This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/323830333a386636303a3a2f33322d3438203d3e203532343936.roa
File: 323830333a386636303a3a2f33322d3438203d3e203532343936.roa (raw, json)
Hash identifier: aJjvzR+e0scpBj+AdaeQ7KKzk/5xFB9HqScJ4Dv2CRg=
Subject key identifier: 87:37:87:3B:BB:CE:4D:07:F1:51:5D:36:0E:35:77:F7:8E:DE:84:94
Certificate issuer: /CN=0AC68AE029154F6D77C1C00DCE8081D363F9D2BC
Certificate serial: 19D67FFE6B5A3EA02CA9C8E441A9D1BE683AF0AF
Authority key identifier: 0A:C6:8A:E0:29:15:4F:6D:77:C1:C0:0D:CE:80:81:D3:63:F9:D2:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/323830333a386636303a3a2f33322d3438203d3e203532343936.roa
Signing time: Tue 06 Jan 2026 18:57:58 +0000
ROA not before: Tue 06 Jan 2026 18:52:58 +0000
ROA not after: Tue 05 Jan 2027 18:57:58 +0000
asID: 52496
IP address blocks: 2803:8f60::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.crl
rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 18:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d6:7f:fe:6b:5a:3e:a0:2c:a9:c8:e4:41:a9:d1:be:68:3a:f0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AC68AE029154F6D77C1C00DCE8081D363F9D2BC
Validity
Not Before: Jan 6 18:52:58 2026 GMT
Not After : Jan 5 18:57:58 2027 GMT
Subject: CN=8737873BBBCE4D07F1515D360E3577F78EDE8494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:1a:a6:f7:ff:45:cd:23:f6:6b:68:4f:9b:
64:a3:f1:e2:e4:a4:fa:10:0a:a4:f4:5d:80:0e:13:
e4:0d:a4:48:1b:25:a6:c0:c8:de:87:45:86:61:ae:
6a:73:06:d9:60:e7:16:b6:9d:80:99:d4:94:ad:e4:
d5:1c:38:7e:25:b3:08:20:b1:46:b2:81:55:57:99:
7c:ec:57:4a:63:02:6f:15:e2:f6:d2:7c:2b:45:a9:
5d:43:6f:5a:a6:b1:d6:28:0e:82:87:ea:99:ee:2f:
17:16:ce:d9:ea:0c:fd:49:b4:36:e1:b4:fe:0e:4d:
2d:56:df:9e:c9:fd:fa:a6:a7:b5:06:11:e5:96:86:
40:d8:77:89:05:d5:34:01:09:6b:ec:98:93:c5:7c:
62:00:fe:5e:04:ab:11:aa:ae:e3:41:cf:47:2c:3f:
22:4f:8d:fd:a0:ea:b4:ba:85:70:21:3e:fd:96:35:
1a:a0:bf:4d:a6:e2:76:89:91:3d:47:53:00:d0:c5:
09:e7:1d:79:b5:52:79:62:2b:e7:2f:f3:94:a1:7c:
2b:59:25:c8:ef:8b:71:89:64:57:c0:03:37:41:71:
0b:df:68:f3:64:10:e0:2b:3d:6d:c3:e6:d0:03:12:
38:01:b0:e2:2e:b0:6c:1b:21:72:06:be:18:3f:e5:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:37:87:3B:BB:CE:4D:07:F1:51:5D:36:0E:35:77:F7:8E:DE:84:94
X509v3 Authority Key Identifier:
keyid:0A:C6:8A:E0:29:15:4F:6D:77:C1:C0:0D:CE:80:81:D3:63:F9:D2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/323830333a386636303a3a2f33322d3438203d3e203532343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8f60::/32
Signature Algorithm: sha256WithRSAEncryption
07:85:a3:e5:b7:19:e8:e6:eb:0d:34:2a:8a:40:17:f8:07:2e:
5f:cb:e8:ba:b5:22:77:d7:5e:5e:07:ee:25:5f:59:bf:5f:5d:
f2:28:41:da:35:52:ad:99:e4:7a:22:25:7b:04:a5:d2:7e:4d:
19:d7:64:55:c2:c9:d2:c0:95:de:aa:c7:5a:a9:4e:cc:2e:01:
ba:9d:96:d8:e5:e5:80:86:c6:6e:5f:d1:bf:68:9c:8b:63:c3:
92:c3:f3:f6:ae:6d:64:48:a3:39:9b:92:77:4e:04:b7:72:fb:
1c:f5:46:27:fc:8d:2f:68:19:de:27:8f:9b:73:16:bd:69:1c:
c5:fc:8d:86:6f:c5:b0:5f:6b:4b:87:77:32:b7:f7:43:69:b1:
14:16:86:7b:a3:b7:8e:1a:c0:3f:1b:81:0f:63:45:4c:58:df:
d7:59:a0:9e:7e:80:30:ea:78:4f:34:c5:04:2f:9d:48:bd:c7:
8f:04:5b:76:ab:2e:06:9f:7c:94:e8:0a:b8:5e:fd:03:4a:ce:
34:89:cb:33:81:73:bc:40:a9:fc:44:bd:53:b4:35:22:3f:70:
00:67:45:4a:74:ed:d7:5c:58:8a:db:9e:c4:6b:ec:3a:22:a5:
f9:b1:b9:29:8f:fe:64:a5:46:68:7c:f3:e3:af:09:56:96:48:
9a:d8:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:04:10 2026 by rpki-client