This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a323030303a3a2f33362d3336203d3e20323639383039.roa File: 323830333a633465303a323030303a3a2f33362d3336203d3e20323639383039.roa (raw, json) Hash identifier: XibneX77teuEr7RJOgO/ZjhsEs/pvjFBwUVMy9h2eRQ= Subject key identifier: 58:5E:21:5D:C0:F6:7D:BD:E1:C0:78:FF:27:0D:A1:FD:49:77:9B:B8 Certificate issuer: /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Certificate serial: 6F6EB4854279F761850832AECBA9640A9CD7A408 Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a323030303a3a2f33362d3336203d3e20323639383039.roa Signing time: Tue 06 Jan 2026 20:53:43 +0000 ROA not before: Tue 06 Jan 2026 20:48:43 +0000 ROA not after: Tue 05 Jan 2027 20:53:43 +0000 asID: 269809 IP address blocks: 2803:c4e0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 09:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6e:b4:85:42:79:f7:61:85:08:32:ae:cb:a9:64:0a:9c:d7:a4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Validity Not Before: Jan 6 20:48:43 2026 GMT Not After : Jan 5 20:53:43 2027 GMT Subject: CN=585E215DC0F67DBDE1C078FF270DA1FD49779BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:39:1a:04:e5:6a:1b:eb:2e:b5:14:e9:64: 18:e0:9b:ca:f2:a5:c8:4a:ba:c2:ae:0c:d8:09:d1: f3:af:75:f1:3c:3d:14:77:a4:ee:53:0f:6b:ac:3f: 47:2a:31:f2:92:04:83:25:b7:9e:2f:35:62:f9:b9: fb:9c:a6:8d:2c:1b:42:60:29:21:e1:5e:53:94:38: 0c:61:e3:de:a5:d4:55:fb:c8:79:be:18:48:a3:3a: 60:19:c6:d5:e1:45:74:27:cd:97:31:21:b3:25:30: 60:d1:be:9f:12:c0:99:78:af:b6:02:10:64:74:57: 72:8d:3d:ea:ea:94:6c:bd:6c:25:39:12:cb:7e:10: 01:e6:b2:91:70:83:d7:a7:3d:84:6f:3c:fb:e6:56: 0a:ca:94:50:fa:ce:f5:51:26:a6:45:e1:2f:89:a6: 8d:1b:c5:4e:de:dd:93:e9:87:9e:71:7c:60:ba:67: 94:92:5c:b2:16:b1:0b:4e:1d:9d:4f:58:9d:c5:c2: aa:94:6c:0c:a3:a1:96:7d:4d:af:f6:c5:dd:fb:e5: c9:7c:b1:78:cc:e5:4d:10:f8:ab:0b:31:ce:4e:82: d5:32:d4:c7:49:ce:13:96:98:b0:77:8d:97:da:42: d4:f7:b1:55:ee:1e:3f:39:8c:c4:ec:f8:8b:71:6a: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5E:21:5D:C0:F6:7D:BD:E1:C0:78:FF:27:0D:A1:FD:49:77:9B:B8 X509v3 Authority Key Identifier: keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a323030303a3a2f33362d3336203d3e20323639383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c4e0:2000::/36 Signature Algorithm: sha256WithRSAEncryption 52:01:1d:16:ef:6b:c6:0d:f5:b5:61:a3:21:98:ae:f3:5b:6b: 3d:b5:03:32:c0:0e:bf:df:0c:97:f5:86:e2:f7:ff:ca:2a:24: da:cd:94:8f:46:b3:1e:98:ec:32:43:1c:83:ae:12:aa:6e:55: 10:c7:f4:60:10:d0:a5:c8:90:05:d3:48:36:05:ca:37:3e:77: ff:7e:c5:a1:df:4c:a0:10:61:05:52:68:4f:41:84:4a:50:b8: 44:f2:09:30:bd:f4:66:94:e6:db:e0:13:fc:ce:b1:c6:6d:43: e9:fd:d7:11:d8:53:8a:39:8e:5a:18:b6:2c:4f:3f:5b:ff:6a: 9a:b7:cd:ee:b3:d5:ca:5a:6f:3d:b7:01:6b:15:46:5e:44:59: ca:d2:e6:58:0b:72:3f:3a:2b:b2:e6:f7:e7:36:3a:bb:5c:e6: 82:7e:41:6e:4c:3b:0d:10:e6:c1:21:ea:48:71:0f:32:88:15: e9:3d:51:2f:7d:e0:72:2b:bd:a0:ce:27:3a:91:2f:14:48:ea: 11:73:19:c1:b9:f4:cb:1e:8f:8f:f5:5d:36:be:bd:2d:fa:c7: e7:ee:d9:63:55:6a:f8:7b:4f:66:dd:d6:ab:f0:12:fe:ab:0f: b0:cf:d4:d9:a8:78:7b:0e:c7:98:3d:05:74:34:06:57:01:c5: 2d:81:0d:66 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUb260hUJ592GFCDKuy6lkCpzXpAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NzIzN0E3QzlCMjE5NkQxNzE0NkI3RkREOEMwMzFC RTgxREJGNDAeFw0yNjAxMDYyMDQ4NDNaFw0yNzAxMDUyMDUzNDNaMDMxMTAvBgNV BAMTKDU4NUUyMTVEQzBGNjdEQkRFMUMwNzhGRjI3MERBMUZENDk3NzlCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPzkaBOVqG+sutRTpZBjgm8ry pchKusKuDNgJ0fOvdfE8PRR3pO5TD2usP0cqMfKSBIMlt54vNWL5ufucpo0sG0Jg KSHhXlOUOAxh496l1FX7yHm+GEijOmAZxtXhRXQnzZcxIbMlMGDRvp8SwJl4r7YC EGR0V3KNPerqlGy9bCU5Est+EAHmspFwg9enPYRvPPvmVgrKlFD6zvVRJqZF4S+J po0bxU7e3ZPph55xfGC6Z5SSXLIWsQtOHZ1PWJ3FwqqUbAyjoZZ9Ta/2xd375cl8 sXjM5U0Q+KsLMc5OgtUy1MdJzhOWmLB3jZfaQtT3sVXuHj85jMTs+Itxatd3AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUWF4hXcD2fb3hwHj/Jw2h/Ul3m7gwHwYDVR0j BBgwFoAUPXcjenybIZbRcUa3/djAMb6B2/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNTg0QzBBNzlEMjYzNzU4QUQzNjZBQkM3MEFFRTU5NUND QUFDQjQxQTZGNkE5Qzc3MzQ3Mzk2QUE4M0ZCQkFGLzAvM0Q3NzIzN0E3QzlCMjE5 NkQxNzE0NkI3RkREOEMwMzFCRTgxREJGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDc3MjM3QTdDOUIyMTk2RDE3 MTQ2QjdGREQ4QzAzMUJFODFEQkY0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDU4NEMwQTc5RDI2Mzc1OEFEMzY2QUJDNzBBRUU1OTVDQ0FBQ0I0MUE2 RjZBOUM3NzM0NzM5NkFBODNGQkJBRi8wLzMyMzgzMDMzM2E2MzM0NjUzMDNhMzIz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzODMwMzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA8TgIDANBgkqhkiG9w0BAQsFAAOCAQEAUgEdFu9rxg31tWGjIZiu81tr PbUDMsAOv98Ml/WG4vf/yiok2s2Uj0azHpjsMkMcg64Sqm5VEMf0YBDQpciQBdNI NgXKNz53/37Fod9MoBBhBVJoT0GESlC4RPIJML30ZpTm2+AT/M6xxm1D6f3XEdhT ijmOWhi2LE8/W/9qmrfN7rPVylpvPbcBaxVGXkRZytLmWAtyPzorsub35zY6u1zm gn5Bbkw7DRDmwSHqSHEPMogV6T1RL33gciu9oM4nOpEvFEjqEXMZwbn0yx6Pj/Vd Nr69LfrH5+7ZY1Vq+HtPZt3Wq/AS/qsPsM/U2ah4ew7HmD0FdDQGVwHFLYENZg== -----END CERTIFICATE-----Generated at Tue Jan 13 02:58:44 2026 by rpki-client