This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/323830333a623931303a3a2f33322d3432203d3e20323732303133.roa
File: 323830333a623931303a3a2f33322d3432203d3e20323732303133.roa (raw, json)
Hash identifier: pEAtFS5LqXDI7761OcgBB2FimSZ7E3dNG1+92mW6+Yc=
Subject key identifier: 34:0E:9B:C3:DC:66:B3:A9:97:22:09:4F:34:04:0A:AD:AE:4A:AD:F8
Certificate issuer: /CN=BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C
Certificate serial: 0AABC69DD4A714A0D73FCD90E4F0E8B9EC530613
Authority key identifier: BD:04:BD:B4:E0:48:6F:1A:4A:8D:25:7A:F7:BB:83:84:F5:61:F3:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/323830333a623931303a3a2f33322d3432203d3e20323732303133.roa
Signing time: Tue 06 Jan 2026 19:03:35 +0000
ROA not before: Tue 06 Jan 2026 18:58:35 +0000
ROA not after: Tue 05 Jan 2027 19:03:35 +0000
asID: 272013
IP address blocks: 2803:b910::/32 maxlen: 42
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.crl
rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 01:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ab:c6:9d:d4:a7:14:a0:d7:3f:cd:90:e4:f0:e8:b9:ec:53:06:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C
Validity
Not Before: Jan 6 18:58:35 2026 GMT
Not After : Jan 5 19:03:35 2027 GMT
Subject: CN=340E9BC3DC66B3A99722094F34040AADAE4AADF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:bb:0a:ef:65:a8:ad:72:91:c6:19:35:ba:
51:0f:40:53:30:87:9d:36:49:9a:b2:73:c7:b7:99:
a9:1c:90:1d:90:b2:79:a3:2f:fa:cf:35:0d:98:9b:
35:58:c8:37:16:a9:2e:29:b1:e1:e9:97:24:63:7a:
70:0b:23:80:e4:7e:6f:65:f9:bc:f0:f1:61:1a:7e:
05:66:3e:6c:69:28:7b:16:94:98:50:9c:02:1f:8f:
d6:32:1d:9a:69:17:25:49:41:f1:9d:a4:ec:fa:75:
2c:cf:c9:4f:78:e0:7d:ef:06:63:31:93:8c:2b:9b:
53:39:ae:bb:fb:f1:25:2c:f8:f0:0d:ab:df:7f:06:
2a:98:af:73:cf:4d:66:d3:69:78:16:2f:cc:1b:a5:
e7:41:3c:c6:ff:cf:61:60:67:90:9c:f6:33:d0:44:
10:46:9b:e1:79:1f:99:b4:24:73:35:8e:27:9b:d4:
62:3d:40:c5:28:75:61:f3:da:4a:c5:4e:38:27:ae:
b8:22:77:6f:70:59:de:f4:d4:92:de:20:77:0a:9f:
61:d1:d7:a9:84:96:d0:db:f2:e8:0c:33:57:d2:a6:
dd:ba:01:99:a2:f5:ef:2f:50:33:fd:26:9b:5f:fe:
0a:18:ce:d6:db:ac:6b:87:04:2e:d2:c9:ff:81:08:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:9B:C3:DC:66:B3:A9:97:22:09:4F:34:04:0A:AD:AE:4A:AD:F8
X509v3 Authority Key Identifier:
keyid:BD:04:BD:B4:E0:48:6F:1A:4A:8D:25:7A:F7:BB:83:84:F5:61:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/323830333a623931303a3a2f33322d3432203d3e20323732303133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b910::/32
Signature Algorithm: sha256WithRSAEncryption
01:69:fe:55:ca:8a:f5:a4:8c:a6:cf:53:44:6f:13:ed:ae:17:
03:34:38:da:3a:17:0d:50:80:6d:0a:8b:77:bf:85:e8:3b:38:
c5:8a:bc:86:6d:da:7e:d3:ec:78:fc:13:8d:12:85:2f:e7:ee:
1e:df:cd:0c:0f:84:9e:86:fc:53:df:6d:40:24:68:d5:da:fa:
e2:82:4b:39:66:d6:d6:ee:18:cc:d9:90:f8:d3:81:aa:61:0a:
98:96:42:99:9f:af:e4:2a:7d:2a:5b:f8:9e:ef:df:8b:53:d9:
bc:a6:b3:86:e6:88:34:6c:42:11:8f:bd:9b:ac:7e:61:13:4c:
57:65:ec:97:c6:62:6b:8c:9c:1d:9e:ea:95:73:00:df:ec:64:
98:3d:87:1d:1d:a3:8f:75:3a:6a:96:be:7d:0d:47:a6:2e:32:
17:e0:be:72:96:f8:8a:40:fd:ab:89:98:9a:92:2a:70:60:8e:
04:38:82:1d:2a:3d:ca:f1:37:31:5c:a4:a6:77:81:a0:aa:52:
67:9b:7a:77:d3:57:01:a5:cb:e1:fe:a3:17:63:ef:1e:13:03:
57:19:b3:e2:0b:3b:fb:1b:b0:83:06:48:a3:25:16:ac:4c:d1:
af:d4:94:ec:52:1a:a2:61:1c:c2:65:1e:e1:e5:5b:c6:df:52:
78:35:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 11:30:50 2026 by rpki-client