This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030303a3a2f34382d3438203d3e20323732393738.roa
File: 323830333a623065303a373030303a3a2f34382d3438203d3e20323732393738.roa (raw, json)
Hash identifier: ln4DNH6PT78aXb2yvOxK21TAKLePNilvJaYiPR6LHv0=
Subject key identifier: 50:F2:9F:F3:3A:CF:16:12:5A:C5:EC:2F:9C:99:E2:90:81:8D:0D:AD
Certificate issuer: /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial: 4813AF33BD3BD1458CCD52B12B5631B787F7A1C8
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030303a3a2f34382d3438203d3e20323732393738.roa
Signing time: Tue 06 Jan 2026 19:10:11 +0000
ROA not before: Tue 06 Jan 2026 19:05:11 +0000
ROA not after: Tue 05 Jan 2027 19:10:11 +0000
asID: 272978
IP address blocks: 2803:b0e0:7000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 18:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:13:af:33:bd:3b:d1:45:8c:cd:52:b1:2b:56:31:b7:87:f7:a1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Validity
Not Before: Jan 6 19:05:11 2026 GMT
Not After : Jan 5 19:10:11 2027 GMT
Subject: CN=50F29FF33ACF16125AC5EC2F9C99E290818D0DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:c7:74:3c:11:b7:ce:01:63:93:ac:25:fb:
e4:38:d9:3d:12:9a:da:9b:05:39:c8:c1:9b:80:de:
09:fb:9a:6a:e0:e9:88:10:44:c2:95:ec:00:fa:bd:
a6:c1:d0:10:31:90:26:0c:07:81:43:80:10:1a:05:
3f:93:1e:ca:57:e3:86:94:15:7d:8b:bd:b6:c9:a9:
e8:c0:a8:6a:9b:86:50:1b:fd:78:ae:04:f2:94:e0:
d0:39:a1:f5:69:5c:75:4a:fc:81:8f:38:7c:00:4c:
28:47:01:f9:18:7b:f2:1f:15:45:a8:9a:c0:9f:90:
54:4f:8d:ee:05:a3:92:c4:44:cd:b8:b5:e3:03:30:
4f:cd:5a:21:fe:be:e3:4b:35:43:53:7f:9c:8c:e9:
8b:3d:85:1e:95:d8:b6:23:ca:2a:70:11:9b:ac:f2:
bc:38:2a:86:db:37:11:b1:77:b8:f1:5f:65:57:00:
f3:c7:07:76:ae:9f:aa:58:4b:ac:f3:5e:2f:eb:60:
c3:b9:54:ca:75:57:0c:f3:86:bb:5b:4e:7c:d2:ea:
c3:c1:1c:b0:ad:5c:8e:f6:a8:3b:89:ba:36:e5:a9:
02:53:1a:19:c8:9a:bd:85:d0:dc:62:96:fb:01:de:
ff:c7:50:cf:c2:d9:2c:44:49:8f:0f:3d:e5:0d:c2:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:9F:F3:3A:CF:16:12:5A:C5:EC:2F:9C:99:E2:90:81:8D:0D:AD
X509v3 Authority Key Identifier:
keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030303a3a2f34382d3438203d3e20323732393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b0e0:7000::/48
Signature Algorithm: sha256WithRSAEncryption
4b:a5:37:13:52:5e:0b:7d:56:ee:b2:6b:64:e7:7e:43:94:48:
c6:3b:68:a1:14:0d:0b:e5:a3:a0:da:42:ce:81:0c:92:07:b5:
55:51:12:7e:e7:e9:cb:a7:fb:05:50:a4:1b:f3:60:01:56:6e:
20:87:b4:82:ae:2e:ff:4c:25:8d:3c:55:db:01:15:6b:1d:75:
78:3b:9d:97:38:50:eb:6d:18:e9:cb:1d:9f:a8:cb:fa:9f:02:
41:4b:bb:91:80:06:47:23:3b:38:5a:98:6b:8f:5e:b5:4c:e4:
65:c5:51:43:39:c6:68:ea:52:4b:48:23:5f:ed:3e:e0:72:34:
37:24:40:83:bd:4c:dd:d6:1a:0f:de:83:82:00:9a:f9:e2:61:
c2:eb:a3:7c:a4:12:d9:b8:f6:2a:b5:8d:7f:da:21:08:c8:09:
f9:d7:eb:4d:6b:83:de:0a:6a:66:0f:40:27:2a:59:72:e4:93:
4c:53:14:2b:08:6d:00:11:27:43:62:91:dc:bf:5f:fb:73:58:
8e:f0:ed:32:10:6d:1f:f4:46:09:e8:d6:07:59:eb:0b:e2:88:
da:fe:42:a1:84:55:03:99:a4:ae:2c:21:5f:47:e3:31:02:6f:
2f:83:ee:00:5d:9e:a7:b6:08:38:a3:68:fa:27:f4:22:30:5e:
9e:6e:fb:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 13 09:30:13 2026 by rpki-client