This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/323830333a663738303a3a2f33322d3438203d3e20323731383034.roa
File: 323830333a663738303a3a2f33322d3438203d3e20323731383034.roa (raw, json)
Hash identifier: JeDoZKjX5VG3p1YywkMYPiEbYLwbrh9EFN8pYBOZ3xE=
Subject key identifier: 95:A6:85:6B:63:8E:1E:E4:26:C9:60:12:12:04:94:BC:89:13:F1:93
Certificate issuer: /CN=F2AE7C052E238AB3E9EBF19E56710078113440CB
Certificate serial: 4E66F5871E9DC70008888ABE59F20C2F096E9E20
Authority key identifier: F2:AE:7C:05:2E:23:8A:B3:E9:EB:F1:9E:56:71:00:78:11:34:40:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/323830333a663738303a3a2f33322d3438203d3e20323731383034.roa
Signing time: Tue 06 Jan 2026 19:06:08 +0000
ROA not before: Tue 06 Jan 2026 19:01:08 +0000
ROA not after: Tue 05 Jan 2027 19:06:08 +0000
asID: 271804
IP address blocks: 2803:f780::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.crl
rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 20:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:66:f5:87:1e:9d:c7:00:08:88:8a:be:59:f2:0c:2f:09:6e:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2AE7C052E238AB3E9EBF19E56710078113440CB
Validity
Not Before: Jan 6 19:01:08 2026 GMT
Not After : Jan 5 19:06:08 2027 GMT
Subject: CN=95A6856B638E1EE426C96012120494BC8913F193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:36:e1:94:53:62:16:7b:c8:28:27:8a:66:
58:1a:bc:f9:a0:4d:bc:0c:bc:32:38:57:32:0d:80:
be:75:b5:d0:7f:53:a2:9c:e2:f1:1f:16:5a:ee:c8:
37:c5:ad:3c:d4:fe:90:ec:db:29:ad:5b:e3:92:f3:
07:1d:91:a6:e7:d0:56:b4:d3:c7:fa:e5:d4:d8:1a:
6a:93:7f:36:13:f2:74:aa:31:f9:c4:f4:79:01:a9:
76:bd:c4:50:af:fc:6a:a6:17:73:af:dd:bc:28:61:
74:18:e8:16:31:d5:57:e8:98:83:14:d6:a8:0f:a5:
e7:b3:a1:8b:13:f5:44:64:c7:31:fd:e1:56:d3:28:
6c:32:6a:e7:13:14:d0:23:04:e1:18:a5:c7:07:84:
b3:91:4b:87:bc:9e:db:d7:ac:ce:40:8f:67:d3:e6:
55:14:0c:02:98:69:0c:4e:7f:f4:54:ca:c8:6e:da:
aa:d4:82:ec:20:00:57:f1:ca:16:1c:ef:47:18:d3:
1e:c5:e7:06:8a:9d:1c:c3:8b:75:12:cd:c6:ac:bb:
22:10:b3:af:4b:75:b8:75:fa:86:b0:5e:06:d3:ad:
ac:5e:e1:39:7a:cd:26:41:b4:2b:90:22:8a:b4:35:
79:35:6b:fa:e3:f0:a5:c3:32:46:85:67:d0:ad:2a:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:85:6B:63:8E:1E:E4:26:C9:60:12:12:04:94:BC:89:13:F1:93
X509v3 Authority Key Identifier:
keyid:F2:AE:7C:05:2E:23:8A:B3:E9:EB:F1:9E:56:71:00:78:11:34:40:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/323830333a663738303a3a2f33322d3438203d3e20323731383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f780::/32
Signature Algorithm: sha256WithRSAEncryption
d9:82:c4:b0:d4:ee:1b:e5:e5:92:da:49:0d:f2:a8:13:6d:89:
fd:d8:7d:a5:8c:06:dc:9c:27:52:d2:29:6e:a5:e6:d7:a5:b4:
aa:0a:17:d3:b2:6e:0b:cf:c5:bd:20:cd:e3:cf:e7:79:d1:2e:
f8:79:f2:fd:9e:ab:51:5d:f9:36:3c:85:29:a1:74:55:e6:9c:
ff:e2:d1:f4:67:d5:60:0b:a4:32:2d:22:c6:cd:c1:fa:02:49:
cf:a3:f7:af:20:4f:57:b5:bc:f5:dc:52:80:ec:e6:b1:f8:d0:
16:5b:15:6f:43:2c:37:ff:76:66:c6:b7:8a:df:6d:60:52:09:
f5:37:4b:91:38:84:24:1f:40:27:62:29:76:aa:31:d0:27:65:
de:c9:a8:70:a2:15:6c:10:db:a1:82:af:b8:d3:e4:ed:81:b4:
98:3b:e8:21:43:69:1b:1d:87:86:13:de:04:f2:7c:8e:f3:3b:
45:4a:f2:5c:4c:cf:41:eb:ae:44:bc:35:09:fe:7e:db:99:e8:
8e:2f:a3:05:be:7f:48:38:1d:1d:39:5a:e4:82:67:6e:11:32:
34:c0:42:3d:18:a1:1a:5b:39:6c:69:3c:b5:5f:f7:1a:67:b1:
6c:52:f9:1a:88:1b:f8:a1:c1:5d:a9:50:48:2d:04:b5:34:38:
15:24:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:44:54 2026 by rpki-client