This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/323830333a393230303a3a2f33322d3438203d3e203136353932.roa
File: 323830333a393230303a3a2f33322d3438203d3e203136353932.roa (raw, json)
Hash identifier: bSk93tI1L2j3rBGX/tlV6DdFMv+IzLeq1Momd4bB7kM=
Subject key identifier: 83:CA:02:8D:7B:19:CD:6B:4C:C1:51:66:66:B8:EF:31:F4:E1:CE:CC
Certificate issuer: /CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
Certificate serial: 4785E54F6F2C4EFCC66D18CD71A1027398A89888
Authority key identifier: 31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/323830333a393230303a3a2f33322d3438203d3e203136353932.roa
Signing time: Tue 06 Jan 2026 19:00:20 +0000
ROA not before: Tue 06 Jan 2026 18:55:20 +0000
ROA not after: Tue 05 Jan 2027 19:00:20 +0000
asID: 16592
IP address blocks: 2803:9200::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl
rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 22:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:85:e5:4f:6f:2c:4e:fc:c6:6d:18:cd:71:a1:02:73:98:a8:98:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
Validity
Not Before: Jan 6 18:55:20 2026 GMT
Not After : Jan 5 19:00:20 2027 GMT
Subject: CN=83CA028D7B19CD6B4CC1516666B8EF31F4E1CECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:b2:33:48:a2:72:c5:f9:8e:45:8e:8e:f9:
6f:48:79:e8:fc:1a:6f:01:ff:56:4b:24:12:f8:1a:
9f:27:76:70:eb:8a:d6:39:c1:02:6b:8f:61:42:3f:
f2:f0:77:00:1a:3f:ab:38:97:41:b4:a9:56:92:61:
22:9e:d4:0b:47:05:28:67:95:8b:2a:df:e1:3f:6e:
28:65:90:73:12:d3:38:d5:ca:21:a0:fc:10:86:6b:
7c:ff:f7:de:db:3f:fb:6e:09:c9:ea:85:42:00:6c:
87:13:95:9d:09:86:c4:64:b8:07:5c:9f:ae:97:2e:
b0:18:1b:59:03:11:4a:ee:3e:9a:fd:86:8b:d3:64:
82:e0:f4:4f:80:d0:5d:14:09:ad:c3:57:a9:3e:e1:
ea:fc:b8:7c:de:9f:1a:89:e9:83:e9:d0:ec:b6:c2:
ea:a5:c5:d6:cb:f1:dd:60:bb:c3:67:05:5d:1e:f5:
e0:16:1b:dd:02:e9:2b:8e:8a:06:14:54:59:4c:08:
06:3a:c6:a2:d7:c0:16:e6:e9:b5:54:16:aa:8c:d3:
be:6a:c9:9d:78:4f:28:b9:a6:7d:cc:43:ad:35:51:
2c:ec:d1:9f:10:28:55:63:47:ca:87:fd:12:5a:83:
d9:8e:94:87:0e:68:a0:8a:33:02:b8:3d:35:7f:ee:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CA:02:8D:7B:19:CD:6B:4C:C1:51:66:66:B8:EF:31:F4:E1:CE:CC
X509v3 Authority Key Identifier:
keyid:31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/323830333a393230303a3a2f33322d3438203d3e203136353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9200::/32
Signature Algorithm: sha256WithRSAEncryption
10:88:c2:c9:de:45:d9:93:e8:1f:92:65:3a:b9:70:81:d9:ce:
97:71:f0:1d:7b:e6:6f:95:71:72:c1:21:6c:6e:c7:4e:8d:1b:
85:08:b8:70:2c:6d:86:35:21:d3:f2:5a:3e:c6:1c:a6:5e:bf:
57:ea:d8:71:ed:be:6d:19:b3:1c:0a:f4:c2:67:39:5e:f4:ac:
c8:28:b1:f5:b7:d3:a2:b8:8e:2f:20:3b:d8:77:c2:a9:bc:7a:
0e:84:a3:2d:dc:60:7d:25:b9:32:20:35:50:8d:b7:b8:9b:ec:
9e:90:54:a3:90:83:69:25:12:cf:ac:cf:d8:04:7f:9d:79:4e:
2f:db:00:57:85:da:a7:d2:d1:dc:6a:a2:86:6f:8a:b1:3b:01:
97:20:21:25:a0:63:bb:58:44:74:cc:c9:5f:c8:95:b6:37:03:
5e:56:6f:a6:b4:54:cb:bd:4e:6e:3b:8f:dc:b7:2e:70:ca:48:
85:2a:52:e3:40:fb:88:a3:e9:92:7c:2d:57:51:e9:55:de:8c:
e0:8d:49:5c:bb:1c:c5:74:81:b1:e3:0a:32:95:ff:af:9d:ee:
aa:19:ff:cd:f8:2f:96:10:11:4b:2c:28:68:da:16:9e:fd:c2:
34:a9:c7:83:fc:6f:0e:a9:d2:de:01:b0:7b:bb:16:0a:db:a6:
0a:dc:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:22:56 2026 by rpki-client