This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/323830333a626131303a3a2f33322d3438203d3e20323731393334.roa
File: 323830333a626131303a3a2f33322d3438203d3e20323731393334.roa (raw, json)
Hash identifier: oTwSIGsqoyDZVgbxIluEyLzBbprrmKy7BRKe/pUh16M=
Subject key identifier: B3:9B:B5:64:A3:95:A7:44:32:E6:64:95:DF:18:55:6D:8D:DA:C8:F4
Certificate issuer: /CN=C98CBAFA1B63461F7181D20C05CB6C83B4A752B4
Certificate serial: 29867D4B1657D2550F13F3711D69A9E162417A98
Authority key identifier: C9:8C:BA:FA:1B:63:46:1F:71:81:D2:0C:05:CB:6C:83:B4:A7:52:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/323830333a626131303a3a2f33322d3438203d3e20323731393334.roa
Signing time: Tue 06 Jan 2026 19:14:59 +0000
ROA not before: Tue 06 Jan 2026 19:09:59 +0000
ROA not after: Tue 05 Jan 2027 19:14:59 +0000
asID: 271934
IP address blocks: 2803:ba10::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.crl
rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:86:7d:4b:16:57:d2:55:0f:13:f3:71:1d:69:a9:e1:62:41:7a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C98CBAFA1B63461F7181D20C05CB6C83B4A752B4
Validity
Not Before: Jan 6 19:09:59 2026 GMT
Not After : Jan 5 19:14:59 2027 GMT
Subject: CN=B39BB564A395A74432E66495DF18556D8DDAC8F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:e5:95:83:12:02:83:1e:90:6c:88:94:ff:
1f:53:f9:ae:4e:f4:07:53:aa:ed:52:56:5b:45:6a:
e6:28:f4:d2:46:94:2b:8b:f4:eb:c1:9c:51:69:99:
ce:c7:af:03:be:64:da:61:6d:4e:dd:b3:6b:54:5a:
3f:2f:b5:08:23:62:38:f1:ad:1b:6b:22:45:ad:2b:
23:2b:d5:ee:51:84:f8:37:8d:3b:52:76:20:c9:a8:
12:4b:91:bf:58:ca:74:38:a4:b0:19:d8:f4:e1:44:
3e:1e:34:96:9a:9a:2e:bc:23:be:c1:44:23:e8:98:
7a:26:79:21:f2:e7:75:5b:88:c1:85:51:0f:02:ee:
a4:10:e8:01:94:e5:f0:5e:99:f2:3f:fb:0b:b6:05:
02:c5:d9:09:e2:58:33:c2:f9:e8:8d:9e:17:52:55:
45:f8:c7:d0:90:b6:f3:d7:79:8f:69:f4:1c:ef:59:
13:39:80:ab:d6:ec:db:20:ce:a6:13:b1:94:5a:56:
8c:63:44:c9:91:e1:da:72:a9:11:21:e2:ca:df:ce:
1f:1c:0e:20:6f:9a:50:aa:63:d4:88:67:a0:69:46:
c1:40:9a:e4:86:e9:ae:c4:0d:7d:79:41:d4:04:60:
8b:01:d1:c6:33:11:2c:8e:75:df:95:7c:1f:79:d9:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9B:B5:64:A3:95:A7:44:32:E6:64:95:DF:18:55:6D:8D:DA:C8:F4
X509v3 Authority Key Identifier:
keyid:C9:8C:BA:FA:1B:63:46:1F:71:81:D2:0C:05:CB:6C:83:B4:A7:52:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/323830333a626131303a3a2f33322d3438203d3e20323731393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ba10::/32
Signature Algorithm: sha256WithRSAEncryption
74:20:c6:89:52:7f:63:b4:6c:bd:59:e1:3f:b5:3c:8e:db:f0:
7e:61:c3:3f:fb:9d:3e:a7:d0:58:81:c3:fd:db:54:be:ca:60:
be:03:6a:62:17:46:42:e5:d4:1c:f8:ce:a5:a2:07:cf:a8:fc:
b7:bc:6d:0b:88:d8:1a:86:dd:9a:e9:a7:75:0c:c3:89:0a:be:
4c:ee:a1:fd:6a:fb:29:42:fc:0d:71:ad:e3:7b:b7:1e:5c:a4:
11:c6:48:3c:32:61:82:f2:15:94:34:75:c6:b0:2d:d9:30:31:
be:46:9b:bd:bf:60:d2:40:c5:ab:45:14:9a:a4:90:15:02:cb:
1f:e2:72:c1:af:8e:23:13:4b:a6:ef:bf:d1:f3:f0:d3:a1:b5:
c4:7a:89:0a:84:16:99:97:48:ef:be:d4:c1:b9:9b:ad:84:ad:
aa:45:1c:20:f5:3b:c0:75:1f:5b:74:cd:3f:51:86:32:b1:6a:
26:be:f0:3d:51:96:2d:ba:d1:cc:35:51:f8:77:a2:cd:7b:86:
2d:33:3d:0f:4b:4c:56:ec:6b:86:58:e2:10:bb:11:b0:0d:8e:
c7:97:f3:81:04:c2:c2:52:57:68:67:80:55:78:f1:2c:7b:7d:
e7:00:19:e0:ae:11:e9:15:76:ea:43:06:2a:10:2f:39:cd:47:
a2:fb:c3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:08:18 2026 by rpki-client