This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa File: 323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa (raw, json) Hash identifier: UpnjnoHKrto9heXnwHxRsJk8D2l3Cjzn/HZzfL0AxwU= Subject key identifier: 2C:C3:E5:70:38:8A:C3:5A:4C:35:AB:6B:2D:44:86:63:9C:40:86:14 Certificate issuer: /CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74 Certificate serial: 1D94EC5869E7163B6E2C58D0C8AABF55774A2AA6 Authority key identifier: 9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa Signing time: Tue 06 Jan 2026 20:58:35 +0000 ROA not before: Tue 06 Jan 2026 20:53:35 +0000 ROA not after: Tue 05 Jan 2027 20:58:35 +0000 asID: 272146 IP address blocks: 2803:d090:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Jan 2026 13:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:94:ec:58:69:e7:16:3b:6e:2c:58:d0:c8:aa:bf:55:77:4a:2a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74 Validity Not Before: Jan 6 20:53:35 2026 GMT Not After : Jan 5 20:58:35 2027 GMT Subject: CN=2CC3E570388AC35A4C35AB6B2D4486639C408614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0b:f9:0d:ea:21:f8:06:11:5c:25:ef:c1:ff: b1:ee:eb:7e:aa:b5:e5:a6:28:47:9a:2d:37:d9:57: d0:5a:59:ea:d6:02:ae:b3:50:99:23:a3:96:99:a8: 40:ab:db:b2:b9:36:23:76:2d:1f:10:7a:9b:c2:f4: e7:db:6e:f5:3d:e7:a4:b5:d5:19:b9:b7:e9:6b:5a: 47:4c:5f:5b:f6:0a:9e:ba:5e:cc:31:dd:ab:71:91: 6c:7d:7d:bb:80:c5:72:f4:a0:d8:78:62:b4:a7:7d: c3:aa:1e:18:d5:de:fc:86:2c:5e:bc:89:6b:54:c7: 85:c6:8c:35:30:34:42:ac:18:03:9d:ba:ba:be:23: 7a:a0:3f:9a:03:f2:22:46:69:3d:ab:48:4c:35:40: 8e:aa:cc:e0:17:11:63:61:f1:e5:bc:3c:6c:7d:d4: cb:3c:99:0f:45:4d:02:c0:3f:32:97:1e:eb:b5:c3: df:c0:8d:30:6d:9b:a5:2e:4f:60:5a:7c:1b:c1:22: 6f:77:2e:5a:26:58:3d:81:57:0a:ef:90:8d:02:11: 27:a7:99:e1:58:51:d8:38:3d:b2:19:54:cc:07:ca: 08:40:40:76:d9:64:af:58:6d:10:11:d4:42:7d:21: 1a:ce:bc:31:e9:b4:7f:47:62:34:3c:98:cd:9d:f0: 0f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C3:E5:70:38:8A:C3:5A:4C:35:AB:6B:2D:44:86:63:9C:40:86:14 X509v3 Authority Key Identifier: keyid:9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d090:6000::/36 Signature Algorithm: sha256WithRSAEncryption 2c:b4:78:d5:f7:98:8c:d3:35:a9:e9:92:a3:cb:47:c6:5d:78: 69:38:45:d6:1e:97:4f:44:fb:85:cd:ae:52:4e:3a:02:67:18: 13:b4:9e:8d:93:65:af:3b:5b:70:af:4f:92:b9:39:c5:59:0e: 8e:79:a6:fc:86:18:a6:23:69:61:95:ad:e9:55:b4:0a:b9:fb: e3:18:92:56:5e:a5:3e:c5:56:6d:ff:96:23:a5:b5:47:ac:57: 65:bb:5a:82:6f:b6:65:11:0a:eb:2f:01:d3:8e:d3:be:7e:ac: 98:d8:81:cb:5a:c2:12:0f:04:05:dc:2c:42:b4:73:5f:8e:d1: 32:0a:f4:88:bb:41:23:a9:97:d9:fe:53:a3:64:dc:22:aa:d8: 12:86:7e:df:5c:fb:4e:8e:d9:a3:f0:99:b2:64:21:bc:8c:22: 72:53:50:8e:f8:57:18:6a:bf:2f:6b:b3:8b:b3:7b:b3:77:40: 07:bf:6f:e3:71:44:f1:6c:7e:9c:59:06:f4:4f:4e:20:53:fe: c5:6a:b4:30:f7:ff:33:3a:fd:d2:5c:b2:5f:eb:bc:af:d6:4d: b4:a1:c5:d0:0c:74:95:e6:22:66:38:6a:ce:ad:46:bc:eb:33: c1:1c:00:a1:c4:9d:66:1e:14:aa:b4:3d:c6:63:e1:3c:14:16: 3b:ac:ad:0f -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUHZTsWGnnFjtuLFjQyKq/VXdKKqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREOTUxNkM2OEEwMkM4OTgwRjkyMzNBQkFDRDk4MzRD N0MzN0M3NDAeFw0yNjAxMDYyMDUzMzVaFw0yNzAxMDUyMDU4MzVaMDMxMTAvBgNV BAMTKDJDQzNFNTcwMzg4QUMzNUE0QzM1QUI2QjJENDQ4NjYzOUM0MDg2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYC/kN6iH4BhFcJe/B/7Hu636q teWmKEeaLTfZV9BaWerWAq6zUJkjo5aZqECr27K5NiN2LR8QepvC9OfbbvU956S1 1Rm5t+lrWkdMX1v2Cp66Xswx3atxkWx9fbuAxXL0oNh4YrSnfcOqHhjV3vyGLF68 iWtUx4XGjDUwNEKsGAOdurq+I3qgP5oD8iJGaT2rSEw1QI6qzOAXEWNh8eW8PGx9 1Ms8mQ9FTQLAPzKXHuu1w9/AjTBtm6UuT2BafBvBIm93LlomWD2BVwrvkI0CESen meFYUdg4PbIZVMwHyghAQHbZZK9YbRAR1EJ9IRrOvDHptH9HYjQ8mM2d8A+rAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQULMPlcDiKw1pMNatrLUSGY5xAhhQwHwYDVR0j BBgwFoAUndlRbGigLImA+SM6us2YNMfDfHQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNTZEMjRBMDlENEM2M0E2MzBENkM0NkQ5QTVFOTdFQTgw MjVENjcwM0JGNUMwNTlBQzFGMTlGMDczQzI0ODNGLzAvOUREOTUxNkM2OEEwMkM4 OTgwRjkyMzNBQkFDRDk4MzRDN0MzN0M3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85REQ5NTE2QzY4QTAyQzg5ODBG OTIzM0FCQUNEOTgzNEM3QzM3Qzc0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDU2RDI0QTA5RDRDNjNBNjMwRDZDNDZEOUE1RTk3RUE4MDI1RDY3MDNC RjVDMDU5QUMxRjE5RjA3M0MyNDgzRi8wLzMyMzgzMDMzM2E2NDMwMzkzMDNhMzYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzIzMTM0MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA9CQYDANBgkqhkiG9w0BAQsFAAOCAQEALLR41feYjNM1qemSo8tHxl14 aThF1h6XT0T7hc2uUk46AmcYE7SejZNlrztbcK9Pkrk5xVkOjnmm/IYYpiNpYZWt 6VW0Crn74xiSVl6lPsVWbf+WI6W1R6xXZbtagm+2ZREK6y8B047Tvn6smNiBy1rC Eg8EBdwsQrRzX47RMgr0iLtBI6mX2f5To2TcIqrYEoZ+31z7To7Zo/CZsmQhvIwi clNQjvhXGGq/L2uzi7N7s3dAB79v43FE8Wx+nFkG9E9OIFP+xWq0MPf/Mzr90lyy X+u8r9ZNtKHF0Ax0leYiZjhqzq1GvOszwRwAocSdZh4UqrQ9xmPhPBQWO6ytDw== -----END CERTIFICATE-----Generated at Wed Jan 7 22:15:06 2026 by rpki-client