This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/323830333a393663303a3a2f33322d3438203d3e20323635363534.roa
File: 323830333a393663303a3a2f33322d3438203d3e20323635363534.roa (raw, json)
Hash identifier: +4WvnzVOt/EVUDZN9YCaDCCRLy9YYWSvnAxw1LtprVk=
Subject key identifier: 4F:F6:3B:05:55:F1:6D:FD:9B:65:09:F6:AB:9A:F9:33:78:2A:CB:6F
Certificate issuer: /CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA
Certificate serial: 7AC22E64B43DC4C915E2FA86C76BB43A1D06D245
Authority key identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/323830333a393663303a3a2f33322d3438203d3e20323635363534.roa
Signing time: Tue 06 Jan 2026 19:27:07 +0000
ROA not before: Tue 06 Jan 2026 19:22:07 +0000
ROA not after: Tue 05 Jan 2027 19:27:07 +0000
asID: 265654
IP address blocks: 2803:96c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl
rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 23:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c2:2e:64:b4:3d:c4:c9:15:e2:fa:86:c7:6b:b4:3a:1d:06:d2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA
Validity
Not Before: Jan 6 19:22:07 2026 GMT
Not After : Jan 5 19:27:07 2027 GMT
Subject: CN=4FF63B0555F16DFD9B6509F6AB9AF933782ACB6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:80:b7:4e:c5:4d:e6:8f:09:9a:7a:fe:c8:
b5:2a:37:e5:28:e3:7d:9f:be:e6:30:eb:d9:0f:6d:
66:02:aa:f0:d9:33:4a:6f:a4:c5:d3:dd:45:d6:45:
fc:dd:76:8a:fd:39:12:cc:08:a6:d7:2a:38:e4:2f:
1b:95:de:ca:51:ab:85:51:1a:98:2e:2f:0c:81:d8:
f0:8b:cc:e9:d1:07:74:f7:66:58:09:9d:a6:dd:cf:
93:2c:29:01:fc:17:e8:90:b3:3c:85:2d:5e:45:88:
8b:23:21:30:6a:5c:7d:e9:07:46:93:8b:ec:e9:dd:
18:d0:5e:b3:4c:ec:6c:b4:18:5b:4f:a4:b2:29:09:
88:f0:58:0a:c5:39:5f:c5:d7:c7:bb:c1:7e:0b:06:
67:60:fc:cb:5e:60:69:28:17:4d:28:10:4a:d4:6d:
1a:4f:df:db:49:00:8c:12:6a:e2:10:c8:9b:67:03:
32:09:68:1f:2a:81:33:1f:c8:63:89:39:95:53:42:
b2:20:94:1d:bc:8b:16:15:34:43:f1:53:fd:14:fc:
7a:1f:24:f5:37:70:26:b4:1b:14:fd:51:3d:0e:25:
be:5e:90:b9:94:25:bc:40:08:7e:25:02:99:a5:56:
e1:36:f3:68:18:ad:4f:08:4d:5e:1b:68:42:f6:9e:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F6:3B:05:55:F1:6D:FD:9B:65:09:F6:AB:9A:F9:33:78:2A:CB:6F
X509v3 Authority Key Identifier:
keyid:3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/323830333a393663303a3a2f33322d3438203d3e20323635363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:96c0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:b0:2b:91:db:56:44:9a:28:7e:0a:c2:14:58:39:e8:50:8a:
0a:2e:a4:4b:31:95:4f:73:6a:82:15:e9:70:1f:2b:84:e6:5d:
98:b6:36:da:d4:ca:86:9c:7d:5b:d3:58:f4:5f:86:60:3d:15:
d2:4d:bc:f3:2a:8d:9f:17:3d:c8:fb:39:7e:16:b4:cb:88:33:
e9:f2:d7:ad:6c:e6:0d:f0:e3:83:08:2b:44:bc:be:c6:e5:0f:
ad:75:2a:4f:4b:97:11:dc:33:0a:96:35:38:11:a9:c4:61:08:
fb:14:82:e4:ea:3d:bc:4e:6e:e0:10:5e:7e:76:93:85:a2:f8:
4a:ad:11:ef:df:46:35:5b:4e:96:2a:12:3b:8a:d5:19:a8:c7:
22:7f:b9:e4:23:50:56:bd:34:21:f0:c9:8b:59:70:1a:7a:d7:
ef:81:61:34:50:44:3a:98:46:b1:7f:dc:c7:43:45:d3:e8:0e:
dc:72:c0:89:ac:e1:06:2f:7d:44:b4:13:66:3f:98:8b:bf:10:
77:6f:e7:f7:37:cd:33:79:5b:a9:22:85:2c:b4:e9:9b:02:a5:
36:4c:c9:5a:10:fe:22:01:d6:1d:8f:2f:da:08:fa:11:2e:83:
86:17:c4:32:40:76:15:ed:e7:3f:3b:ed:87:6b:8b:9a:6e:35:
58:76:ff:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:14 2026 by rpki-client