This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a383030303a3a2f33362d3336203d3e20323639373330.roa
File: 323830333a353136303a383030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier: uR0AMtTJXsY9lsB5Pm2FVHedci02wHH349+8CtIjjPg=
Subject key identifier: 36:17:1F:20:36:7C:3D:C3:55:0E:0B:11:4C:EE:9B:9B:53:7C:04:B2
Certificate issuer: /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial: 1AED93E206D1F46938B44C62BD0C3CD1613F3B5F
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a383030303a3a2f33362d3336203d3e20323639373330.roa
Signing time: Fri 19 Dec 2025 14:55:31 +0000
ROA not before: Fri 19 Dec 2025 14:50:31 +0000
ROA not after: Fri 18 Dec 2026 14:55:31 +0000
asID: 269730
IP address blocks: 2803:5160:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 17:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ed:93:e2:06:d1:f4:69:38:b4:4c:62:bd:0c:3c:d1:61:3f:3b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Validity
Not Before: Dec 19 14:50:31 2025 GMT
Not After : Dec 18 14:55:31 2026 GMT
Subject: CN=36171F20367C3DC3550E0B114CEE9B9B537C04B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:dc:09:7d:4c:42:41:86:bd:79:3c:59:a1:
ee:e6:21:12:c7:c1:c7:84:a0:1c:2b:ad:42:8b:77:
98:02:9d:83:db:10:e8:5f:9c:dd:a2:85:b4:64:ce:
73:e5:86:0d:06:89:95:4d:6b:48:3f:ad:0a:08:f9:
6b:d9:ae:a5:2a:6e:bc:15:b5:88:92:91:82:c3:7f:
f3:6d:8b:76:14:f7:27:bb:00:57:e8:3d:50:eb:ed:
f6:d6:f6:75:e0:25:c3:21:7b:fb:a0:94:91:91:41:
24:22:e5:b0:f3:14:2f:ca:b8:93:04:0a:ac:33:d7:
45:b0:41:9c:92:cb:4a:ae:21:35:c5:39:9f:0c:73:
b3:ff:43:6d:ae:0b:51:4a:46:af:69:80:62:13:33:
74:dd:45:11:fc:91:21:fe:7c:5e:50:b9:0f:06:c3:
1a:78:58:71:d6:f6:9c:d2:00:77:79:bd:65:b0:23:
9f:1d:e2:83:bf:08:e7:6b:d6:c2:85:3a:81:b9:6d:
1e:7d:a1:a7:9e:a6:ef:f3:40:fe:58:3a:ad:ea:10:
08:d2:da:ad:60:ab:e3:65:da:2c:75:8a:22:7d:c7:
b9:42:a6:47:f8:69:38:53:28:55:f1:59:13:13:7b:
53:db:f0:29:ab:44:5c:8f:69:e6:17:ad:a8:ae:91:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:17:1F:20:36:7C:3D:C3:55:0E:0B:11:4C:EE:9B:9B:53:7C:04:B2
X509v3 Authority Key Identifier:
keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a383030303a3a2f33362d3336203d3e20323639373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5160:8000::/36
Signature Algorithm: sha256WithRSAEncryption
7e:f4:4e:df:55:c3:e8:7c:4d:ae:54:a9:27:0c:a8:f8:dc:ea:
6c:cd:5e:0b:21:ab:11:f4:04:ff:7e:e1:1b:ae:22:95:5a:11:
d7:9a:f7:77:37:c9:79:9c:39:fc:4d:33:33:90:db:0a:45:2f:
d2:fb:79:a4:26:6d:dd:7a:ae:37:d7:84:81:0a:c0:65:46:ff:
f3:a5:cb:81:a8:56:f8:87:fe:13:ff:b1:02:84:d7:e2:1c:12:
84:51:f1:bf:a7:51:4b:2e:1b:5c:7d:94:8c:53:b8:8a:00:d5:
bd:ea:24:19:d4:8e:0b:e0:b2:41:1e:db:d3:81:27:24:5a:49:
c7:d1:3f:97:38:a7:fb:62:aa:30:16:09:bd:9f:e8:30:3b:18:
5f:f9:08:6b:ba:5c:7b:1c:e2:a9:d0:27:c0:e7:6f:93:6e:cb:
b9:42:c5:d5:e9:f1:6c:9c:df:50:27:a8:11:9e:5b:90:36:d4:
f3:39:af:10:ef:7f:4c:a7:6a:75:b3:99:a7:d4:55:07:d4:65:
e4:5b:e8:06:98:71:a1:b7:c8:fe:93:9c:23:73:dc:48:8e:ca:
a2:ae:c6:5b:e1:db:20:08:9e:bb:7a:26:7b:df:16:c7:45:17:
55:97:17:f0:43:c5:ea:01:0d:aa:54:3d:9a:b5:95:6c:9e:fd:
ec:1d:1e:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:25:02 2025 by rpki-client