This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/323830333a313030303a3a2f33322d3332203d3e203132313237.roa
File: 323830333a313030303a3a2f33322d3332203d3e203132313237.roa (raw, json)
Hash identifier: pGNAgAlghaI8FmXYX20RpLFpgYkQpk3XPYqegSJY+jE=
Subject key identifier: F3:FB:A4:EC:1D:41:6D:06:E3:D0:F7:1F:20:E4:FC:A5:B8:5A:36:3C
Certificate issuer: /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial: 2E3AE86673E431750C1D264C50FF6682934ACF56
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/323830333a313030303a3a2f33322d3332203d3e203132313237.roa
Signing time: Tue 06 Jan 2026 19:44:01 +0000
ROA not before: Tue 06 Jan 2026 19:39:01 +0000
ROA not after: Tue 05 Jan 2027 19:44:01 +0000
asID: 12127
IP address blocks: 2803:1000::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Jan 2026 17:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3a:e8:66:73:e4:31:75:0c:1d:26:4c:50:ff:66:82:93:4a:cf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Validity
Not Before: Jan 6 19:39:01 2026 GMT
Not After : Jan 5 19:44:01 2027 GMT
Subject: CN=F3FBA4EC1D416D06E3D0F71F20E4FCA5B85A363C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:2e:0c:98:27:ae:6b:d3:00:8d:31:60:2f:
8b:06:d0:c0:11:f4:85:4d:22:ca:60:56:1c:08:37:
b9:5c:60:22:ed:48:4b:c7:85:57:9a:5d:46:6e:1a:
2d:16:51:5a:8a:87:c4:7b:4a:80:3a:44:30:8a:02:
ae:30:62:ef:58:1e:6f:a0:88:56:dd:18:3d:c1:47:
70:3c:d7:0f:fc:8d:b7:37:18:8a:bc:d1:f8:d9:b5:
4c:2f:7d:7b:fe:20:ba:7e:9b:22:59:4d:f0:68:9c:
c9:c2:ba:b8:d2:cc:3f:fd:bb:b2:c1:57:25:ba:37:
1b:eb:1d:45:f4:b7:51:6c:f4:a8:c3:6a:3a:9e:16:
96:6d:1d:06:48:19:9f:9d:84:e4:6b:5a:9f:ce:3f:
36:8a:85:09:9f:b5:28:37:68:1e:cb:dc:d2:e6:d8:
6a:f2:91:d0:5a:e4:aa:f9:91:21:56:a8:22:64:a5:
12:37:78:eb:35:fc:ae:63:1f:89:4d:ea:6e:13:af:
03:86:cc:12:46:f1:c1:83:39:d8:0b:0d:d3:e4:9e:
6b:a6:69:d7:f9:59:33:30:a3:8f:89:bc:a1:69:22:
69:38:4e:e2:eb:47:37:47:b5:63:da:01:ae:75:8b:
65:ab:87:81:29:bd:78:91:16:ec:ff:c4:b9:75:1c:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:A4:EC:1D:41:6D:06:E3:D0:F7:1F:20:E4:FC:A5:B8:5A:36:3C
X509v3 Authority Key Identifier:
keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/323830333a313030303a3a2f33322d3332203d3e203132313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1000::/32
Signature Algorithm: sha256WithRSAEncryption
42:4e:9b:0b:1a:1b:91:53:b7:a1:2a:db:83:02:ae:d0:7b:a4:
14:02:e4:28:9e:d1:03:91:e5:59:80:4b:44:ce:74:a3:4d:42:
02:40:dd:d2:08:6d:96:79:7a:dd:cb:78:f1:5d:78:2f:fb:a8:
6e:b7:09:e2:8e:f6:ff:2c:1b:6f:79:b7:34:db:90:1f:0e:56:
f1:c2:b6:60:23:26:55:12:8f:e1:36:f3:a9:00:66:78:df:00:
52:1d:7c:df:87:74:65:82:21:ba:c3:0b:4d:1d:9f:22:98:1a:
cd:81:c3:81:d2:5a:cd:41:8a:45:28:6d:d6:65:dc:42:97:c7:
67:a9:6c:9a:92:27:ad:76:87:1f:24:5b:7d:81:69:d4:77:7a:
a9:b1:d7:35:04:36:ca:2d:b1:bf:b9:a9:32:b9:dd:0f:8d:e0:
56:16:76:79:8a:46:d3:a2:ce:f6:f2:4a:41:3f:31:ad:2c:36:
9e:85:05:51:a8:a9:5e:d3:65:eb:9a:f5:d5:2f:18:54:99:ff:
05:cb:40:2e:f5:c2:7b:db:be:bd:fd:51:7f:90:5a:22:8e:cb:
e6:44:eb:5d:2c:da:96:3b:45:06:7f:ab:f1:25:a1:da:41:ee:
33:d8:25:a3:36:cb:18:11:90:c7:53:22:bf:8f:80:3e:f5:07:
9d:e2:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:18:04 2026 by rpki-client