This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/323830333a386261303a3a2f33322d3430203d3e203631353132.roa
File: 323830333a386261303a3a2f33322d3430203d3e203631353132.roa (raw, json)
Hash identifier: 7ZqMIjG0WgeMqlJmfm7ndHegOmviDiVejIJysUnS+vY=
Subject key identifier: 4D:E3:D7:0E:12:0A:49:5D:47:1F:32:A7:7D:25:4B:3A:EC:44:72:8C
Certificate issuer: /CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7
Certificate serial: 5E2F5B4D8C30FD2F50B5B310374DB917D2D7A466
Authority key identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/323830333a386261303a3a2f33322d3430203d3e203631353132.roa
Signing time: Tue 06 Jan 2026 19:07:41 +0000
ROA not before: Tue 06 Jan 2026 19:02:41 +0000
ROA not after: Tue 05 Jan 2027 19:07:41 +0000
asID: 61512
IP address blocks: 2803:8ba0::/32 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl
rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 09:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2f:5b:4d:8c:30:fd:2f:50:b5:b3:10:37:4d:b9:17:d2:d7:a4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7
Validity
Not Before: Jan 6 19:02:41 2026 GMT
Not After : Jan 5 19:07:41 2027 GMT
Subject: CN=4DE3D70E120A495D471F32A77D254B3AEC44728C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:e6:a4:60:29:84:25:9e:bc:41:e5:dc:fa:
b5:8c:fb:eb:50:c9:30:ed:62:d1:5a:d3:71:ba:61:
3f:1f:da:c2:60:50:2f:af:eb:60:71:9a:6c:21:a6:
43:ce:63:42:38:a0:c7:f9:9d:58:d7:79:fc:38:f1:
1d:80:c5:35:c8:bc:02:66:8a:72:8e:5b:f7:ae:1f:
77:08:48:6c:f0:0f:f7:c2:e1:7e:7d:a8:fb:12:5f:
e2:c8:11:7a:f3:30:65:ab:61:ad:f0:cd:c8:f9:8b:
e9:b8:d5:94:44:f7:33:ac:8e:5d:e3:e8:38:3a:d3:
84:df:fd:6b:9c:b3:ba:19:d0:72:48:f6:b5:e8:09:
45:bf:87:1a:04:16:2f:a2:b3:83:54:2a:84:be:4b:
c6:83:ca:77:db:82:9a:b9:44:26:8e:2a:5f:73:b4:
07:7b:ba:34:a6:8c:37:9f:0b:65:24:bc:28:84:d2:
f6:8b:84:2d:02:a4:ca:d9:d2:e5:c4:15:e8:30:ff:
7e:ae:e4:a2:49:78:a9:7c:8f:58:95:5d:1f:d3:bf:
03:86:d3:7f:03:b4:6d:60:0b:ab:a8:ea:83:21:f4:
70:1a:a5:5f:db:64:88:8c:53:cf:fc:2e:de:d0:f2:
25:2b:15:7e:40:81:f5:1d:4a:9c:0b:28:33:ce:d5:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E3:D7:0E:12:0A:49:5D:47:1F:32:A7:7D:25:4B:3A:EC:44:72:8C
X509v3 Authority Key Identifier:
keyid:34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/323830333a386261303a3a2f33322d3430203d3e203631353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8ba0::/32
Signature Algorithm: sha256WithRSAEncryption
73:b1:f2:bf:bf:44:1b:69:41:6f:80:83:e6:0d:11:cc:07:a3:
48:ad:97:d7:0d:38:72:3e:37:27:22:77:8c:5d:58:6e:1e:22:
f2:96:13:eb:64:2e:e6:08:d7:5a:ca:0a:c6:b0:5d:d4:3a:7d:
9b:77:89:c6:db:41:9d:3b:e1:2f:7b:83:57:29:9a:30:b5:f7:
68:10:85:6e:89:8b:98:eb:fc:4e:e9:0b:87:8a:7b:f3:a7:dd:
49:79:2b:86:76:2d:87:91:ac:e2:ac:3d:cb:bb:e1:10:13:26:
3f:c5:83:ec:59:6c:c8:c4:06:68:55:6a:7e:e3:1b:e4:a7:33:
6b:31:0a:ec:ed:58:a4:9c:42:4e:22:41:c0:25:37:85:2f:b0:
ff:f6:03:8a:a7:11:40:ad:9b:6e:f8:7e:92:24:7b:77:30:fd:
60:15:9e:7e:4e:a4:11:ad:64:5a:84:81:8c:1f:af:63:36:91:
08:bf:9a:32:a0:e3:1a:0c:d1:f3:4c:5c:ca:a8:22:61:56:36:
66:c9:02:a4:79:c2:b6:71:ad:ef:bd:c9:01:52:c5:64:70:d9:
7d:c0:ca:73:e0:eb:59:b9:a9:29:ad:31:da:6b:89:e5:cc:b7:
3e:8d:69:70:ba:be:01:30:94:24:d3:eb:69:04:75:5e:98:c5:
9c:61:f4:e5
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUXi9bTYww/S9QtbMQN025F9LXpGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3MkUxRkYxODE4OTYyQUZCOURBRDQ0OERFQjZCNEYw
MkJERkJDNzAeFw0yNjAxMDYxOTAyNDFaFw0yNzAxMDUxOTA3NDFaMDMxMTAvBgNV
BAMTKDRERTNENzBFMTIwQTQ5NUQ0NzFGMzJBNzdEMjU0QjNBRUM0NDcyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTxeakYCmEJZ68QeXc+rWM++tQ
yTDtYtFa03G6YT8f2sJgUC+v62BxmmwhpkPOY0I4oMf5nVjXefw48R2AxTXIvAJm
inKOW/euH3cISGzwD/fC4X59qPsSX+LIEXrzMGWrYa3wzcj5i+m41ZRE9zOsjl3j
6Dg604Tf/Wucs7oZ0HJI9rXoCUW/hxoEFi+is4NUKoS+S8aDynfbgpq5RCaOKl9z
tAd7ujSmjDefC2UkvCiE0vaLhC0CpMrZ0uXEFegw/36u5KJJeKl8j1iVXR/TvwOG
038DtG1gC6uo6oMh9HAapV/bZIiMU8/8Lt7Q8iUrFX5AgfUdSpwLKDPO1VLFAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUTePXDhIKSV1HHzKnfSVLOuxEcowwHwYDVR0j
BBgwFoAUNHLh/xgYlir7na1EjetrTwK9+8cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0Q1OUNFMDAxNzIxNDZCMEMxMTZBODQ1MDBGNjNGRTc1
MTFBREE2NTBEQzE2RDU3RUJCRkJERjc5OTIwMEJCLzAvMzQ3MkUxRkYxODE4OTYy
QUZCOURBRDQ0OERFQjZCNEYwMkJERkJDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDcyRTFGRjE4MTg5NjJBRkI5
REFENDQ4REVCNkI0RjAyQkRGQkM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdENTlDRTAwMTcyMTQ2QjBDMTE2QTg0NTAwRjYzRkU3NTExQURBNjUw
REMxNkQ1N0VCQkZCREY3OTkyMDBCQi8wLzMyMzgzMDMzM2EzODYyNjEzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDM2MzEzNTMxMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA4ugMA0G
CSqGSIb3DQEBCwUAA4IBAQBzsfK/v0QbaUFvgIPmDRHMB6NIrZfXDThyPjcnIneM
XVhuHiLylhPrZC7mCNdaygrGsF3UOn2bd4nG20GdO+Eve4NXKZowtfdoEIVuiYuY
6/xO6QuHinvzp91JeSuGdi2HkazirD3Lu+EQEyY/xYPsWWzIxAZoVWp+4xvkpzNr
MQrs7ViknEJOIkHAJTeFL7D/9gOKpxFArZtu+H6SJHt3MP1gFZ5+TqQRrWRahIGM
H69jNpEIv5oyoOMaDNHzTFzKqCJhVjZmyQKkecK2ca3vvckBUsVkcNl9wMpz4OtZ
uakprTHaa4nlzLc+jWlwur4BMJQk0+tpBHVemMWcYfTl
-----END CERTIFICATE-----
Generated at Tue Jan 13 01:40:19 2026 by rpki-client