This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33322d3332203d3e203532343139.roa
File: 323830333a333438303a3a2f33322d3332203d3e203532343139.roa (raw, json)
Hash identifier: ozeyd3lHsXvO7AZ+3RkBNNPgoFAm5ew/2y02FPxYvqM=
Subject key identifier: DE:D8:A7:7B:B9:EF:8C:74:D3:A7:57:E4:1B:D3:FA:B2:69:6E:8F:F1
Certificate issuer: /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial: 1EB9582DAD9C0300F711922B5F356536DE5B45C1
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33322d3332203d3e203532343139.roa
Signing time: Tue 06 Jan 2026 19:18:18 +0000
ROA not before: Tue 06 Jan 2026 19:13:18 +0000
ROA not after: Tue 05 Jan 2027 19:18:18 +0000
asID: 52419
IP address blocks: 2803:3480::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 05:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b9:58:2d:ad:9c:03:00:f7:11:92:2b:5f:35:65:36:de:5b:45:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Validity
Not Before: Jan 6 19:13:18 2026 GMT
Not After : Jan 5 19:18:18 2027 GMT
Subject: CN=DED8A77BB9EF8C74D3A757E41BD3FAB2696E8FF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:75:3b:a9:38:33:6f:f2:14:3a:a9:e4:8a:
f8:74:4b:26:d1:8f:3e:3a:da:f6:64:38:cd:ae:c2:
01:1e:85:c6:1c:1d:ed:c7:be:6e:e9:73:c7:d2:bf:
02:33:93:97:bf:88:0f:a7:f9:82:43:7b:47:e7:fb:
68:41:b7:9d:1d:15:02:fb:ec:04:ae:78:35:c2:76:
80:42:8f:ae:25:ba:44:70:e8:b1:20:3c:37:d8:49:
33:18:a8:7f:b2:73:03:70:57:a7:26:8b:36:ab:2b:
fc:5e:45:c1:4b:dc:6d:48:99:83:f0:73:8e:82:d1:
17:c1:da:f2:c0:5e:05:6d:2a:44:bd:d1:f4:1d:98:
04:20:d1:69:d2:c6:74:5e:3b:39:e4:a5:ff:b8:6e:
63:cd:84:6a:e5:28:c9:e6:ce:a1:49:6e:6e:bb:e0:
2c:a3:d6:75:e1:a7:fc:c4:f1:a7:de:b3:2d:0f:9d:
89:46:36:c2:51:ad:c4:2c:c8:fe:33:26:f6:4b:3a:
07:1a:5f:cf:55:3d:0d:37:20:33:f0:c3:73:50:60:
3d:68:e7:74:e7:b3:82:e0:82:54:df:1c:f4:c0:e4:
ed:1b:89:ab:52:0d:5b:5c:68:e3:30:56:57:df:3f:
ec:d6:bc:2b:79:e1:18:13:41:8c:57:21:79:23:69:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D8:A7:7B:B9:EF:8C:74:D3:A7:57:E4:1B:D3:FA:B2:69:6E:8F:F1
X509v3 Authority Key Identifier:
keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33322d3332203d3e203532343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3480::/32
Signature Algorithm: sha256WithRSAEncryption
b3:cc:b3:c1:75:34:27:de:0e:82:ba:96:19:02:11:dc:5a:de:
81:63:be:31:3b:af:4b:f8:fc:d1:bf:f6:34:2d:f0:26:10:ab:
53:53:c2:29:b1:f7:18:fd:64:ec:17:bb:20:a0:ee:7d:35:c9:
b8:0f:61:1f:4b:67:35:99:76:09:ca:ca:15:04:f0:98:d2:0c:
48:62:11:0d:2a:a2:2f:87:6a:56:23:bd:1f:3b:19:a0:7a:ac:
89:58:92:e6:ac:f2:03:9f:1e:f0:50:1e:07:ce:16:0a:3a:87:
23:ef:2a:fd:66:3e:29:1f:b7:c0:dc:7c:1c:41:d2:33:21:9b:
54:02:79:d3:74:56:3d:c0:3a:c1:94:e5:93:0f:27:b4:ea:37:
61:cd:92:a3:1d:65:20:16:8d:2c:2a:6c:ec:5a:ba:84:2c:2f:
15:22:6c:37:29:b2:c4:c8:da:42:65:0c:12:26:a5:c6:43:8f:
41:5f:3f:b5:3d:c6:6e:a5:b0:e4:68:c8:87:13:3c:2a:52:5f:
09:52:a6:ec:e6:e0:fe:f4:dc:70:27:6c:cb:42:c9:14:01:fe:
87:1f:29:6c:5a:af:3f:0e:d7:f6:e4:45:0e:fc:f1:62:90:4f:
f5:91:2b:d0:2f:cb:cc:30:48:6f:dc:f2:d2:08:64:34:d6:c7:
e5:a8:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:33:32 2026 by rpki-client