This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/323830333a653261303a3a2f33322d3438203d3e203532333939.roa
File: 323830333a653261303a3a2f33322d3438203d3e203532333939.roa (raw, json)
Hash identifier: S8OiCTt7TK0A1uVf89NmUhwll+ha6M7Ry57UJbobmD4=
Subject key identifier: 94:AF:56:A3:ED:12:77:56:B0:49:77:6A:4A:D5:52:61:2D:F3:1A:28
Certificate issuer: /CN=31F68B49343FE18C99A4C312FCEA2C54B701CE74
Certificate serial: 13529B1C09B578F0EAE120D6E27E323C1DC47409
Authority key identifier: 31:F6:8B:49:34:3F:E1:8C:99:A4:C3:12:FC:EA:2C:54:B7:01:CE:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/323830333a653261303a3a2f33322d3438203d3e203532333939.roa
Signing time: Tue 06 Jan 2026 19:46:45 +0000
ROA not before: Tue 06 Jan 2026 19:41:45 +0000
ROA not after: Tue 05 Jan 2027 19:46:45 +0000
asID: 52399
IP address blocks: 2803:e2a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.crl
rsync://repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:52:9b:1c:09:b5:78:f0:ea:e1:20:d6:e2:7e:32:3c:1d:c4:74:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F68B49343FE18C99A4C312FCEA2C54B701CE74
Validity
Not Before: Jan 6 19:41:45 2026 GMT
Not After : Jan 5 19:46:45 2027 GMT
Subject: CN=94AF56A3ED127756B049776A4AD552612DF31A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:60:6a:f4:91:f4:e2:ed:79:8a:56:74:55:
f3:8c:b8:20:19:c0:30:59:cd:db:04:27:ba:db:11:
c5:fc:65:a8:7f:22:9a:00:97:68:f0:9b:6d:b5:cc:
0e:1c:1d:14:24:03:4b:5f:06:b0:0c:46:47:99:90:
ff:5e:77:b7:64:f2:2d:39:c5:1f:fd:dc:9c:46:f8:
3a:22:98:42:45:ca:63:b0:08:84:02:c3:62:aa:a3:
cf:fe:54:05:92:f2:be:42:8e:36:96:fc:74:71:ba:
b3:41:2a:c1:ca:e9:32:55:64:03:f2:d7:da:b1:d8:
69:f8:b4:5f:c0:dd:d6:0b:38:71:cc:84:e5:75:47:
d0:6f:a9:fe:9d:0f:8b:43:71:7e:cd:b2:6d:10:de:
6f:56:73:4d:48:88:07:4c:93:fe:66:7d:2b:25:45:
cf:62:3e:b3:8f:b2:7e:e1:61:8f:f1:bb:f5:33:80:
8b:42:56:4e:ee:8e:43:52:92:5e:8f:74:47:5f:1b:
7c:d3:cd:73:bd:7c:0f:1a:e0:57:f1:59:6d:ff:71:
c3:f1:30:0f:39:1c:0f:bf:18:13:75:7f:7b:de:07:
3e:80:cf:a3:cb:5f:64:b7:fc:c0:e3:8c:5a:79:ec:
c7:09:51:98:e7:5a:cf:69:33:1f:17:a4:24:f1:d8:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AF:56:A3:ED:12:77:56:B0:49:77:6A:4A:D5:52:61:2D:F3:1A:28
X509v3 Authority Key Identifier:
keyid:31:F6:8B:49:34:3F:E1:8C:99:A4:C3:12:FC:EA:2C:54:B7:01:CE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/323830333a653261303a3a2f33322d3438203d3e203532333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e2a0::/32
Signature Algorithm: sha256WithRSAEncryption
bd:2b:48:ae:ed:66:88:5c:1a:d1:e3:38:5a:52:9a:8f:3d:45:
de:81:0c:d8:f2:2a:b3:c4:00:33:46:d2:ac:65:06:ae:ee:f0:
5a:af:1b:3f:70:9b:f0:e3:06:93:14:24:77:dc:88:d7:ec:97:
ff:40:92:92:57:ad:db:67:3d:7b:5f:21:ee:94:ed:5c:45:cc:
39:6d:1c:69:f4:5b:4f:f6:ee:b0:60:fc:34:f4:03:e7:93:70:
f7:ba:43:61:c4:ed:7a:2c:da:a6:d7:1c:9f:3c:2c:33:08:38:
2e:73:be:27:a1:c8:d5:65:72:f9:3b:43:2a:66:a5:bc:84:b7:
40:2c:f1:6b:fe:ca:1a:d8:f6:15:8c:2d:63:51:71:e7:6c:dd:
5f:0c:8f:ab:84:db:45:77:4c:0f:1b:05:cc:3c:d4:bf:f5:5e:
0b:c2:c5:e6:ed:5a:22:d3:ac:53:3b:3d:2e:eb:98:04:53:75:
93:0e:b8:1d:d3:c8:50:54:e1:53:69:73:b4:35:e1:98:01:7b:
3d:76:fe:f4:57:71:c3:fa:24:e2:bd:95:c1:10:6f:a8:99:8c:
29:98:ed:4f:9c:ab:ef:39:86:01:3f:18:8e:a4:b6:13:00:05:
e4:d3:19:9b:8d:35:97:c8:c5:2b:7a:7b:cb:17:08:8e:cd:62:
ac:3d:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:34:12 2026 by rpki-client