This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa
File: 323830333a333936303a3a2f33322d3332203d3e20323632313836.roa (raw, json)
Hash identifier: Qqw90aD8x1TT13Dna5RFNz5pAOgx19h82r43fL5+WVI=
Subject key identifier: AF:0E:C8:7C:F8:75:0C:38:C3:0E:C7:28:B1:47:E3:5B:82:5C:35:D0
Certificate issuer: /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial: 422C040286FC552FB9F591E874B065A9BF9F2316
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa
Signing time: Tue 06 Jan 2026 19:22:44 +0000
ROA not before: Tue 06 Jan 2026 19:17:44 +0000
ROA not after: Tue 05 Jan 2027 19:22:44 +0000
asID: 262186
IP address blocks: 2803:3960::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 02:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2c:04:02:86:fc:55:2f:b9:f5:91:e8:74:b0:65:a9:bf:9f:23:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Validity
Not Before: Jan 6 19:17:44 2026 GMT
Not After : Jan 5 19:22:44 2027 GMT
Subject: CN=AF0EC87CF8750C38C30EC728B147E35B825C35D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:c1:c8:a6:fb:a7:c8:b7:d2:e9:8f:59:2b:
e7:e8:87:03:b1:45:58:f0:5d:63:d2:ad:d8:2a:0e:
ef:4c:44:32:80:0d:12:80:e0:f1:67:0a:64:c1:31:
1f:8b:71:a9:4f:5a:a4:a8:09:8c:26:fb:e9:c1:3a:
48:68:44:21:89:31:2f:c7:72:cb:08:a1:8a:8d:e9:
a1:d1:c7:c8:ea:df:1c:07:c2:d4:00:79:f8:70:2a:
94:c1:fe:c6:48:d3:5b:cc:25:c2:11:fb:09:73:94:
fc:81:14:80:e8:68:45:a7:27:28:55:e6:65:14:fe:
50:98:17:e1:c2:dc:2f:be:3d:a8:2a:12:20:2e:d3:
4b:77:69:26:60:b5:ee:22:43:d0:6c:d3:38:93:4a:
ec:20:ef:06:e5:c7:ca:81:f8:a7:86:58:51:a8:b9:
55:1d:22:ff:e3:08:cd:8a:6c:86:5a:ba:91:b3:cf:
da:fa:67:df:b4:3b:97:c1:ce:b1:54:87:2a:23:63:
69:3f:fa:ea:50:21:b9:54:89:57:42:1a:ac:a3:63:
4b:ac:23:0f:e1:d5:17:f3:6b:0d:2f:6c:b9:2c:d2:
d1:a5:79:52:46:b2:f7:49:de:c2:38:90:58:d9:6c:
8b:be:01:2d:1a:b6:4c:d6:27:d9:1c:b6:3e:38:ec:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0E:C8:7C:F8:75:0C:38:C3:0E:C7:28:B1:47:E3:5B:82:5C:35:D0
X509v3 Authority Key Identifier:
keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3960::/32
Signature Algorithm: sha256WithRSAEncryption
32:7a:ec:c2:2d:d6:05:56:8f:ad:fa:a4:69:a9:71:64:f9:0b:
b6:3b:13:f7:4f:7f:21:e5:ec:82:4f:75:fb:74:7a:26:a9:06:
42:46:ae:3b:55:4c:bd:2f:70:2a:90:98:2b:af:7d:18:66:05:
d3:5a:9a:32:6c:4a:cf:cb:8f:37:ce:bb:88:ea:6e:f5:4a:69:
d9:8c:2a:4b:cc:9f:5e:79:f3:be:1c:6c:49:94:c5:55:09:3c:
31:cd:fa:0f:c9:5b:02:2e:b8:b8:78:ac:d3:e8:68:0b:a0:da:
c4:15:9c:cf:b7:2a:41:a0:84:5a:27:00:d7:ad:de:92:0c:62:
ee:91:9b:6a:19:77:78:77:b5:dd:d4:c6:b4:12:0c:2a:3a:7d:
4a:0d:f1:fb:67:71:de:7a:dd:fc:c4:30:be:ee:74:a3:bd:3f:
3c:03:04:9d:4d:94:a2:ba:e6:53:64:af:38:d7:89:aa:1b:26:
07:fb:ea:d4:14:5d:d2:e2:e4:08:23:80:f5:f7:6b:c1:4d:14:
ed:38:c6:f4:07:0c:08:a8:48:7f:d0:12:4f:3d:f9:2b:d2:cd:
d7:77:0a:e5:b1:ed:bb:d1:74:2f:10:80:ea:57:97:a9:87:dc:
eb:63:78:09:81:0c:f5:ee:40:d5:07:be:1e:dc:00:d4:3a:19:
f6:64:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 14:36:53 2026 by rpki-client