This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333030303a3a2f33362d3336203d3e20323639373330.roa
File: 323830333a353136303a333030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier: pxAh5LjL9vNwhTnC2gPXovxD7te9y83X2m+UnE6TlWk=
Subject key identifier: 32:F7:45:A0:31:86:29:EB:DD:4B:3B:44:DA:01:2B:14:21:25:6B:41
Certificate issuer: /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial: 5641F79D21A05FE62F0CA4714C9CEB22E35CDA03
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333030303a3a2f33362d3336203d3e20323639373330.roa
Signing time: Fri 19 Dec 2025 14:55:33 +0000
ROA not before: Fri 19 Dec 2025 14:50:33 +0000
ROA not after: Fri 18 Dec 2026 14:55:33 +0000
asID: 269730
IP address blocks: 2803:5160:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 17:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:41:f7:9d:21:a0:5f:e6:2f:0c:a4:71:4c:9c:eb:22:e3:5c:da:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Validity
Not Before: Dec 19 14:50:33 2025 GMT
Not After : Dec 18 14:55:33 2026 GMT
Subject: CN=32F745A0318629EBDD4B3B44DA012B1421256B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:a6:99:82:c1:9d:46:8b:9e:29:83:c4:cb:
9a:4d:51:b9:15:c0:e8:63:3d:7e:a2:14:07:70:00:
bf:ca:05:b3:78:f1:9c:e9:47:70:98:09:bf:97:73:
1b:35:98:6e:52:b9:14:37:47:bd:7f:9e:a3:56:17:
2e:d1:60:a5:85:59:72:e4:8d:57:f4:1a:00:f9:04:
7b:5b:34:ab:7b:c6:69:e2:6b:85:cc:8c:2d:93:f9:
14:cc:ea:33:24:1b:c8:a2:19:4b:f9:ce:69:84:02:
1f:c9:33:e9:9f:59:c4:28:6d:bf:45:52:e4:d4:83:
b0:0e:ad:51:35:f0:47:dd:67:52:3b:c1:09:e6:57:
77:0e:33:27:40:3e:b2:24:60:aa:b3:a8:d5:34:71:
75:28:b3:a1:17:ec:73:7f:30:a0:87:2e:ca:9a:13:
3a:d5:e1:c7:d4:af:97:f0:03:cf:46:c1:f6:b9:98:
61:b3:f2:5a:64:6c:48:08:6c:15:dd:ab:9d:2d:15:
87:af:ee:4f:7a:f2:2a:68:9c:c0:17:36:91:d4:0c:
78:76:6c:28:55:aa:e3:68:69:6b:a6:46:cb:4f:2a:
ae:99:c9:be:ab:2b:9a:f1:ac:5b:0e:a1:93:ee:d6:
c7:15:22:c4:d9:36:d9:4f:ca:95:8f:68:68:c5:5c:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F7:45:A0:31:86:29:EB:DD:4B:3B:44:DA:01:2B:14:21:25:6B:41
X509v3 Authority Key Identifier:
keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a333030303a3a2f33362d3336203d3e20323639373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5160:3000::/36
Signature Algorithm: sha256WithRSAEncryption
28:d2:3e:1a:a0:e8:7e:5e:c6:6b:85:e6:b3:1a:23:83:77:08:
44:b8:f0:2b:f9:63:2c:b1:f8:90:f3:36:c9:06:dc:d8:6b:81:
43:fa:8b:6d:99:65:dc:01:c3:02:cf:fe:53:51:a4:4e:fa:9f:
a2:68:9a:2e:f7:0f:ad:ed:d6:44:30:85:ba:12:ab:16:c9:33:
0e:8e:44:6c:7f:eb:4f:85:18:19:fb:9c:e0:31:47:1f:06:e3:
4f:fe:c9:8f:7d:27:90:cb:a1:3b:56:30:64:bd:95:df:d2:58:
07:6f:0c:1a:33:d7:f4:6e:7c:7a:0f:89:6f:fa:66:fe:6d:a2:
dd:9b:b7:be:2a:55:09:fb:d6:8f:9e:79:72:be:c2:8f:21:30:
14:fd:fb:84:e9:50:5f:39:54:46:2a:c6:10:43:82:b4:5c:1d:
69:ba:f5:b0:23:27:5d:98:b1:cc:0c:4b:1d:28:dd:3c:b7:84:
e3:71:05:ea:fa:91:76:a5:a6:0c:77:f0:1a:90:05:22:42:ed:
03:d4:e5:a7:38:b3:7f:0f:8e:6c:4d:c5:69:8a:ba:f4:4a:f1:
2a:20:fa:b4:f8:27:b3:a9:d2:c7:67:61:c3:5b:73:60:7c:83:
6d:42:74:fa:c1:02:46:48:22:a4:20:45:21:dd:2f:55:b4:55:
4b:f7:1b:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:24:48 2025 by rpki-client