This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/323830333a626431303a3a2f33322d3438203d3e20323732303536.roa
File: 323830333a626431303a3a2f33322d3438203d3e20323732303536.roa (raw, json)
Hash identifier: S/9YFNO8LNluxD5DyKd+zWaNB4vTBJmgC6Gs1pNVCsw=
Subject key identifier: 2B:F0:A5:E3:8E:2C:80:81:1C:EA:0A:23:18:9F:A4:F8:AC:C9:9B:87
Certificate issuer: /CN=970664554CE595E3595AD5B26B64B6852A7156DA
Certificate serial: 4BA357C1C6DA28294D2B337F61B90FDE1B964B2F
Authority key identifier: 97:06:64:55:4C:E5:95:E3:59:5A:D5:B2:6B:64:B6:85:2A:71:56:DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/970664554CE595E3595AD5B26B64B6852A7156DA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/323830333a626431303a3a2f33322d3438203d3e20323732303536.roa
Signing time: Tue 06 Jan 2026 20:56:52 +0000
ROA not before: Tue 06 Jan 2026 20:51:52 +0000
ROA not after: Tue 05 Jan 2027 20:56:52 +0000
asID: 272056
IP address blocks: 2803:bd10::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.crl
rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/970664554CE595E3595AD5B26B64B6852A7156DA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 10:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a3:57:c1:c6:da:28:29:4d:2b:33:7f:61:b9:0f:de:1b:96:4b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970664554CE595E3595AD5B26B64B6852A7156DA
Validity
Not Before: Jan 6 20:51:52 2026 GMT
Not After : Jan 5 20:56:52 2027 GMT
Subject: CN=2BF0A5E38E2C80811CEA0A23189FA4F8ACC99B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:4f:20:19:5a:e2:a4:83:b7:71:9d:17:9d:
b4:5c:e5:2d:cc:d9:d7:21:2f:b8:8d:57:d1:c1:15:
71:f7:77:26:e7:d9:ac:0d:d8:b6:5c:b5:ec:1b:9b:
b8:7d:a9:a3:ab:ce:1d:50:17:27:78:58:5a:3c:0f:
3d:38:6e:d4:93:00:04:60:49:b9:78:d2:e7:71:b9:
d1:34:32:ab:98:f3:8b:02:22:62:1b:cb:7f:44:d6:
7c:f2:3e:d8:d8:21:0f:8e:14:48:fc:09:17:5f:66:
e9:7e:45:07:f6:f0:8b:f7:bb:3c:25:56:77:22:df:
ba:0f:d9:bf:fb:f9:8a:12:2b:b2:68:47:df:f7:5c:
3c:0c:9e:6c:2e:fc:7c:3c:04:5a:55:47:c9:6b:2a:
46:1f:8a:b8:a9:d2:1f:a0:d8:7b:35:58:9e:84:67:
e7:54:88:05:fd:bc:33:ca:72:43:77:fd:7d:0f:f2:
e4:2d:86:b2:b1:80:8b:65:d1:14:a0:20:39:43:37:
aa:ee:50:3d:18:b0:da:ab:df:df:b9:2f:85:2f:d8:
68:23:0c:3a:12:07:3c:f0:1d:84:e5:b5:08:17:92:
c9:8e:4c:22:36:f6:d1:fb:2c:be:ff:49:54:cb:5d:
66:b2:e0:17:00:75:98:f4:c2:17:25:97:4f:f4:19:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F0:A5:E3:8E:2C:80:81:1C:EA:0A:23:18:9F:A4:F8:AC:C9:9B:87
X509v3 Authority Key Identifier:
keyid:97:06:64:55:4C:E5:95:E3:59:5A:D5:B2:6B:64:B6:85:2A:71:56:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/970664554CE595E3595AD5B26B64B6852A7156DA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/323830333a626431303a3a2f33322d3438203d3e20323732303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:bd10::/32
Signature Algorithm: sha256WithRSAEncryption
2c:d3:21:90:9b:8f:d7:e7:79:15:b9:c6:b9:8b:4e:27:f0:e2:
5b:a2:50:2d:1b:0a:b2:9d:e4:c8:ce:a6:80:e9:51:2c:08:81:
0e:a2:b7:28:5d:a3:f8:58:d6:18:24:4e:f8:b8:f4:40:94:46:
60:e6:52:ab:0b:30:0d:1b:68:5b:42:7e:67:da:69:42:54:34:
ac:4e:e4:b4:01:1e:0d:06:c5:8b:06:24:28:ac:a3:1f:bb:f8:
52:33:8e:62:35:8b:51:42:fa:23:fa:cf:84:f4:01:ef:27:c3:
2d:56:5d:6c:c6:4b:af:6e:2d:1f:4f:8d:d5:44:20:7c:04:d0:
a7:e4:f7:0c:59:71:34:55:d7:0e:b1:7f:25:c0:64:c9:17:89:
16:ff:7d:5a:5c:5c:99:02:5d:ab:74:b7:88:60:ec:64:a1:bd:
fb:5f:c1:82:b1:8d:de:47:23:35:f0:53:91:dd:d4:cc:60:d9:
dc:ea:26:09:f3:e3:32:80:02:51:18:df:fd:e4:7d:d3:9c:56:
8b:c4:9d:39:9b:ce:cf:f8:d6:59:48:3e:46:71:64:01:a2:f3:
6e:c8:d3:cb:61:90:a7:5b:6e:4d:ac:82:ec:bc:6a:0a:8a:8d:
2a:77:2c:72:e5:47:9d:b2:84:f5:51:05:ea:14:b6:1b:91:0e:
51:5c:3f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:19:46 2026 by rpki-client