This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e203532343638.roa
File: 323830333a353763303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier: Ao0JBAqVTgE1tylfYPJhIHDqJ3tmyBYy+v7gdgLyxWU=
Subject key identifier: 45:14:A4:29:E4:EB:1F:ED:20:AA:D1:2E:B7:0A:58:F8:0F:87:98:AB
Certificate issuer: /CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
Certificate serial: 3F141826D5219319EFBA5E7C2C2E2D66CB22A2E4
Authority key identifier: BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e203532343638.roa
Signing time: Tue 06 Jan 2026 19:20:13 +0000
ROA not before: Tue 06 Jan 2026 19:15:13 +0000
ROA not after: Tue 05 Jan 2027 19:20:13 +0000
asID: 52468
IP address blocks: 2803:57c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl
rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 17:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:14:18:26:d5:21:93:19:ef:ba:5e:7c:2c:2e:2d:66:cb:22:a2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
Validity
Not Before: Jan 6 19:15:13 2026 GMT
Not After : Jan 5 19:20:13 2027 GMT
Subject: CN=4514A429E4EB1FED20AAD12EB70A58F80F8798AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:08:f0:65:d7:07:da:15:e4:fc:9b:94:3f:
a1:23:5b:97:df:47:43:70:ba:10:82:a2:f5:e7:18:
8c:93:86:14:4f:4c:06:6e:6f:07:5f:58:5a:a0:e4:
42:b0:a3:23:77:af:63:ef:c6:a2:2c:74:3e:0f:d1:
28:b3:19:b8:59:8e:48:84:54:b5:7e:1f:f6:0f:5c:
b5:4c:3b:e5:7d:d7:ba:b0:a4:91:39:e2:db:41:84:
5e:53:2e:74:f1:fb:8a:e7:c1:e1:eb:d7:27:70:83:
f9:14:09:a1:68:77:a1:c1:75:22:6e:80:89:29:0b:
f4:dc:79:c5:83:44:99:7a:70:87:a4:85:6f:aa:2f:
a1:a5:bb:04:a3:0a:53:e2:54:a2:10:a2:97:ae:45:
05:f3:2c:3d:8f:5f:e4:2e:b7:c6:e7:22:4c:e0:00:
26:b2:8a:88:35:6e:d9:41:53:e4:5e:f8:af:e2:c1:
9b:e5:c1:1c:59:f2:ec:e5:56:cd:75:ae:05:a8:66:
95:ed:15:d1:92:e9:ad:f1:71:26:66:b9:c6:fa:21:
33:64:ae:06:c2:83:4b:d4:42:26:02:b4:fa:3d:cb:
de:7c:78:26:ed:1a:28:ab:6d:b9:26:eb:90:02:6b:
73:c4:bd:84:72:94:33:3d:7e:0c:b9:5d:f8:5d:0d:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:A4:29:E4:EB:1F:ED:20:AA:D1:2E:B7:0A:58:F8:0F:87:98:AB
X509v3 Authority Key Identifier:
keyid:BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:57c0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:55:8b:65:4b:d2:26:c7:cb:97:0c:a9:e4:f9:de:e1:5c:d6:
dd:a5:53:a0:29:b1:cd:18:99:19:24:94:04:2b:a7:77:2f:6c:
70:d4:f2:73:18:9d:89:de:c2:81:3a:e5:39:f0:87:36:6f:d4:
6d:3e:35:6c:4d:f6:c8:e2:f9:28:39:65:51:f7:87:53:ab:88:
c7:3c:f6:6b:b1:bf:0b:b3:d0:4e:cf:30:b3:6b:63:75:65:8b:
cc:8d:ac:c6:6d:83:0f:96:e2:e9:b2:33:c2:42:ac:f2:cc:7d:
c1:a6:32:ab:84:bd:6e:2c:83:9d:0c:e4:d7:1e:f6:77:e6:67:
77:6a:ef:c9:01:99:12:7c:34:ec:b7:c4:eb:45:3c:b1:56:4e:
58:56:a9:00:b1:79:b0:29:af:a4:3f:48:44:09:cd:6d:33:d9:
8a:9f:42:d0:2f:78:d8:e2:39:2b:54:2e:61:3c:b2:9f:d7:1e:
3c:62:a3:d0:97:3d:b7:3c:ca:7e:de:f3:fa:b4:5b:1c:69:08:
f9:03:ad:97:86:cb:c4:4c:8b:48:b9:a8:ee:fb:4f:9d:4d:50:
74:87:4f:e2:d3:52:7c:04:9f:2b:a8:f1:ed:5c:79:a5:e1:fe:
14:a6:09:2d:ff:75:08:eb:36:37:3d:31:52:26:95:26:a6:bb:
0c:40:71:1d
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUPxQYJtUhkxnvul58LC4tZssiouQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0M0NDOURBNURGMkU4NkNERTI3NkM2REQ1RjgyNkYx
NjJBNTg4NjAeFw0yNjAxMDYxOTE1MTNaFw0yNzAxMDUxOTIwMTNaMDMxMTAvBgNV
BAMTKDQ1MTRBNDI5RTRFQjFGRUQyMEFBRDEyRUI3MEE1OEY4MEY4Nzk4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzQjwZdcH2hXk/JuUP6EjW5ff
R0NwuhCCovXnGIyThhRPTAZubwdfWFqg5EKwoyN3r2PvxqIsdD4P0SizGbhZjkiE
VLV+H/YPXLVMO+V917qwpJE54ttBhF5TLnTx+4rnweHr1ydwg/kUCaFod6HBdSJu
gIkpC/TcecWDRJl6cIekhW+qL6GluwSjClPiVKIQopeuRQXzLD2PX+Qut8bnIkzg
ACayiog1btlBU+Re+K/iwZvlwRxZ8uzlVs11rgWoZpXtFdGS6a3xcSZmucb6ITNk
rgbCg0vUQiYCtPo9y958eCbtGiirbbkm65ACa3PEvYRylDM9fgy5XfhdDaDlAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQURRSkKeTrH+0gqtEutwpY+A+HmKswHwYDVR0j
BBgwFoAUukPMnaXfLobN4nbG3V+CbxYqWIYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RDc1QUEzMTk5QkZBREQ4MUUyRkE1NkJFREM1N0JFREVD
RDcxOUJDOUUwNjNGOUY3N0U2NzMwQzRDNUNCNEZELzAvQkE0M0NDOURBNURGMkU4
NkNERTI3NkM2REQ1RjgyNkYxNjJBNTg4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQTQzQ0M5REE1REYyRTg2Q0RF
Mjc2QzZERDVGODI2RjE2MkE1ODg2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEQ3NUFBMzE5OUJGQUREODFFMkZBNTZCRURDNTdCRURFQ0Q3MTlCQzlF
MDYzRjlGNzdFNjczMEM0QzVDQjRGRC8wLzMyMzgzMDMzM2EzNTM3NjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA1fAMA0G
CSqGSIb3DQEBCwUAA4IBAQCoVYtlS9Imx8uXDKnk+d7hXNbdpVOgKbHNGJkZJJQE
K6d3L2xw1PJzGJ2J3sKBOuU58Ic2b9RtPjVsTfbI4vkoOWVR94dTq4jHPPZrsb8L
s9BOzzCza2N1ZYvMjazGbYMPluLpsjPCQqzyzH3BpjKrhL1uLIOdDOTXHvZ35md3
au/JAZkSfDTst8TrRTyxVk5YVqkAsXmwKa+kP0hECc1tM9mKn0LQL3jY4jkrVC5h
PLKf1x48YqPQlz23PMp+3vP6tFscaQj5A62XhsvETItIuaju+0+dTVB0h0/i01J8
BJ8rqPHtXHml4f4Upgkt/3UI6zY3PTFSJpUmprsMQHEd
-----END CERTIFICATE-----
Generated at Mon Jan 12 23:54:45 2026 by rpki-client