not before: Tue 06 Jan 2026 19:40:18 +0000
ROA not after: Tue 05 Jan 2027 19:45:18 +0000
asID: 272848
IP address blocks: 2803:5200:6412::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 21:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:01:d4:41:8a:81:a1:ff:39:b1:66:cd:23:87:a3:f1:f4:8a:b7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Validity
Not Before: Jan 6 19:40:18 2026 GMT
Not After : Jan 5 19:45:18 2027 GMT
Subject: CN=4DDF64E748CC76680A4EC492E5B456BDAC09207D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:6d:8a:c5:1e:12:bd:c9:05:35:c5:37:a5:
b0:85:09:52:82:c0:a4:e2:f7:c3:47:55:d0:d0:77:
7f:50:fe:34:29:9e:58:1e:6e:af:3e:65:bd:1f:11:
f9:21:1f:3b:ea:b5:9f:8f:25:c9:77:06:02:8f:17:
96:0e:a4:5e:6b:da:40:33:48:ff:e7:10:69:98:55:
c1:f5:e5:92:d3:08:33:eb:a3:07:c9:0a:81:22:5b:
1c:20:d0:b8:c5:7e:28:12:53:76:e2:f2:24:e1:ad:
a1:e8:0e:02:1c:9a:23:18:c0:95:62:cc:2a:da:f3:
62:01:bb:fa:e2:be:9a:cf:d2:a2:64:ee:21:21:b7:
df:5d:59:48:b2:12:c9:f5:4e:a3:d0:70:4a:b7:0c:
cf:d0:38:57:b5:2c:b2:5c:38:76:97:ed:18:51:f6:
36:bd:31:22:d3:6b:97:42:46:85:a9:56:02:cf:36:
45:89:d2:8f:20:c2:23:ea:d0:00:1a:2a:fc:05:49:
28:62:68:cc:09:13:ee:69:5c:63:08:b3:cf:d6:0a:
72:01:b0:05:e8:ba:f1:0b:16:9c:bf:02:91:53:8d:
f4:9a:c2:8b:e7:eb:52:4f:46:6e:ea:39:e4:77:b6:
3e:17:6b:11:e5:98:ac:a1:80:be:da:c7:07:b8:d4:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DF:64:E7:48:CC:76:68:0A:4E:C4:92:E5:B4:56:BD:AC:09:20:7D
X509v3 Authority Key Identifier:
keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431323a3a2f34382d3438203d3e20323732383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5200:6412::/48
Signature Algorithm: sha256WithRSAEncryption
02:65:ce:6d:ed:dd:f2:7a:f3:82:f2:f1:11:ab:91:42:69:3b:
cb:c2:cb:d7:d9:ed:a7:51:37:13:55:85:bd:3f:22:78:94:82:
95:98:d1:96:34:14:be:a1:fb:3e:94:de:74:d7:48:74:02:01:
a7:5b:85:08:7f:af:fd:f5:bc:9a:2e:ed:3c:31:08:17:d3:ad:
a1:ab:46:75:8e:cf:22:d7:f4:58:71:ea:b3:2a:38:63:cb:b5:
21:0c:3c:bd:b2:0b:cb:fa:3c:e3:34:db:0c:65:30:79:e0:0c:
fc:9a:a7:58:d3:21:34:ec:02:7b:bc:f0:89:c9:a2:78:40:73:
4a:b0:c0:c8:ac:82:12:9d:0a:b4:39:0a:75:b9:40:50:1e:82:
13:21:89:ab:83:22:c3:a7:b1:87:c3:c1:f6:09:12:57:33:ea:
0f:97:09:33:f9:5f:4a:14:e1:49:8d:24:e0:d6:6c:85:6e:1f:
84:98:68:f4:1c:25:1c:ef:c1:9d:09:94:30:a6:96:67:56:cd:
55:18:35:51:69:55:64:f4:c6:1e:fd:29:e1:ea:2f:cf:71:49:
5b:1a:30:6f:3b:58:6a:7f:72:2d:cd:26:90:16:0a:ec:9a:d6:
8d:6c:75:74:67:61:57:c9:ce:82:55:91:36:93:7f:63:e9:6d:
10:b4:f7:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 13 09:30:11 2026 by rpki-client