This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a663030303a3a2f33362d3336203d3e20323639383039.roa File: 323830333a633465303a663030303a3a2f33362d3336203d3e20323639383039.roa (raw, json) Hash identifier: Rnsn1lGV3LuO4TO79B/wggA5pXxuryBFCqvCaaP+OJo= Subject key identifier: 59:49:45:18:EB:86:C1:CC:A3:6C:3F:AA:38:22:1A:4A:ED:CA:77:0A Certificate issuer: /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Certificate serial: 6A3B2207CF5C7F55BB06F38914BAA476BD8A3611 Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a663030303a3a2f33362d3336203d3e20323639383039.roa Signing time: Tue 06 Jan 2026 20:53:45 +0000 ROA not before: Tue 06 Jan 2026 20:48:45 +0000 ROA not after: Tue 05 Jan 2027 20:53:45 +0000 asID: 269809 IP address blocks: 2803:c4e0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Jan 2026 07:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3b:22:07:cf:5c:7f:55:bb:06:f3:89:14:ba:a4:76:bd:8a:36:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Validity Not Before: Jan 6 20:48:45 2026 GMT Not After : Jan 5 20:53:45 2027 GMT Subject: CN=59494518EB86C1CCA36C3FAA38221A4AEDCA770A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:08:d5:86:d3:c8:7d:f7:49:4f:8c:ef:19: 60:37:b0:71:a1:64:5a:b8:a2:75:40:29:b3:39:9b: 7e:c4:dd:16:a0:8a:d2:16:2f:1d:a3:73:7a:e4:f8: 39:c4:de:2f:95:45:fa:7d:f6:c5:16:3f:3f:8d:e0: 08:5c:8e:a7:01:4d:ee:47:18:be:57:b3:37:ec:7a: 42:fa:31:9a:e6:59:e2:e7:63:4b:31:15:a7:39:ff: 68:7f:a0:db:68:f0:ca:25:28:bf:67:2b:3c:49:e5: ab:d9:dd:c1:5a:fa:94:48:2a:48:d2:c4:9f:6e:83: c9:63:66:62:10:93:73:ab:40:d9:bc:24:23:57:b5: c4:7e:a6:d3:55:0f:0d:d0:49:1f:e0:eb:8b:a2:19: 02:41:7e:f7:ff:c8:a7:c0:3d:ad:3e:66:d2:80:68: 05:8d:49:91:94:a6:7d:4d:7a:08:13:b6:05:09:64: 59:ea:1f:c6:fc:53:4c:b1:c9:9a:59:f3:d6:cd:6a: 2b:eb:f8:db:ca:a9:61:fb:c8:57:2c:36:e2:71:1a: 89:89:9e:e2:01:84:90:a7:77:7c:0f:bb:41:e3:75: fb:59:69:b9:a3:ac:cc:85:c2:ab:1f:a3:5a:b4:d6: f8:ba:99:0e:b0:f9:5d:60:2d:96:37:2a:c4:c2:83: 10:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:49:45:18:EB:86:C1:CC:A3:6C:3F:AA:38:22:1A:4A:ED:CA:77:0A X509v3 Authority Key Identifier: keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a663030303a3a2f33362d3336203d3e20323639383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c4e0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 64:f7:9f:ae:60:d4:da:09:8d:a3:0a:59:c3:c7:98:96:f6:50: 9c:df:96:f0:6e:70:f4:fc:fb:09:8e:8b:01:23:78:99:cc:33: bf:ac:6f:ba:89:a9:19:21:8e:e4:51:38:e9:06:68:b9:54:b3: e1:ed:ac:b9:75:66:7d:a8:56:2c:f8:75:f4:4a:7c:bb:e6:7b: 51:ac:dc:3b:ce:93:00:15:bc:bd:77:39:79:4c:00:90:58:07: 6f:3b:a5:1d:ae:bd:7e:8e:89:65:e0:b4:20:60:d8:51:0c:bf: e0:19:37:45:02:c1:ca:f4:fb:68:62:87:b4:e3:23:8c:ad:f6: 91:77:0a:69:6b:4b:e0:3d:6c:69:ae:68:83:23:1a:a4:a7:1f: 13:50:cf:ec:1b:57:72:51:76:aa:26:a8:f6:5c:29:9c:d6:ab: 8d:18:bf:b0:50:12:63:71:1c:14:e4:c1:2f:66:0a:4b:7c:64: fd:a9:07:cd:cc:9d:26:b4:b9:05:f7:a0:a0:43:84:a0:73:02: 07:f4:8e:f2:ab:06:0e:2e:c0:f3:08:de:b8:e0:54:6b:32:a6: 36:3c:7c:f4:98:5b:c4:84:3a:e7:27:46:93:4b:d3:98:bb:1c: 96:64:7c:1e:68:f2:28:b4:a8:2e:92:75:3d:ad:05:25:ff:97: ce:ce:9b:98 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUajsiB89cf1W7BvOJFLqkdr2KNhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NzIzN0E3QzlCMjE5NkQxNzE0NkI3RkREOEMwMzFC RTgxREJGNDAeFw0yNjAxMDYyMDQ4NDVaFw0yNzAxMDUyMDUzNDVaMDMxMTAvBgNV BAMTKDU5NDk0NTE4RUI4NkMxQ0NBMzZDM0ZBQTM4MjIxQTRBRURDQTc3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55AjVhtPIffdJT4zvGWA3sHGh ZFq4onVAKbM5m37E3RagitIWLx2jc3rk+DnE3i+VRfp99sUWPz+N4AhcjqcBTe5H GL5XszfsekL6MZrmWeLnY0sxFac5/2h/oNto8MolKL9nKzxJ5avZ3cFa+pRIKkjS xJ9ug8ljZmIQk3OrQNm8JCNXtcR+ptNVDw3QSR/g64uiGQJBfvf/yKfAPa0+ZtKA aAWNSZGUpn1NeggTtgUJZFnqH8b8U0yxyZpZ89bNaivr+NvKqWH7yFcsNuJxGomJ nuIBhJCnd3wPu0HjdftZabmjrMyFwqsfo1q01vi6mQ6w+V1gLZY3KsTCgxAtAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUWUlFGOuGwcyjbD+qOCIaSu3KdwowHwYDVR0j BBgwFoAUPXcjenybIZbRcUa3/djAMb6B2/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNTg0QzBBNzlEMjYzNzU4QUQzNjZBQkM3MEFFRTU5NUND QUFDQjQxQTZGNkE5Qzc3MzQ3Mzk2QUE4M0ZCQkFGLzAvM0Q3NzIzN0E3QzlCMjE5 NkQxNzE0NkI3RkREOEMwMzFCRTgxREJGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDc3MjM3QTdDOUIyMTk2RDE3 MTQ2QjdGREQ4QzAzMUJFODFEQkY0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDU4NEMwQTc5RDI2Mzc1OEFEMzY2QUJDNzBBRUU1OTVDQ0FBQ0I0MUE2 RjZBOUM3NzM0NzM5NkFBODNGQkJBRi8wLzMyMzgzMDMzM2E2MzM0NjUzMDNhNjYz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzODMwMzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA8Tg8DANBgkqhkiG9w0BAQsFAAOCAQEAZPefrmDU2gmNowpZw8eYlvZQ nN+W8G5w9Pz7CY6LASN4mcwzv6xvuompGSGO5FE46QZouVSz4e2suXVmfahWLPh1 9Ep8u+Z7UazcO86TABW8vXc5eUwAkFgHbzulHa69fo6JZeC0IGDYUQy/4Bk3RQLB yvT7aGKHtOMjjK32kXcKaWtL4D1saa5ogyMapKcfE1DP7BtXclF2qiao9lwpnNar jRi/sFASY3EcFOTBL2YKS3xk/akHzcydJrS5BfegoEOEoHMCB/SO8qsGDi7A8wje uOBUazKmNjx89JhbxIQ65ydGk0vTmLsclmR8HmjyKLSoLpJ1Pa0FJf+Xzs6bmA== -----END CERTIFICATE-----Generated at Mon Jan 12 04:11:19 2026 by rpki-client