This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31343a3a2f36342d3634203d3e203532343538.roa File: 323830333a3438303a31343a3a2f36342d3634203d3e203532343538.roa (raw, json) Hash identifier: WRc2Ma2v9I682csr/zop9m6Z8k+8I4OGkcHfnFhrN7k= Subject key identifier: 95:D1:FC:17:23:CD:8D:37:3A:8E:3C:76:12:CF:67:67:70:30:C1:F7 Certificate issuer: /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028 Certificate serial: 430C3553F45C5769728914BB2BEAF61E838C3C61 Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31343a3a2f36342d3634203d3e203532343538.roa Signing time: Tue 06 Jan 2026 19:19:48 +0000 ROA not before: Tue 06 Jan 2026 19:14:48 +0000 ROA not after: Tue 05 Jan 2027 19:19:48 +0000 asID: 52458 IP address blocks: 2803:480:14::/64 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Jan 2026 01:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0c:35:53:f4:5c:57:69:72:89:14:bb:2b:ea:f6:1e:83:8c:3c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028 Validity Not Before: Jan 6 19:14:48 2026 GMT Not After : Jan 5 19:19:48 2027 GMT Subject: CN=95D1FC1723CD8D373A8E3C7612CF67677030C1F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:f7:f3:70:79:a9:3e:bb:e6:3e:7b:2f:b0: 76:a4:ce:17:f9:6a:e0:78:35:53:5c:83:d2:a5:7d: f6:a8:e5:a0:fa:87:c2:bf:02:67:17:cb:e3:bd:c9: 35:d0:fb:10:6c:f6:1c:57:31:b4:67:32:43:a5:ba: 4c:38:09:d0:19:c0:71:cb:0b:fa:3f:69:ad:d2:9c: d5:6e:82:f5:b2:81:cc:ae:40:a1:55:85:ad:b7:74: c6:b3:2d:27:d8:a0:8e:45:c0:c4:e7:72:17:f1:54: 50:34:3e:0a:61:b5:80:72:fc:3b:e8:d9:5f:6d:9c: 68:f6:b6:e1:65:95:0e:84:54:c0:19:76:b3:25:ad: d7:6c:bc:ac:40:a9:41:23:e8:16:bd:24:13:62:5b: 4e:c3:4d:81:91:ea:89:05:0a:83:c7:6d:9a:17:9a: 4d:69:a9:55:7e:8f:24:3d:7b:6e:7d:70:a6:52:5c: 3b:b5:5d:83:83:de:d9:d7:21:6c:56:f8:63:e9:59: 2a:45:cd:4d:a8:05:e6:14:9e:74:07:55:aa:a9:f3: 9a:e7:b7:24:a6:a1:a1:77:8c:f5:44:cf:d5:49:73: 46:cf:3d:92:e2:b7:0b:dd:ad:1d:1e:b9:8d:b1:d0: 71:2f:74:60:c1:1d:41:8c:13:44:39:00:e0:8d:1f: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D1:FC:17:23:CD:8D:37:3A:8E:3C:76:12:CF:67:67:70:30:C1:F7 X509v3 Authority Key Identifier: keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31343a3a2f36342d3634203d3e203532343538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:480:14::/64 Signature Algorithm: sha256WithRSAEncryption 97:ff:ad:8e:4c:e5:c4:09:99:9e:26:85:11:93:05:f4:ea:9e: 73:b5:72:ab:13:79:62:c6:53:41:b4:6c:86:d3:ab:e3:05:da: d4:20:99:fc:86:78:86:01:10:aa:1d:5b:fc:b8:c7:78:5b:c7: 26:54:0f:64:b0:ba:d3:9d:30:1a:c0:ce:0a:2e:09:bf:a8:81: 2b:3a:39:74:41:b6:d5:76:49:53:23:40:df:c0:2a:8e:3c:f8: 5a:2e:2b:3f:0f:51:63:49:dd:49:34:87:9e:ce:39:60:23:28: 22:64:38:5c:bc:14:51:f8:25:34:16:8a:c2:12:a5:e0:5d:4e: 30:0f:f7:a6:a6:58:9f:ec:68:bc:7a:e0:17:90:95:5d:a8:94: 70:b5:bd:03:08:4a:91:2a:4f:39:db:a0:5a:78:71:92:98:da: 0d:c8:1c:3d:fc:d6:32:5b:3b:b8:06:65:52:c9:54:51:e7:2c: 08:22:31:e4:43:c6:f6:00:56:30:8e:b5:25:79:1a:30:ba:c5: ff:77:b1:70:54:5c:69:f6:9f:37:f3:f2:aa:2f:04:4f:2f:45: a6:0c:1d:58:d2:a9:1f:d6:0c:b0:8f:9a:16:2e:71:40:30:5a: c0:de:d1:33:8d:a9:cf:3b:53:d8:17:7d:85:fe:5a:6b:a0:ed: 1f:e9:0d:12 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQww1U/RcV2lyiRS7K+r2HoOMPGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFGNjg1MThCMTE2MkE0RkJGMjlCNTdDMUE4MEY4N0ZG RjQ3NzAyODAeFw0yNjAxMDYxOTE0NDhaFw0yNzAxMDUxOTE5NDhaMDMxMTAvBgNV BAMTKDk1RDFGQzE3MjNDRDhEMzczQThFM0M3NjEyQ0Y2NzY3NzAzMEMxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIvfzcHmpPrvmPnsvsHakzhf5 auB4NVNcg9Klffao5aD6h8K/AmcXy+O9yTXQ+xBs9hxXMbRnMkOlukw4CdAZwHHL C/o/aa3SnNVugvWygcyuQKFVha23dMazLSfYoI5FwMTnchfxVFA0PgphtYBy/Dvo 2V9tnGj2tuFllQ6EVMAZdrMlrddsvKxAqUEj6Ba9JBNiW07DTYGR6okFCoPHbZoX mk1pqVV+jyQ9e259cKZSXDu1XYOD3tnXIWxW+GPpWSpFzU2oBeYUnnQHVaqp85rn tySmoaF3jPVEz9VJc0bPPZLitwvdrR0euY2x0HEvdGDBHUGME0Q5AOCNHwtTAgMB AAGjggLPMIICyzAdBgNVHQ4EFgQUldH8FyPNjTc6jjx2Es9nZ3AwwfcwHwYDVR0j BBgwFoAUEfaFGLEWKk+/KbV8GoD4f/9HcCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDM1QzlBNzk4MDUyM0FCN0VCMDQ3RTE2NUMyQUJFQjM4 OUEwNzk0MjNBRkU1MjgwOEQzMTlEQUI5MjFDNTAzLzAvMTFGNjg1MThCMTE2MkE0 RkJGMjlCNTdDMUE4MEY4N0ZGRjQ3NzAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUY2ODUxOEIxMTYyQTRGQkYy OUI1N0MxQTgwRjg3RkZGNDc3MDI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQzNUM5QTc5ODA1MjNBQjdFQjA0N0UxNjVDMkFCRUIzODlBMDc5NDIz QUZFNTI4MDhEMzE5REFCOTIxQzUwMy8wLzMyMzgzMDMzM2EzNDM4MzAzYTMxMzQz YTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzNTMyMzQzNTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKAME gAAUAAAwDQYJKoZIhvcNAQELBQADggEBAJf/rY5M5cQJmZ4mhRGTBfTqnnO1cqsT eWLGU0G0bIbTq+MF2tQgmfyGeIYBEKodW/y4x3hbxyZUD2SwutOdMBrAzgouCb+o gSs6OXRBttV2SVMjQN/AKo48+FouKz8PUWNJ3Uk0h57OOWAjKCJkOFy8FFH4JTQW isISpeBdTjAP96amWJ/saLx64BeQlV2olHC1vQMISpEqTznboFp4cZKY2g3IHD38 1jJbO7gGZVLJVFHnLAgiMeRDxvYAVjCOtSV5GjC6xf93sXBUXGn2nzfz8qovBE8v RaYMHVjSqR/WDLCPmhYucUAwWsDe0TONqc87U9gXfYX+Wmug7R/pDRI= -----END CERTIFICATE-----Generated at Sat Jan 10 18:10:35 2026 by rpki-client