This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a363030303a3a2f33362d3336203d3e20323639373330.roa
File: 323830333a353136303a363030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier: HqYCXxuqFAYOTF+dv7Snx3sJkG9iTl0HyIn8fmyMZ2M=
Subject key identifier: 32:1E:DB:B8:AE:B2:75:F6:52:AB:74:16:F2:0B:94:AF:C9:3B:19:27
Certificate issuer: /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial: 79438C66FAB8DC46E9D387158BEEE73D78DDDC2E
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a363030303a3a2f33362d3336203d3e20323639373330.roa
Signing time: Fri 19 Dec 2025 14:55:31 +0000
ROA not before: Fri 19 Dec 2025 14:50:31 +0000
ROA not after: Fri 18 Dec 2026 14:55:31 +0000
asID: 269730
IP address blocks: 2803:5160:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 17:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:43:8c:66:fa:b8:dc:46:e9:d3:87:15:8b:ee:e7:3d:78:dd:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Validity
Not Before: Dec 19 14:50:31 2025 GMT
Not After : Dec 18 14:55:31 2026 GMT
Subject: CN=321EDBB8AEB275F652AB7416F20B94AFC93B1927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:a4:6d:7e:10:0d:43:7a:92:95:dd:cd:04:
6c:e6:4a:e6:5b:10:b2:41:c5:6f:35:fb:32:5b:e6:
e2:c7:87:7d:d3:9d:1e:4f:7f:70:09:fc:31:ce:2b:
4f:fc:fe:17:12:60:5c:3a:24:42:93:66:00:1b:4f:
13:74:ad:61:da:89:a4:32:ae:73:0c:d7:33:2e:76:
bd:a0:18:60:79:81:92:73:70:91:38:71:4f:83:9e:
b0:8f:f5:09:9a:e8:b3:24:61:f5:a5:1b:38:cb:73:
9f:20:5e:4a:4f:98:6a:d7:f0:e3:7c:4a:22:5a:d2:
d2:0e:92:d7:c4:af:b3:d1:fe:02:65:0c:fb:a5:92:
a0:bc:e0:84:bc:1d:b6:0a:ec:d8:08:16:8b:16:30:
46:9e:b5:36:5f:ec:e6:e7:09:73:5f:df:07:fc:5c:
8c:b3:d3:02:34:4b:1b:20:0b:98:b9:10:4f:29:5a:
6f:00:2b:8b:76:41:05:85:e5:83:89:0f:db:e2:f1:
41:e6:c9:6d:96:89:49:b4:cc:7e:17:20:89:f5:a9:
1e:a1:b5:78:7b:3d:ac:1a:c2:89:96:28:ce:f5:07:
df:e1:83:39:34:77:b2:35:d7:22:5e:20:5b:1b:3b:
0a:5c:16:d0:d4:51:4a:41:8e:af:90:61:b9:e6:e2:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1E:DB:B8:AE:B2:75:F6:52:AB:74:16:F2:0B:94:AF:C9:3B:19:27
X509v3 Authority Key Identifier:
keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a363030303a3a2f33362d3336203d3e20323639373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5160:6000::/36
Signature Algorithm: sha256WithRSAEncryption
12:70:da:5e:70:ac:43:7f:da:20:3e:7d:fa:72:91:02:6b:68:
e9:a4:1f:ca:3c:16:91:db:7a:83:64:34:e1:70:5f:54:bf:5b:
3e:d5:6d:1b:59:6d:fb:90:26:6a:4b:68:5a:b3:ae:7d:37:ce:
03:65:e7:27:dd:92:2d:2b:d7:70:fa:18:f6:0c:ff:1d:c9:71:
dd:3a:92:76:04:44:2d:6f:78:24:c9:8f:30:12:af:3c:e0:1e:
48:9a:d8:19:74:dc:43:a3:9d:4d:d9:b4:59:75:ef:ae:24:22:
e9:3e:54:f0:d6:a0:a6:de:79:4e:cd:43:bb:4c:e7:5b:22:ad:
4a:de:8c:cd:c6:20:0f:3e:7b:37:31:76:73:bd:45:f7:0d:ee:
60:f7:44:8f:1e:62:ff:74:1e:92:9e:ec:db:27:96:6e:3e:90:
cf:b9:ee:13:a9:26:8f:35:a2:eb:50:c5:33:05:dc:6d:98:b5:
76:47:9a:65:b1:a6:77:d6:36:d4:d8:43:81:c9:16:ee:61:6c:
ad:ca:7e:ca:7a:62:39:42:ee:f5:0f:f7:b8:d0:f3:59:59:54:
9e:7f:79:3f:52:27:44:30:a2:7c:a9:2f:7f:b1:e1:ff:46:39:
50:a8:64:30:07:dc:ab:49:a8:ea:cb:bc:0c:f1:21:6f:39:c8:
36:98:c7:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:25:11 2025 by rpki-client