This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/323830333a326232303a3a2f33322d3332203d3e20323636373431.roa
File: 323830333a326232303a3a2f33322d3332203d3e20323636373431.roa (raw, json)
Hash identifier: FsVWCnKkZvLGzpgBh8RrxxVHhfUTt/SnQfpF5cRIE38=
Subject key identifier: CF:3D:52:BC:DF:7E:40:0A:D8:88:EE:E1:4E:79:16:FD:DE:F3:AA:83
Certificate issuer: /CN=8027A3E50E5FDCA71D08341C330ECCE0474FD787
Certificate serial: 0F203C050F65B5A4B0DEAD74EC2936860BE00D6C
Authority key identifier: 80:27:A3:E5:0E:5F:DC:A7:1D:08:34:1C:33:0E:CC:E0:47:4F:D7:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/323830333a326232303a3a2f33322d3332203d3e20323636373431.roa
Signing time: Tue 06 Jan 2026 20:51:38 +0000
ROA not before: Tue 06 Jan 2026 20:46:38 +0000
ROA not after: Tue 05 Jan 2027 20:51:38 +0000
asID: 266741
IP address blocks: 2803:2b20::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.crl
rsync://repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 05:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:20:3c:05:0f:65:b5:a4:b0:de:ad:74:ec:29:36:86:0b:e0:0d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8027A3E50E5FDCA71D08341C330ECCE0474FD787
Validity
Not Before: Jan 6 20:46:38 2026 GMT
Not After : Jan 5 20:51:38 2027 GMT
Subject: CN=CF3D52BCDF7E400AD888EEE14E7916FDDEF3AA83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:79:1a:04:c7:6e:5d:fa:69:b9:99:6b:30:
b8:de:cd:1d:bd:fd:be:c9:06:98:b5:7e:9c:37:b5:
4e:8d:ca:4f:c8:73:0e:eb:d3:7e:a8:65:d4:46:da:
8a:59:16:93:9c:9c:a0:5b:d7:ff:c0:fe:3f:45:ff:
80:0c:fa:75:c1:f2:c3:34:8f:1a:47:50:97:9e:3d:
44:bb:e0:27:cc:7e:a4:35:e8:d6:3e:33:82:af:92:
a5:42:be:da:f2:a4:c7:2b:1c:92:1f:e9:ab:e7:12:
46:d8:41:72:b0:3f:7a:02:0e:27:92:62:3f:c6:59:
24:1d:e1:96:95:fb:1e:3b:e0:13:80:fa:da:cf:14:
dd:c3:e4:22:19:ba:f8:b7:39:f8:64:5c:6b:a9:df:
1a:c8:16:27:6e:55:53:a1:aa:63:3a:3f:18:ec:28:
bc:a9:5e:e3:c6:bc:65:56:75:46:ee:a5:c5:70:38:
c3:fa:57:ae:ef:38:88:5f:09:4d:ed:fe:ea:ac:3e:
5e:b2:c2:03:39:11:66:3d:2f:f0:ae:fb:76:e5:2b:
30:90:68:9c:37:54:af:d7:31:50:e0:de:e0:6d:ec:
0e:a0:a8:2c:66:82:9c:e2:44:c9:ef:00:c8:ca:c5:
d3:07:65:90:32:56:bd:db:d6:30:c6:92:7e:07:76:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:52:BC:DF:7E:40:0A:D8:88:EE:E1:4E:79:16:FD:DE:F3:AA:83
X509v3 Authority Key Identifier:
keyid:80:27:A3:E5:0E:5F:DC:A7:1D:08:34:1C:33:0E:CC:E0:47:4F:D7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/323830333a326232303a3a2f33322d3332203d3e20323636373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2b20::/32
Signature Algorithm: sha256WithRSAEncryption
37:e7:2a:13:aa:55:da:cb:bc:85:d5:3d:9a:2d:8c:56:91:ea:
23:1f:9e:d9:0f:41:da:2e:bd:6b:40:65:05:02:2f:a3:de:7b:
25:7e:f9:9d:fc:e9:12:3a:4a:94:4e:6f:74:ee:cb:aa:1f:78:
c8:2f:b5:69:6a:dc:bf:04:c4:e5:3f:aa:54:7b:44:07:37:fd:
8a:7a:db:c4:85:20:9a:f0:52:0f:c8:fe:91:01:c3:50:ea:16:
5f:5b:42:c8:47:ec:ba:4d:2e:a4:93:58:8a:20:6d:71:15:37:
9a:12:b1:a4:a1:46:d2:82:0d:f1:5f:ec:91:87:d5:70:86:7f:
07:d3:c1:b5:00:bc:3a:02:43:46:da:ef:cd:c6:6e:f7:22:ca:
60:4b:a1:4e:2c:c1:1d:b1:8b:21:e7:b8:3c:56:fe:48:4b:eb:
bb:1d:ed:59:9a:85:38:01:bf:c3:1c:6b:88:7f:b5:c5:e9:23:
b7:be:8f:16:dd:f1:af:c9:f6:94:cf:9e:15:62:2e:e1:08:93:
cb:e3:c8:ba:d6:1c:28:3b:93:64:00:58:95:ad:c8:55:b2:9d:
b5:9d:c1:17:52:a2:a2:7a:a4:b2:7f:a5:e1:a9:6b:f8:e2:56:
af:aa:89:eb:fe:26:9d:ee:cd:9b:38:a0:32:80:65:59:64:5a:
e4:62:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:51:10 2026 by rpki-client