This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a633a3a2f34362d3436203d3e20323732313336.roa
File: 323830313a3130393a633a3a2f34362d3436203d3e20323732313336.roa (raw, json)
Hash identifier: eazs2yVRYcp8/+PkbEnmp3toeM8ezjlg1xe+vdEB6vc=
Subject key identifier: B1:6B:4B:16:A0:86:D8:D2:4D:14:7B:CB:87:10:E7:55:61:FC:01:B2
Certificate issuer: /CN=03CA54765F0951D369734386CF982D71F5CB5403
Certificate serial: 3CBFDB306B9926EF7DDC70B30F5112217EE0E4A6
Authority key identifier: 03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a633a3a2f34362d3436203d3e20323732313336.roa
Signing time: Tue 06 Jan 2026 19:39:30 +0000
ROA not before: Tue 06 Jan 2026 19:34:30 +0000
ROA not after: Tue 05 Jan 2027 19:39:30 +0000
asID: 272136
IP address blocks: 2801:109:c::/46 maxlen: 46
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:bf:db:30:6b:99:26:ef:7d:dc:70:b3:0f:51:12:21:7e:e0:e4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03CA54765F0951D369734386CF982D71F5CB5403
Validity
Not Before: Jan 6 19:34:30 2026 GMT
Not After : Jan 5 19:39:30 2027 GMT
Subject: CN=B16B4B16A086D8D24D147BCB8710E75561FC01B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:f1:c7:7c:0a:1e:1c:92:32:da:28:66:8c:
0b:6f:a3:3c:f0:e9:e4:a5:f4:b6:7c:04:66:34:f3:
14:56:01:f7:3e:c5:83:33:03:6c:c1:0d:93:cf:df:
93:3a:c1:89:f5:5f:5b:20:44:ff:90:4b:c6:82:a9:
82:57:f0:1f:fa:b0:eb:5f:8b:e6:2f:f2:72:fd:c3:
43:a8:c1:6e:64:c2:23:04:0b:08:e1:d1:ac:5c:ac:
d6:70:de:e7:a6:59:f4:6b:8d:d4:85:a1:dd:f5:04:
64:67:51:53:33:12:3f:42:a9:16:08:93:3f:63:70:
5b:c2:15:c1:ae:ca:ab:f5:41:36:c4:2c:8c:2e:1c:
d5:e6:bb:b6:46:a4:4b:0c:a6:d3:b0:a7:db:47:0d:
10:d6:c9:39:09:88:a6:3d:75:42:d8:b0:50:af:2e:
8b:be:4b:93:1a:81:f9:56:4e:b2:5c:be:6f:9d:88:
e0:61:a5:0d:cb:3f:8d:a7:8e:b5:73:99:65:10:f3:
26:89:42:1e:b2:32:4a:98:2b:c0:9b:2f:bc:41:90:
5f:7e:74:2b:7c:04:df:a4:61:f0:09:30:9f:cc:d2:
2f:9d:7c:e9:60:07:13:d6:29:e3:14:8b:db:d4:71:
8c:f0:5f:43:dc:e8:fe:20:db:58:f4:65:4a:38:d2:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6B:4B:16:A0:86:D8:D2:4D:14:7B:CB:87:10:E7:55:61:FC:01:B2
X509v3 Authority Key Identifier:
keyid:03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a633a3a2f34362d3436203d3e20323732313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:109:c::/46
Signature Algorithm: sha256WithRSAEncryption
8e:bf:17:53:d2:34:98:33:0d:4b:90:85:b7:cb:74:60:79:79:
5c:86:12:bf:08:9d:12:95:ff:3b:1d:63:35:b3:62:31:0e:ec:
e9:a0:23:38:89:0c:8d:04:16:42:17:2d:1f:4b:e9:62:61:6b:
c6:03:53:c2:ab:02:11:5d:eb:70:f9:e7:a7:9d:06:c8:ad:5b:
ee:70:93:d2:1f:82:82:4b:73:7c:14:cc:c7:ca:5d:76:0a:94:
b9:48:6b:49:ef:6a:57:d7:47:e6:04:c6:2d:a5:ef:49:df:5f:
96:c0:66:98:2d:c4:c7:54:31:71:7c:7d:2f:58:f8:5c:ad:1d:
c8:ad:0a:a4:ba:7b:d6:c0:25:87:d2:ba:56:c4:24:24:1c:dc:
d8:0d:4f:b5:37:e8:fd:d6:cc:d3:a3:ff:46:44:9c:1a:f5:52:
ac:ad:b1:fe:7b:44:da:ea:fb:32:db:a9:05:93:5a:22:7c:84:
7f:fe:99:06:eb:aa:d3:e2:61:a6:6f:88:9c:7b:a1:26:ba:48:
f5:b7:18:88:8b:9a:91:88:49:95:1c:5b:e8:17:50:cc:46:f8:
b2:b5:7f:9b:1d:f6:9c:52:6b:bd:5e:64:c6:30:a3:19:58:50:
99:42:8e:b9:99:42:9e:75:3e:8d:5e:2d:42:db:cb:67:4d:9f:
4a:44:cb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:07:09 2026 by rpki-client