This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/323830333a326665303a3a2f33322d3332203d3e20323731373831.roa
File: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (raw, json)
Hash identifier: OIjhAvWP0w1Z9Bnw8BzvStQhYN82FtnyTJr6KHLWNyg=
Subject key identifier: 67:4F:AC:FD:8B:24:35:24:AA:6B:7E:C0:B5:F7:53:DC:E0:AF:CF:67
Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC
Certificate serial: 592646479A1F856EAFC81BAA29E55C226F347890
Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/323830333a326665303a3a2f33322d3332203d3e20323731373831.roa
Signing time: Tue 06 Jan 2026 19:24:05 +0000
ROA not before: Tue 06 Jan 2026 19:19:05 +0000
ROA not after: Tue 05 Jan 2027 19:24:05 +0000
asID: 271781
IP address blocks: 2803:2fe0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl
rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Jan 2026 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:26:46:47:9a:1f:85:6e:af:c8:1b:aa:29:e5:5c:22:6f:34:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC
Validity
Not Before: Jan 6 19:19:05 2026 GMT
Not After : Jan 5 19:24:05 2027 GMT
Subject: CN=674FACFD8B243524AA6B7EC0B5F753DCE0AFCF67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:2f:d5:c1:c1:23:d6:20:76:47:ba:14:a6:
6d:db:07:25:8b:53:79:3f:8d:d1:54:fb:4e:77:b3:
12:51:f8:be:cd:ef:71:4b:95:9a:5e:03:9b:2f:e2:
d9:48:07:b0:7c:fd:66:b9:92:ed:dd:9a:13:16:94:
ce:77:fc:8b:1d:13:ef:90:de:6b:d8:75:fd:58:5a:
9f:97:51:ba:d7:f3:61:e3:11:03:9b:3c:e2:e7:51:
0d:df:20:c1:74:9d:ed:1b:07:3c:b5:46:26:75:e8:
50:62:52:be:11:0f:c4:7d:9d:0b:b8:56:f5:17:4e:
49:91:47:55:39:e6:17:1c:8c:6d:9f:9f:85:fb:75:
a9:f5:f3:cf:69:bd:c8:c1:db:36:64:6d:27:5f:70:
16:0e:a0:0a:4a:e6:86:5e:ee:d2:b1:f4:1b:08:ac:
f3:4e:2d:ba:16:99:c6:3c:bf:c5:dc:e5:e1:5c:0c:
ed:75:a2:25:f2:70:a1:31:b2:be:ab:8b:63:d7:db:
40:04:de:39:4e:d7:3e:44:54:f6:0f:c7:ad:88:34:
df:81:4a:7c:2d:15:5d:eb:01:ef:9c:6c:23:89:11:
df:c7:ec:67:61:46:14:91:fd:48:d8:b9:16:2b:9d:
e0:00:f6:02:f4:28:bd:53:60:f5:fa:3b:0e:87:4d:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4F:AC:FD:8B:24:35:24:AA:6B:7E:C0:B5:F7:53:DC:E0:AF:CF:67
X509v3 Authority Key Identifier:
keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/323830333a326665303a3a2f33322d3332203d3e20323731373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2fe0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:2f:38:3d:51:fc:ff:15:4f:75:40:b3:2a:61:ba:3f:4f:40:
eb:c3:76:79:6a:06:f0:26:a4:d2:48:42:f7:e1:24:f3:ac:fc:
8f:5f:01:86:f5:a6:a2:54:b2:d6:fd:fa:69:31:44:6a:29:8e:
34:df:4d:57:96:e0:76:ec:81:27:28:03:98:16:3b:ae:f3:b4:
94:2e:a4:62:a1:25:66:9b:9e:e2:29:a5:33:1d:bc:67:5b:4e:
51:a9:3f:ff:a9:e2:ac:47:69:c8:05:e2:3e:5d:9a:d0:64:16:
e0:eb:a7:89:8b:12:c1:78:c1:ba:fc:bc:d6:1f:f1:3e:0a:05:
bb:59:2f:f1:23:94:19:56:34:7f:8a:06:4e:36:49:a1:e6:05:
da:90:05:52:77:d4:ea:74:d7:10:1e:e5:96:7d:a8:7d:55:b3:
be:2c:cd:72:78:53:17:cd:24:1e:b7:78:40:c6:86:b5:bc:aa:
67:f3:db:ee:e6:98:cf:5b:ed:bb:69:ca:c7:9f:23:7f:8d:1a:
43:50:c1:90:ea:9f:63:ce:d2:d6:dd:cd:30:26:5a:82:88:5b:
9f:4b:e9:3e:13:c2:07:1c:fd:d6:38:d3:91:ec:37:79:d9:88:
ba:39:1b:27:bb:ea:44:51:7e:76:b3:01:09:e1:0d:38:45:93:
43:ff:3f:f2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUWSZGR5ofhW6vyBuqKeVcIm80eJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG
QTFCN0ZGQzAeFw0yNjAxMDYxOTE5MDVaFw0yNzAxMDUxOTI0MDVaMDMxMTAvBgNV
BAMTKDY3NEZBQ0ZEOEIyNDM1MjRBQTZCN0VDMEI1Rjc1M0RDRTBBRkNGNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNy/VwcEj1iB2R7oUpm3bByWL
U3k/jdFU+053sxJR+L7N73FLlZpeA5sv4tlIB7B8/Wa5ku3dmhMWlM53/IsdE++Q
3mvYdf1YWp+XUbrX82HjEQObPOLnUQ3fIMF0ne0bBzy1RiZ16FBiUr4RD8R9nQu4
VvUXTkmRR1U55hccjG2fn4X7dan1889pvcjB2zZkbSdfcBYOoApK5oZe7tKx9BsI
rPNOLboWmcY8v8Xc5eFcDO11oiXycKExsr6ri2PX20AE3jlO1z5EVPYPx62INN+B
SnwtFV3rAe+cbCOJEd/H7GdhRhSR/UjYuRYrneAA9gL0KL1TYPX6Ow6HTZU9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUZ0+s/YskNSSqa37AtfdT3OCvz2cwHwYDVR0j
BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC
MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD
MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy
RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF
MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wLzMyMzgzMDMzM2EzMjY2NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM3MzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDL+Aw
DQYJKoZIhvcNAQELBQADggEBAG4vOD1R/P8VT3VAsyphuj9PQOvDdnlqBvAmpNJI
QvfhJPOs/I9fAYb1pqJUstb9+mkxRGopjjTfTVeW4HbsgScoA5gWO67ztJQupGKh
JWabnuIppTMdvGdbTlGpP/+p4qxHacgF4j5dmtBkFuDrp4mLEsF4wbr8vNYf8T4K
BbtZL/EjlBlWNH+KBk42SaHmBdqQBVJ31Op01xAe5ZZ9qH1Vs74szXJ4UxfNJB63
eEDGhrW8qmfz2+7mmM9b7btpysefI3+NGkNQwZDqn2PO0tbdzTAmWoKIW59L6T4T
wgcc/dY405HsN3nZiLo5Gye76kRRfnazAQnhDThFk0P/P/I=
-----END CERTIFICATE-----
Generated at Wed Jan 7 03:49:26 2026 by rpki-client