This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa
File: 323830333a663532303a3a2f33322d3332203d3e20323636363935.roa (raw, json)
Hash identifier: Dt8pftow81rwQ6h2DYZ45sbcGq+1iiWcEgJKrPkzYJU=
Subject key identifier: F2:3C:C6:57:84:12:2A:9B:B4:58:2C:22:5A:F7:02:74:F4:54:5C:00
Certificate issuer: /CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
Certificate serial: 19108C26E10CE5FC66160B4404DDEA26CEB17221
Authority key identifier: 9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa
Signing time: Tue 06 Jan 2026 19:29:00 +0000
ROA not before: Tue 06 Jan 2026 19:24:00 +0000
ROA not after: Tue 05 Jan 2027 19:29:00 +0000
asID: 266695
IP address blocks: 2803:f520::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl
rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:10:8c:26:e1:0c:e5:fc:66:16:0b:44:04:dd:ea:26:ce:b1:72:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
Validity
Not Before: Jan 6 19:24:00 2026 GMT
Not After : Jan 5 19:29:00 2027 GMT
Subject: CN=F23CC65784122A9BB4582C225AF70274F4545C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:60:9b:f1:c6:43:32:a0:70:42:19:20:39:
75:c7:ac:5f:55:d4:20:e0:19:15:80:ed:87:5d:35:
8a:75:8c:f5:3d:f9:94:23:90:57:d9:9a:e2:76:a9:
ee:b6:ae:53:06:e4:c3:d8:69:cc:15:9a:a3:8b:60:
0d:a4:59:97:0f:6c:52:db:62:60:03:e0:51:b0:ac:
ff:65:4e:cc:e7:c5:89:41:8d:c2:d0:eb:fa:3a:3b:
d4:21:44:d8:9d:96:0f:35:ba:06:6c:f5:49:6f:7f:
2b:fe:b2:71:91:55:58:d1:b0:26:4d:b9:b4:83:17:
9b:84:e1:6f:0e:dc:c8:94:a5:c2:7a:de:5f:e7:43:
a3:9d:2b:ee:b4:bc:8c:f0:5e:a4:7e:8e:8a:e1:db:
4f:72:2c:ec:be:55:06:85:b4:b2:3e:91:94:84:cd:
79:7d:b2:16:d4:54:53:0e:db:8d:c4:86:8f:85:f9:
34:40:78:48:1a:ed:57:fb:dd:71:07:66:57:2e:8e:
a7:cb:8f:99:f8:65:1b:7f:a5:c4:61:88:46:3c:4d:
ae:35:f6:9f:f0:c1:a0:22:ec:20:f1:7e:4c:1e:47:
b8:f9:b9:c4:c6:54:ea:dc:ff:c4:5d:0f:ca:15:80:
ee:70:09:b4:7a:32:2a:66:dd:08:a7:b0:c8:45:53:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:C6:57:84:12:2A:9B:B4:58:2C:22:5A:F7:02:74:F4:54:5C:00
X509v3 Authority Key Identifier:
keyid:9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f520::/32
Signature Algorithm: sha256WithRSAEncryption
46:c6:a2:29:93:9d:96:e4:5d:5c:31:1c:0f:54:94:80:26:a6:
20:db:7b:bd:fb:ce:4e:68:3b:4c:43:02:f1:0e:fe:35:e3:4b:
d9:1f:72:61:f8:6e:68:3b:8e:a3:24:6d:41:05:58:a7:80:c5:
5d:40:c8:d0:53:18:97:d0:2c:4d:fa:20:58:2d:9c:32:71:b0:
12:ed:e5:7f:1b:64:07:a2:e6:94:66:24:5a:68:ea:d5:40:46:
87:8c:58:11:c4:2c:5a:4a:04:b1:66:27:41:3f:dc:ac:51:12:
ee:a8:13:ac:49:63:bf:39:8e:8b:18:85:7b:70:f4:cb:57:74:
b7:67:61:c8:0f:d8:3b:cb:8d:6e:b9:9c:d7:8e:10:e3:79:77:
62:52:b2:84:d9:8d:46:81:e0:0d:7a:62:92:66:05:ae:98:da:
01:ab:e4:bc:48:94:04:e3:01:fc:df:e3:3d:3b:a0:54:41:1a:
a5:59:9c:c8:a0:9a:c3:a1:6c:17:73:fb:94:66:1c:3a:3c:1a:
28:4b:9b:f2:cc:98:14:c6:6c:5d:13:89:02:49:46:a8:e4:9f:
85:0c:c3:05:22:d2:75:13:f2:fc:89:26:c5:ba:cd:8d:5b:6a:
f4:14:59:53:d5:fb:ad:ff:17:37:2a:cf:9e:e3:93:53:27:87:
58:91:1b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:11:22 2026 by rpki-client