This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa
File: 323830333a326631303a3a2f33322d3438203d3e20323732313230.roa (raw, json)
Hash identifier: G+swUuOnFun9qv97T3GNgV7ef87pZxFGT+iqi3uL3Ks=
Subject key identifier: E8:56:E7:F5:1A:06:C0:2A:BF:91:F8:28:44:AD:26:9A:02:97:CF:FB
Certificate issuer: /CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
Certificate serial: 2E25EB1687CA00E5752DFA1868A1AF9000A108C3
Authority key identifier: 90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa
Signing time: Tue 06 Jan 2026 20:58:03 +0000
ROA not before: Tue 06 Jan 2026 20:53:03 +0000
ROA not after: Tue 05 Jan 2027 20:58:03 +0000
asID: 272120
IP address blocks: 2803:2f10::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl
rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 22:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:25:eb:16:87:ca:00:e5:75:2d:fa:18:68:a1:af:90:00:a1:08:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
Validity
Not Before: Jan 6 20:53:03 2026 GMT
Not After : Jan 5 20:58:03 2027 GMT
Subject: CN=E856E7F51A06C02ABF91F82844AD269A0297CFFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:06:fb:26:49:96:8c:78:89:c6:d6:2a:42:
34:c4:41:74:8e:b9:35:b6:c6:ca:9e:7e:62:c8:ac:
24:06:6d:16:66:d6:01:2f:7e:b4:de:bb:86:58:d9:
b1:51:36:c1:cb:59:a8:f8:06:33:57:dd:28:fd:56:
29:63:5d:00:f9:11:44:a9:0f:7e:68:5d:27:44:b8:
13:7f:54:05:e2:7b:7d:d3:dc:e9:50:26:4f:af:a9:
88:71:47:e6:5a:fa:fa:82:b5:dc:97:02:ab:40:17:
3f:fb:b9:0c:13:a2:92:bf:33:24:0d:53:a0:e9:2b:
ae:8a:e9:96:f0:e7:5b:7e:c2:60:0f:e9:2b:c7:93:
0e:53:dc:1f:2c:30:7b:a5:c2:aa:de:e2:5e:d9:71:
28:4d:c8:e0:df:21:a1:7e:8b:74:37:ee:0a:b9:a5:
7a:af:39:85:36:6e:fd:0b:98:b8:af:93:53:53:cd:
eb:5c:37:bf:4b:14:2e:a9:7d:8c:3c:d7:03:9f:1a:
4a:12:24:86:d0:54:00:41:78:2f:8d:30:e1:91:a1:
0c:09:42:e4:f7:bb:e9:51:52:01:40:41:aa:bc:97:
55:38:ff:43:20:28:89:9e:84:9f:2c:4c:7b:ac:81:
fd:2b:d2:f0:0c:13:e2:9d:8e:b2:e6:a8:ab:c7:04:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:56:E7:F5:1A:06:C0:2A:BF:91:F8:28:44:AD:26:9A:02:97:CF:FB
X509v3 Authority Key Identifier:
keyid:90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2f10::/32
Signature Algorithm: sha256WithRSAEncryption
b4:92:60:1d:2e:2b:bf:47:22:68:08:8d:4b:9b:7d:b2:05:0f:
0d:a1:ac:0d:19:be:bf:30:40:68:37:9f:36:06:46:44:14:8f:
dc:61:a6:01:9c:6e:f9:b6:45:0b:76:47:c7:3b:ba:bd:92:29:
03:fd:15:9d:f1:f2:ca:a9:e2:c3:60:7a:be:06:79:be:93:ae:
f8:ec:d0:35:e7:92:24:bf:a7:43:48:39:69:e9:da:97:fd:ad:
94:75:be:44:f5:81:2b:aa:cd:46:ec:9b:4e:88:0e:ac:5b:d7:
1b:f4:33:8e:a7:79:ae:d3:d0:54:c7:8a:75:3d:c2:e5:74:4e:
1d:e3:e8:25:8d:51:df:77:f3:da:6e:3e:03:6d:46:cf:a7:a2:
45:cf:77:d0:96:aa:de:68:db:6e:51:82:97:20:44:e4:13:84:
22:c5:43:76:82:45:d1:20:ba:47:75:62:b6:e0:7c:ff:a2:ee:
dd:b1:18:cd:d1:0f:c9:cb:be:ab:01:7d:e9:f7:25:5f:b3:e4:
15:de:35:84:af:8c:66:4f:65:f8:27:9d:30:0d:3b:05:39:d4:
91:d6:87:d4:a3:89:f6:fb:a2:27:41:4e:72:45:37:46:b4:89:
27:f9:d3:e8:4d:b2:e6:34:0f:f7:b7:47:3a:77:9c:4a:3e:06:
e6:25:ff:81
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULiXrFofKAOV1LfoYaKGvkAChCMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA4QjkwOTRDOEIxNDlEQzk4NUZCODJGMEMwQTM3MzdF
RERBOEE0MDAeFw0yNjAxMDYyMDUzMDNaFw0yNzAxMDUyMDU4MDNaMDMxMTAvBgNV
BAMTKEU4NTZFN0Y1MUEwNkMwMkFCRjkxRjgyODQ0QUQyNjlBMDI5N0NGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcQb7JkmWjHiJxtYqQjTEQXSO
uTW2xsqefmLIrCQGbRZm1gEvfrTeu4ZY2bFRNsHLWaj4BjNX3Sj9ViljXQD5EUSp
D35oXSdEuBN/VAXie33T3OlQJk+vqYhxR+Za+vqCtdyXAqtAFz/7uQwTopK/MyQN
U6DpK66K6Zbw51t+wmAP6SvHkw5T3B8sMHulwqre4l7ZcShNyODfIaF+i3Q37gq5
pXqvOYU2bv0LmLivk1NTzetcN79LFC6pfYw81wOfGkoSJIbQVABBeC+NMOGRoQwJ
QuT3u+lRUgFAQaq8l1U4/0MgKImehJ8sTHusgf0r0vAME+KdjrLmqKvHBFtFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU6Fbn9RoGwCq/kfgoRK0mmgKXz/swHwYDVR0j
BBgwFoAUkIuQlMixSdyYX7gvDAo3N+3aikAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjFCQUMzREY4MUQ3MjhGRTMzRjU4QTYwQUY3ODkxRDEx
NThCNDgyMDBFQjgxQURCNzUwM0YxMUZEQkFEODhELzAvOTA4QjkwOTRDOEIxNDlE
Qzk4NUZCODJGMEMwQTM3MzdFRERBOEE0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDhCOTA5NEM4QjE0OURDOTg1
RkI4MkYwQzBBMzczN0VEREE4QTQwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0YxQkFDM0RGODFENzI4RkUzM0Y1OEE2MEFGNzg5MUQxMTU4QjQ4MjAw
RUI4MUFEQjc1MDNGMTFGREJBRDg4RC8wLzMyMzgzMDMzM2EzMjY2MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjMxMzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDLxAw
DQYJKoZIhvcNAQELBQADggEBALSSYB0uK79HImgIjUubfbIFDw2hrA0Zvr8wQGg3
nzYGRkQUj9xhpgGcbvm2RQt2R8c7ur2SKQP9FZ3x8sqp4sNger4Geb6Trvjs0DXn
kiS/p0NIOWnp2pf9rZR1vkT1gSuqzUbsm06IDqxb1xv0M46nea7T0FTHinU9wuV0
Th3j6CWNUd9389puPgNtRs+nokXPd9CWqt5o225RgpcgROQThCLFQ3aCRdEgukd1
YrbgfP+i7t2xGM3RD8nLvqsBfen3JV+z5BXeNYSvjGZPZfgnnTANOwU51JHWh9Sj
ifb7oidBTnJFN0a0iSf50+hNsuY0D/e3Rzp3nEo+BuYl/4E=
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:13:23 2026 by rpki-client