This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa
File: 323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa (raw, json)
Hash identifier: UeyrszFoTBjMjaP4wxDbrJWG4O7vDYgna9bLRGoIgHw=
Subject key identifier: C3:1F:A5:9C:60:CA:7F:5B:C0:C9:47:7D:69:1A:24:FE:A5:06:F2:2B
Certificate issuer: /CN=E45215C1ABF0099BEFF5D5807A415849759B9467
Certificate serial: 150F6AA05FAB001E1168B43EAE5A1901508A0FDF
Authority key identifier: E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa
Signing time: Tue 06 Jan 2026 19:17:13 +0000
ROA not before: Tue 06 Jan 2026 19:12:13 +0000
ROA not after: Tue 05 Jan 2027 19:17:13 +0000
asID: 271916
IP address blocks: 2803:4a10:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl
rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0f:6a:a0:5f:ab:00:1e:11:68:b4:3e:ae:5a:19:01:50:8a:0f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E45215C1ABF0099BEFF5D5807A415849759B9467
Validity
Not Before: Jan 6 19:12:13 2026 GMT
Not After : Jan 5 19:17:13 2027 GMT
Subject: CN=C31FA59C60CA7F5BC0C9477D691A24FEA506F22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:2c:1f:5f:6a:27:eb:6a:84:99:e3:21:b5:
c0:12:99:0c:7a:8c:f8:e0:e8:a1:d7:d0:9c:55:02:
f2:dc:5b:8a:43:2c:c7:45:3f:5b:96:1c:b4:ae:a3:
44:be:f9:1b:15:15:4d:fe:01:66:df:30:d9:72:cf:
b8:5f:3e:cd:35:36:14:d4:3a:a4:bc:d9:45:25:c3:
de:d7:f6:55:be:34:be:eb:b3:2b:f6:d2:85:10:f8:
2d:f6:0f:6a:ab:6a:53:8a:2c:b7:58:68:68:bb:f8:
dc:6d:b7:a2:3d:f2:ec:b1:19:9a:86:5c:92:b2:39:
3c:c6:e5:dc:94:86:2d:19:7b:00:1b:85:83:30:77:
d1:8e:96:25:f5:61:20:83:e9:ad:b6:43:9d:0c:0b:
a4:1d:de:ba:99:4c:35:ee:c8:4d:81:87:2a:77:a3:
a2:c7:9d:bc:78:01:b3:d8:40:9e:a7:b4:77:a5:88:
05:14:c7:a0:4a:38:12:9b:21:a6:74:e7:4e:47:18:
89:5a:ad:9c:b5:6a:f8:4b:9d:3a:52:f4:bc:2b:10:
5f:73:c4:31:d8:ca:83:1e:92:7e:72:82:bb:0b:b3:
14:14:5d:3e:04:26:a0:d6:9b:e3:b1:07:b7:fd:15:
d7:35:f7:1e:63:ee:cc:63:56:c1:af:60:69:70:2c:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1F:A5:9C:60:CA:7F:5B:C0:C9:47:7D:69:1A:24:FE:A5:06:F2:2B
X509v3 Authority Key Identifier:
keyid:E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4a10:f000::/36
Signature Algorithm: sha256WithRSAEncryption
a9:1a:48:a5:b9:64:21:82:bd:dd:85:00:f6:aa:1f:72:2a:f3:
51:1c:5b:25:e5:c9:c5:d0:fc:69:33:99:1c:76:ed:2a:89:66:
7b:d1:fd:82:bc:9b:bc:8d:f9:68:6f:64:cd:e4:fc:5e:95:60:
2a:27:03:01:d2:5e:09:e4:11:29:1e:40:51:b0:a3:d9:57:2f:
0f:9c:87:05:c9:fe:61:1b:de:a8:ad:22:a2:72:c7:9b:2c:df:
b7:53:08:01:94:49:0f:e1:cc:cd:dc:0a:5a:e9:48:44:0a:db:
c3:a2:68:06:9f:ed:68:c7:9f:8c:d2:85:0a:50:54:ec:f1:4e:
2e:48:8b:58:34:ec:24:3b:25:b4:94:01:2d:dd:6a:aa:68:be:
08:49:1c:83:2a:97:9b:0e:d7:8b:00:1a:60:fe:bd:6f:25:11:
7b:1f:8a:56:38:5f:68:68:5c:51:82:68:5c:d2:9c:9b:ce:5d:
77:c8:c0:af:c5:13:81:ba:5d:76:77:cf:26:2b:ff:e0:53:a2:
f7:eb:7d:1c:a4:35:4f:ce:15:ce:eb:f7:dd:86:e9:4d:f7:fc:
b8:a9:11:91:61:d4:db:bf:e3:be:17:47:5c:03:5e:fb:ed:00:
4c:65:f0:be:36:84:bf:3c:8e:36:bf:94:6b:2e:7d:c2:9a:9a:
5b:9a:e2:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 12 13:50:29 2026 by rpki-client