This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635373033.roa
File: 323830333a3432303a3a2f33322d3336203d3e20323635373033.roa (raw, json)
Hash identifier: x4tthBfCyPk7vPmkGgC9uZrwVz5W9MrGvWlKQ9gve3U=
Subject key identifier: A7:65:A8:8F:02:F4:62:8C:D8:B2:C8:20:3B:3E:D3:DF:18:02:11:45
Certificate issuer: /CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Certificate serial: 50C3D70F5F8702F59A410291182B0BDD5066942D
Authority key identifier: FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635373033.roa
Signing time: Tue 06 Jan 2026 19:19:08 +0000
ROA not before: Tue 06 Jan 2026 19:14:08 +0000
ROA not after: Tue 05 Jan 2027 19:19:08 +0000
asID: 265703
IP address blocks: 2803:420::/32 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Jan 2026 04:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c3:d7:0f:5f:87:02:f5:9a:41:02:91:18:2b:0b:dd:50:66:94:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Validity
Not Before: Jan 6 19:14:08 2026 GMT
Not After : Jan 5 19:19:08 2027 GMT
Subject: CN=A765A88F02F4628CD8B2C8203B3ED3DF18021145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:1f:e3:53:92:0f:91:10:80:f4:2b:b6:89:
68:4c:de:41:74:b1:14:cf:ca:06:6f:e0:69:75:26:
5d:77:50:7c:f8:74:ff:7a:33:60:e6:c2:1d:d6:c6:
34:91:8f:fa:43:4e:a2:f8:b5:1b:be:e0:73:cc:14:
e9:c1:bd:68:4a:be:8e:20:db:93:4b:47:36:dc:23:
66:50:62:75:88:7c:90:80:c8:78:41:55:55:bc:46:
9e:08:de:8e:dc:c0:9f:de:b7:79:29:35:00:2a:ee:
8a:b3:40:c5:13:f2:c4:16:61:37:e9:2e:c6:46:a4:
67:e0:cd:eb:f5:9c:d5:69:b3:86:e5:75:e4:6a:86:
6f:ad:2b:91:c6:4b:99:c4:a1:76:cf:98:0e:ed:f9:
48:72:7a:a6:5d:37:b9:80:1d:ba:6d:12:63:42:a5:
8e:ae:23:03:53:d0:6a:4e:57:da:ed:e1:67:4d:0a:
ab:4a:23:50:14:d2:d4:0f:d4:ce:8b:d4:52:47:12:
eb:c1:e0:00:d8:d4:3b:02:39:36:6b:72:77:8f:04:
33:7a:fd:59:b0:c6:fd:ea:bb:9d:fe:f9:6b:3c:4f:
cb:4f:c6:a8:10:39:9e:a2:81:c2:0b:e2:2b:cf:42:
47:28:e2:12:01:7a:5d:f2:d0:8c:db:6c:1f:72:df:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:A8:8F:02:F4:62:8C:D8:B2:C8:20:3B:3E:D3:DF:18:02:11:45
X509v3 Authority Key Identifier:
keyid:FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/323830333a3432303a3a2f33322d3336203d3e20323635373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:420::/32
Signature Algorithm: sha256WithRSAEncryption
5e:d7:c1:25:8f:7a:b2:49:1e:a5:89:da:83:ef:a4:58:24:8c:
66:3b:43:3c:47:6f:de:dc:d2:c1:37:20:97:2c:0f:14:b2:2b:
d1:d4:24:b1:10:9e:2c:5b:59:c8:e1:58:6d:eb:15:45:28:f5:
86:f7:66:f3:96:6d:c7:0d:57:6f:6f:6e:18:99:1a:61:fa:83:
17:87:cf:30:cb:31:70:96:94:3a:61:5c:17:7b:88:4b:c4:d2:
ab:9b:76:76:9f:ba:eb:52:ac:cc:26:47:5f:40:06:0f:57:d2:
12:c0:a1:f4:cc:21:d7:fb:dc:dc:bd:84:01:9f:3b:2c:38:8c:
86:e5:0e:71:79:66:ec:c0:5f:f5:d2:92:25:80:f3:aa:13:c4:
6d:34:1b:18:bc:1d:1b:74:1e:b4:55:78:59:76:37:7a:65:1b:
b8:2b:e7:2f:0c:c5:7d:36:5c:d7:68:75:32:c3:bb:ac:fa:85:
ff:1f:fb:97:ec:38:66:52:33:cb:ed:b4:24:75:ed:84:9c:58:
2f:4a:f2:d7:9a:15:5a:8a:19:cc:74:7f:e6:c6:b3:7a:34:ef:
f5:f5:01:90:b9:17:96:84:29:bb:5e:e2:c5:bb:78:0a:55:e2:
99:fe:19:c2:2c:0a:6d:ae:ca:2d:0f:37:19:09:2f:22:f6:da:
82:cd:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:57:03 2026 by rpki-client