This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/323830333a353132303a633030303a3a2f33362d3336203d3e20323637373834.roa
File: 323830333a353132303a633030303a3a2f33362d3336203d3e20323637373834.roa (raw, json)
Hash identifier: auzPwtbwGp+BS+B0qQn89ZpnhIaADDCNDiBjJpfJDKU=
Subject key identifier: B3:87:B4:B1:CF:C9:58:63:45:41:F8:CC:B8:CE:B8:E4:3B:39:91:AC
Certificate issuer: /CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
Certificate serial: 7F7E60B70D62FA21FE94E6F4F2EB321D0FE50062
Authority key identifier: 0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/323830333a353132303a633030303a3a2f33362d3336203d3e20323637373834.roa
Signing time: Tue 06 Jan 2026 19:43:11 +0000
ROA not before: Tue 06 Jan 2026 19:38:11 +0000
ROA not after: Tue 05 Jan 2027 19:43:11 +0000
asID: 267784
IP address blocks: 2803:5120:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl
rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Jan 2026 18:25:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7e:60:b7:0d:62:fa:21:fe:94:e6:f4:f2:eb:32:1d:0f:e5:00:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
Validity
Not Before: Jan 6 19:38:11 2026 GMT
Not After : Jan 5 19:43:11 2027 GMT
Subject: CN=B387B4B1CFC958634541F8CCB8CEB8E43B3991AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:06:2e:3d:6a:41:98:27:fc:5b:ba:68:fc:
5c:fa:5f:a4:b3:d9:15:54:73:91:bc:34:2a:0c:65:
be:fb:56:32:fa:b5:7f:f5:fb:bb:5e:1d:20:3e:ab:
cb:d1:8f:ee:23:17:1c:2a:6b:12:0d:28:41:90:e0:
b0:be:14:6b:e5:30:ee:12:47:9c:42:e4:d6:c3:55:
2c:bc:ea:18:a1:d9:f1:cf:d8:b3:ec:d3:86:19:a5:
c2:63:63:c2:c8:66:1c:1f:19:1d:48:03:0c:d2:33:
06:11:fa:72:a3:6f:8d:a8:51:5f:ec:5c:72:8a:08:
97:7a:ca:c5:22:7a:27:d9:50:8c:99:39:2c:ab:cf:
23:35:55:7b:9d:18:18:db:2d:b7:7c:74:f9:93:b5:
bf:bf:d9:8e:5b:b6:13:71:77:81:a1:fa:28:60:b9:
49:13:d6:fb:b5:99:d7:30:48:52:f0:da:40:8f:d5:
21:1f:91:fc:fb:07:0d:b0:35:46:20:3d:c1:ba:15:
51:7a:79:01:7e:1c:e8:69:3a:b8:aa:23:bf:e5:38:
ab:53:99:d0:b9:64:e0:27:64:97:28:59:20:3b:50:
fb:6f:5d:cf:f7:0f:f9:00:5c:ba:03:4f:62:03:c3:
42:65:82:3d:10:86:95:94:78:0f:83:de:d0:12:48:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:87:B4:B1:CF:C9:58:63:45:41:F8:CC:B8:CE:B8:E4:3B:39:91:AC
X509v3 Authority Key Identifier:
keyid:0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/323830333a353132303a633030303a3a2f33362d3336203d3e20323637373834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5120:c000::/36
Signature Algorithm: sha256WithRSAEncryption
7d:53:97:03:1b:01:30:a0:f6:c3:0c:41:80:81:d7:12:07:68:
52:4d:24:ec:a8:6a:87:9e:00:28:31:3e:de:37:25:54:fa:16:
38:ea:53:e0:92:8c:54:ab:54:77:f2:55:3e:f5:e0:ad:94:8f:
aa:ad:7b:80:2b:6f:67:99:df:5b:db:88:7a:27:b5:94:ab:59:
ee:4a:7b:d9:b5:a4:73:02:06:bd:a5:01:d6:ed:08:38:af:5f:
23:07:57:6d:bf:11:71:e3:e1:6c:e7:fa:bd:53:0b:c1:73:91:
07:1e:d1:92:b1:46:06:a8:0c:55:1d:b1:42:fb:b1:29:4d:f2:
3e:33:af:19:97:ce:da:6a:57:ad:e7:32:c9:87:46:40:0d:25:
86:92:12:82:de:be:e8:12:cf:43:a0:04:6b:58:be:c9:8c:07:
fa:0d:38:d3:91:e6:c4:5a:6b:f9:b0:82:7d:d0:8c:ad:f2:97:
a9:77:e2:8f:b7:e2:5d:c4:09:89:64:a1:a4:2a:74:0c:ee:4c:
1f:27:a7:6a:75:34:81:32:29:66:4f:77:a1:3e:4e:14:9e:93:
2d:9a:22:f5:57:65:5d:3e:4f:dc:55:3c:57:5f:44:7f:9b:f6:
bf:fb:1f:c3:a8:fa:3b:c1:a6:3f:a8:af:14:d6:c9:2b:8e:1e:
17:27:a5:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 14 12:25:30 2026 by rpki-client