This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a363030303a3a2f33362d3336203d3e20323639383039.roa File: 323830333a633465303a363030303a3a2f33362d3336203d3e20323639383039.roa (raw, json) Hash identifier: 8VsyWU9cD9Jeonq/90AL2nOQfpqYPGD1gGHFlcuDj6g= Subject key identifier: B3:3D:C5:CA:2D:5E:62:CE:17:78:2B:80:83:92:44:76:57:B3:17:46 Certificate issuer: /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Certificate serial: 1074568A9FAAAFCAFD65788B347D9AA1C98C8200 Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a363030303a3a2f33362d3336203d3e20323639383039.roa Signing time: Tue 06 Jan 2026 20:53:47 +0000 ROA not before: Tue 06 Jan 2026 20:48:47 +0000 ROA not after: Tue 05 Jan 2027 20:53:47 +0000 asID: 269809 IP address blocks: 2803:c4e0:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Jan 2026 07:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:74:56:8a:9f:aa:af:ca:fd:65:78:8b:34:7d:9a:a1:c9:8c:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Validity Not Before: Jan 6 20:48:47 2026 GMT Not After : Jan 5 20:53:47 2027 GMT Subject: CN=B33DC5CA2D5E62CE17782B808392447657B31746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:cd:0c:be:5b:ce:4b:4e:0f:2b:b2:04:60: 40:81:9a:3d:5f:88:ca:86:b3:e8:37:09:5a:de:45: 0b:ce:37:a0:d0:77:68:a8:8e:97:e8:d7:c6:80:7d: 49:dd:16:e5:38:32:0d:db:db:cd:b2:27:fb:19:a2: 6a:00:8e:84:5f:af:db:66:11:d4:eb:b2:6e:5e:a5: d0:12:0a:fb:f5:72:fd:d5:2d:7a:bd:d6:83:00:58: 26:db:de:d7:d2:d3:8e:fd:37:81:bd:e3:e5:f2:79: 93:a7:7a:90:e9:3c:df:ad:3c:c4:d6:1a:81:23:bd: a8:c0:78:67:91:9e:da:bb:5b:99:b2:74:f0:ae:e5: f9:ef:39:61:e3:8c:04:0f:68:6d:3e:69:a6:d4:ab: fb:b4:ab:63:0c:15:02:a9:60:d1:3f:86:40:80:b1: 8f:e7:50:37:f2:4c:73:11:40:c9:d6:dd:4b:97:92: 21:f1:50:cf:5c:88:75:da:97:8f:ef:79:d4:d1:e3: d1:a8:5c:13:ef:f4:5e:cb:b6:ad:a8:57:45:cd:e1: 81:86:80:5a:91:d2:0b:88:20:38:2b:0d:c6:6d:17: 2e:53:06:0b:43:ff:69:ac:48:a5:85:c6:3c:4c:9a: 10:86:66:a5:a3:1d:45:ef:3d:c2:47:39:e7:53:bc: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3D:C5:CA:2D:5E:62:CE:17:78:2B:80:83:92:44:76:57:B3:17:46 X509v3 Authority Key Identifier: keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a363030303a3a2f33362d3336203d3e20323639383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c4e0:6000::/36 Signature Algorithm: sha256WithRSAEncryption 10:a8:15:7d:6e:ef:10:0e:8b:92:9d:59:17:c4:65:29:2b:0e: ce:b0:b1:6d:4f:a4:e0:e6:ef:54:5f:18:fc:18:d3:33:32:49: 9c:04:be:8e:5e:ab:dd:56:d4:8e:d0:5a:78:3a:d7:63:59:57: 82:2a:8d:0a:d2:d5:21:da:c7:00:15:13:c3:61:b8:a2:78:59: c2:29:ff:d0:d3:e0:e8:0e:cd:95:4e:94:17:17:d7:e2:6d:52: fc:a7:0d:41:95:a2:66:24:95:17:1f:f5:80:a0:e6:7e:c7:e1: 33:e6:ce:51:08:13:32:b6:65:51:9c:98:f9:04:8b:ed:72:1b: 3b:4a:5c:c6:39:ce:f5:d5:b3:94:58:d0:1b:14:6b:2e:59:03: bf:1b:9e:88:62:f9:e1:fe:bc:cf:d3:db:ed:3a:61:38:dc:b1: a3:d3:1d:8e:9d:77:47:22:96:52:f2:ea:42:fe:3e:64:02:43: 80:c0:05:56:ed:21:75:1a:07:38:58:ea:f9:e3:23:51:38:6b: fd:90:d7:73:bd:f5:e5:af:4b:4c:19:03:87:65:00:de:47:ae: e5:27:e7:16:33:75:6d:e4:f1:1f:1c:db:ed:77:c1:90:ee:b3: 61:54:39:b9:96:09:4c:fc:31:84:08:05:b4:c0:f4:27:0c:1e: 37:9a:8c:6a -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUEHRWip+qr8r9ZXiLNH2aocmMggAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NzIzN0E3QzlCMjE5NkQxNzE0NkI3RkREOEMwMzFC RTgxREJGNDAeFw0yNjAxMDYyMDQ4NDdaFw0yNzAxMDUyMDUzNDdaMDMxMTAvBgNV BAMTKEIzM0RDNUNBMkQ1RTYyQ0UxNzc4MkI4MDgzOTI0NDc2NTdCMzE3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKM0MvlvOS04PK7IEYECBmj1f iMqGs+g3CVreRQvON6DQd2iojpfo18aAfUndFuU4Mg3b282yJ/sZomoAjoRfr9tm EdTrsm5epdASCvv1cv3VLXq91oMAWCbb3tfS0479N4G94+XyeZOnepDpPN+tPMTW GoEjvajAeGeRntq7W5mydPCu5fnvOWHjjAQPaG0+aabUq/u0q2MMFQKpYNE/hkCA sY/nUDfyTHMRQMnW3UuXkiHxUM9ciHXal4/vedTR49GoXBPv9F7Ltq2oV0XN4YGG gFqR0guIIDgrDcZtFy5TBgtD/2msSKWFxjxMmhCGZqWjHUXvPcJHOedTvMIPAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUsz3Fyi1eYs4XeCuAg5JEdlezF0YwHwYDVR0j BBgwFoAUPXcjenybIZbRcUa3/djAMb6B2/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNTg0QzBBNzlEMjYzNzU4QUQzNjZBQkM3MEFFRTU5NUND QUFDQjQxQTZGNkE5Qzc3MzQ3Mzk2QUE4M0ZCQkFGLzAvM0Q3NzIzN0E3QzlCMjE5 NkQxNzE0NkI3RkREOEMwMzFCRTgxREJGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDc3MjM3QTdDOUIyMTk2RDE3 MTQ2QjdGREQ4QzAzMUJFODFEQkY0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDU4NEMwQTc5RDI2Mzc1OEFEMzY2QUJDNzBBRUU1OTVDQ0FBQ0I0MUE2 RjZBOUM3NzM0NzM5NkFBODNGQkJBRi8wLzMyMzgzMDMzM2E2MzM0NjUzMDNhMzYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzODMwMzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA8TgYDANBgkqhkiG9w0BAQsFAAOCAQEAEKgVfW7vEA6Lkp1ZF8RlKSsO zrCxbU+k4ObvVF8Y/BjTMzJJnAS+jl6r3VbUjtBaeDrXY1lXgiqNCtLVIdrHABUT w2G4onhZwin/0NPg6A7NlU6UFxfX4m1S/KcNQZWiZiSVFx/1gKDmfsfhM+bOUQgT MrZlUZyY+QSL7XIbO0pcxjnO9dWzlFjQGxRrLlkDvxueiGL54f68z9Pb7TphONyx o9Mdjp13RyKWUvLqQv4+ZAJDgMAFVu0hdRoHOFjq+eMjUThr/ZDXc7315a9LTBkD h2UA3keu5SfnFjN1beTxHxzb7XfBkO6zYVQ5uZYJTPwxhAgFtMD0JwweN5qMag== -----END CERTIFICATE-----Generated at Mon Jan 12 04:11:22 2026 by rpki-client