This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/323830333a393430303a3a2f33322d3439203d3e203237383339.roa
File: 323830333a393430303a3a2f33322d3439203d3e203237383339.roa (raw, json)
Hash identifier: cZTCK9ZeZTt8shlWmrZokgd2U4I9PWQqFM94AanNw7A=
Subject key identifier: B1:0F:12:2D:5F:14:1E:46:10:95:42:2A:4C:C3:74:53:A6:BC:90:3D
Certificate issuer: /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial: 4B2F49CF78C4ADCF82B1B38A077EE07204B18926
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/323830333a393430303a3a2f33322d3439203d3e203237383339.roa
Signing time: Tue 06 Jan 2026 19:13:05 +0000
ROA not before: Tue 06 Jan 2026 19:08:05 +0000
ROA not after: Tue 05 Jan 2027 19:13:05 +0000
asID: 27839
IP address blocks: 2803:9400::/32 maxlen: 49
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:2f:49:cf:78:c4:ad:cf:82:b1:b3:8a:07:7e:e0:72:04:b1:89:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Validity
Not Before: Jan 6 19:08:05 2026 GMT
Not After : Jan 5 19:13:05 2027 GMT
Subject: CN=B10F122D5F141E461095422A4CC37453A6BC903D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:33:fc:9f:65:1b:0f:c2:12:c5:52:67:ee:
9f:00:ab:7e:9a:e2:0f:b8:4b:ed:44:5d:b0:d9:11:
be:af:b6:18:e0:c3:2a:c4:16:56:4d:89:7f:63:ce:
f5:e0:6f:80:b5:82:9a:01:ca:61:e9:0f:79:2e:be:
c4:da:a3:df:00:77:08:65:5c:e2:ef:74:8e:a2:8c:
f3:88:fe:b4:d2:15:99:29:05:c5:1b:6c:35:89:2a:
e5:ec:f6:53:e0:d5:e6:63:c0:d9:cc:4f:96:89:f5:
0b:ef:29:04:b8:2a:23:33:3d:4d:cd:b0:f7:48:05:
e2:91:4e:77:b7:af:52:07:6a:ad:16:47:ff:a0:15:
7a:68:1d:c1:ae:3c:af:9c:89:d5:be:5d:34:1e:b2:
de:96:03:05:cd:5d:05:1d:62:73:24:f2:b4:28:1d:
de:57:e2:a8:d2:ab:cd:a8:65:97:43:8e:63:0b:26:
2a:45:b7:28:b6:3e:1e:f9:8b:9b:f3:a7:d8:54:d4:
6c:48:55:46:76:0a:a0:c4:a9:0d:38:b8:50:d1:de:
1e:74:3d:cc:c4:6a:c6:1e:5f:69:95:9f:4a:11:cf:
95:ee:bf:4d:a7:0c:77:db:ca:db:1c:69:72:41:7d:
db:e3:3a:a4:b5:3d:21:26:3c:5a:94:bd:7b:39:88:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:12:2D:5F:14:1E:46:10:95:42:2A:4C:C3:74:53:A6:BC:90:3D
X509v3 Authority Key Identifier:
keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/323830333a393430303a3a2f33322d3439203d3e203237383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9400::/32
Signature Algorithm: sha256WithRSAEncryption
2e:ee:94:92:56:6f:b8:f1:51:61:c7:6b:2a:13:47:67:32:4c:
51:cf:a3:06:fa:bc:20:3c:e3:9a:d8:73:0b:e7:3a:9b:6c:0b:
ef:ba:0b:52:bf:bc:d0:43:9f:80:01:59:a7:58:8d:79:d6:82:
c2:59:c7:98:48:4e:dc:b2:aa:2e:58:97:3b:93:97:76:8f:ee:
80:b5:e5:a8:f8:94:1f:aa:90:7a:88:d6:a6:e7:48:12:5f:a6:
80:a0:1f:cb:fb:3e:4c:35:e0:3f:c3:26:ff:33:8a:37:a1:42:
5d:30:83:17:e7:ba:68:8f:22:cc:19:6b:86:52:97:ed:48:cb:
74:44:a8:ce:83:fb:2d:f5:65:ae:38:09:38:5d:31:ef:97:09:
ab:48:fd:1b:bf:79:28:b2:3e:cf:75:5e:55:30:4e:00:56:a7:
76:95:10:77:20:a1:ea:c9:56:1c:90:69:59:11:43:62:63:8c:
4f:b5:10:d3:e4:1a:58:3e:dc:07:29:94:6b:cd:ac:69:54:3d:
c7:9f:e8:d8:5e:c6:27:20:e3:d5:14:e3:0a:e0:ae:12:6e:ce:
16:d5:17:a3:e2:1f:13:1a:f8:3c:f0:52:e3:86:4c:7b:5f:cd:
17:be:2d:47:99:e6:2a:e5:5a:62:b2:cd:ed:1b:1f:d9:6e:aa:
02:04:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:14:36 2026 by rpki-client