This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3438203d3e20323733313131.roa
File: 323830333a323835303a3a2f33322d3438203d3e20323733313131.roa (raw, json)
Hash identifier: nm1/JV+H51+tPU6WsvB6c1Y+U18+q926bawGupsbi4Q=
Subject key identifier: C3:9B:9E:F7:FE:E6:DB:40:B4:96:F8:41:6B:B3:BA:D4:22:A7:B5:5B
Certificate issuer: /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial: 05A1C8B4DB3DAF1F6172F236D81117FF42696209
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3438203d3e20323733313131.roa
Signing time: Tue 06 Jan 2026 20:56:50 +0000
ROA not before: Tue 06 Jan 2026 20:51:50 +0000
ROA not after: Tue 05 Jan 2027 20:56:50 +0000
asID: 273111
IP address blocks: 2803:2850::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a1:c8:b4:db:3d:af:1f:61:72:f2:36:d8:11:17:ff:42:69:62:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Validity
Not Before: Jan 6 20:51:50 2026 GMT
Not After : Jan 5 20:56:50 2027 GMT
Subject: CN=C39B9EF7FEE6DB40B496F8416BB3BAD422A7B55B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:96:a3:d2:be:eb:5b:79:96:ad:0d:9f:b1:
90:f6:72:84:7a:29:08:e9:e5:24:80:ee:f6:03:99:
84:45:34:92:42:ea:78:bb:0b:d9:b8:cd:39:de:9c:
9d:d2:7b:ab:4b:18:d9:5e:20:e4:6a:9a:62:91:3c:
4e:cf:9c:64:b6:12:e1:17:21:26:e6:e8:fd:99:7b:
dc:64:14:af:25:ba:57:a1:c7:6d:8c:9b:7b:9c:99:
21:39:b5:8a:a5:0a:e7:97:4e:8a:6e:c9:6b:c6:35:
77:51:95:c7:00:cb:1e:3a:98:46:05:30:4c:d5:5d:
53:d8:74:e9:34:80:b6:78:76:73:a8:99:8f:61:fa:
b5:6a:91:77:db:0b:7e:a1:57:6b:f3:c5:48:7e:1c:
3c:ed:71:6d:51:f9:9b:ee:3b:81:4d:fb:06:0a:15:
98:d5:5a:77:a8:4b:9c:93:f0:d3:bb:00:88:f9:65:
89:aa:e2:f0:70:be:1d:89:fc:0b:32:de:79:30:36:
39:d6:78:07:aa:f0:8b:5a:36:d1:00:03:f9:aa:c3:
c8:b4:5b:64:c1:3c:09:6b:b1:be:21:6d:02:82:86:
34:51:e3:d4:5b:22:30:c3:a9:d4:3b:df:3c:8f:ff:
b3:a5:cc:d0:e3:6d:7a:45:d6:d2:57:6f:a2:15:32:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9B:9E:F7:FE:E6:DB:40:B4:96:F8:41:6B:B3:BA:D4:22:A7:B5:5B
X509v3 Authority Key Identifier:
keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3438203d3e20323733313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2850::/32
Signature Algorithm: sha256WithRSAEncryption
33:96:75:26:9b:79:0f:02:fa:55:19:c7:ba:77:34:13:d1:31:
a9:d7:f8:d6:72:51:43:59:9f:a5:66:10:76:75:72:c1:f0:1e:
8a:dc:7a:e8:b1:ce:65:c8:57:a6:5b:0c:03:4b:0d:1e:9d:51:
f5:03:ff:f9:f5:bd:59:eb:0a:eb:98:e3:50:b2:5e:2f:19:a6:
38:88:73:9f:d0:72:8a:5a:08:07:e3:af:39:53:ba:47:bb:e8:
5a:31:8d:03:97:a9:1e:84:58:6b:7b:89:d2:26:70:2c:12:a7:
fd:e4:ab:8a:72:1f:2e:73:ca:b8:2a:a6:35:34:2b:77:b3:d6:
8b:b7:db:b9:dc:61:0d:eb:12:8e:9d:bf:24:b3:f4:9a:bb:3c:
01:65:15:9e:d2:bc:9c:b7:25:6d:91:f2:04:aa:db:1b:c1:2f:
de:7c:8e:c0:fc:a2:5c:14:c9:0f:5e:78:7e:92:53:2e:b7:70:
e5:8f:3c:1c:b7:3d:02:0f:50:a2:3d:01:16:9b:a1:3a:16:82:
90:4d:90:07:77:16:f5:f4:1a:64:aa:e4:6a:8a:a8:a9:46:e7:
19:fe:31:51:8e:6c:67:24:46:5f:6d:95:d7:19:83:25:b4:ef:
19:17:dc:8d:08:0c:7d:66:17:71:03:89:4b:74:5e:8b:61:4b:
7c:df:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:38:33 2026 by rpki-client