This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31363a3a2f34372d3634203d3e203532343538.roa File: 323830333a3438303a31363a3a2f34372d3634203d3e203532343538.roa (raw, json) Hash identifier: gxv/5qWQW9Aj9W0AFbtbafUz5l1BLmwzTIDkLcobI34= Subject key identifier: 68:C1:20:BB:5C:20:B5:14:4C:63:A6:09:EE:E4:3B:D9:68:CF:54:C2 Certificate issuer: /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028 Certificate serial: 2702ECF45A83D10CDA2C8F57B2B19FACCFD58611 Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31363a3a2f34372d3634203d3e203532343538.roa Signing time: Tue 06 Jan 2026 19:19:49 +0000 ROA not before: Tue 06 Jan 2026 19:14:49 +0000 ROA not after: Tue 05 Jan 2027 19:19:49 +0000 asID: 52458 IP address blocks: 2803:480:16::/47 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Jan 2026 01:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:02:ec:f4:5a:83:d1:0c:da:2c:8f:57:b2:b1:9f:ac:cf:d5:86:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028 Validity Not Before: Jan 6 19:14:49 2026 GMT Not After : Jan 5 19:19:49 2027 GMT Subject: CN=68C120BB5C20B5144C63A609EEE43BD968CF54C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:fb:6f:7a:8e:16:9d:26:79:62:90:3a:0e: e0:a5:36:54:b0:8e:37:ce:45:5e:56:80:11:42:e2: 1f:78:44:6b:fb:1a:f3:20:4d:3a:f3:df:0a:e4:76: de:21:37:ea:f5:e8:99:6d:2d:22:54:a8:4c:fc:be: ac:14:4e:46:05:9f:bf:06:b5:c1:d6:a8:6d:4d:31: 4a:cf:88:4e:df:27:3a:07:1c:16:8e:7a:4b:c7:af: 65:c8:83:35:3c:54:f2:02:ec:67:17:0e:71:12:45: 6b:f4:74:04:80:46:57:60:14:f8:ea:6e:95:b8:62: 9d:d7:20:de:91:f1:70:10:f5:f8:f8:9c:2f:78:ca: 6a:f7:0b:3a:8d:df:22:93:75:08:85:33:ed:30:de: 97:da:52:6e:e2:31:37:72:01:79:43:8c:d2:3a:42: c1:0b:ac:87:86:99:6b:95:7c:eb:a4:1c:11:dd:67: 9b:b4:0d:28:1f:00:56:61:fc:26:bb:bb:e0:5c:77: b5:7d:3a:3d:9a:e2:79:3e:4e:75:3c:55:6a:07:46: 48:36:8a:37:3c:ba:0a:b7:67:ab:bf:8a:f3:b1:d6: 42:87:45:50:0d:cb:16:c8:77:b4:4d:24:06:7b:35: db:9d:1a:40:ff:bf:6b:2a:b9:93:10:0f:d0:ec:a7: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C1:20:BB:5C:20:B5:14:4C:63:A6:09:EE:E4:3B:D9:68:CF:54:C2 X509v3 Authority Key Identifier: keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31363a3a2f34372d3634203d3e203532343538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:480:16::/47 Signature Algorithm: sha256WithRSAEncryption 60:02:8b:a0:d5:6d:cc:aa:b9:d1:f0:3d:4e:ed:20:34:b8:d8: 31:89:f0:48:65:4a:b4:53:d4:fe:72:41:8d:65:af:58:c3:82: de:c3:15:10:76:05:dc:cd:b0:3d:bf:94:48:9c:b2:e7:44:54: 45:aa:a8:43:47:9f:42:2d:f1:ee:74:b4:81:0e:83:e6:ab:8e: ea:e3:c6:2a:fe:dc:f2:09:b1:0c:88:17:19:4e:29:08:3b:ee: 14:7a:d4:d5:e2:06:73:5d:e9:41:6d:b4:a0:0c:fa:f6:b7:78: f1:25:4c:c0:26:58:ce:6e:4d:5e:03:3b:63:4e:20:de:8e:e4: 42:05:47:b8:c1:39:a9:b4:9a:11:19:e5:90:22:94:61:51:38: 98:37:51:de:50:ad:f7:12:56:97:e9:69:82:41:9e:1a:05:e2: 49:1e:eb:d0:80:a7:3d:b2:6d:31:65:14:82:0a:1f:43:66:8b: 27:1b:ba:75:d2:e0:ee:f9:25:17:b0:24:0c:ab:4e:27:0a:e5: 7f:f8:42:25:e6:71:67:d1:59:f0:99:bd:ec:68:41:05:aa:bf: 43:52:d9:99:2d:02:29:ff:42:16:44:18:ce:4d:5d:4b:5c:0d: bc:b3:e0:7a:a7:bb:c7:1d:ba:6c:a2:00:2b:4e:bd:2e:b0:05: 57:78:dc:b5 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUJwLs9FqD0QzaLI9XsrGfrM/VhhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFGNjg1MThCMTE2MkE0RkJGMjlCNTdDMUE4MEY4N0ZG RjQ3NzAyODAeFw0yNjAxMDYxOTE0NDlaFw0yNzAxMDUxOTE5NDlaMDMxMTAvBgNV BAMTKDY4QzEyMEJCNUMyMEI1MTQ0QzYzQTYwOUVFRTQzQkQ5NjhDRjU0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfvtveo4WnSZ5YpA6DuClNlSw jjfORV5WgBFC4h94RGv7GvMgTTrz3wrkdt4hN+r16JltLSJUqEz8vqwUTkYFn78G tcHWqG1NMUrPiE7fJzoHHBaOekvHr2XIgzU8VPIC7GcXDnESRWv0dASARldgFPjq bpW4Yp3XIN6R8XAQ9fj4nC94ymr3CzqN3yKTdQiFM+0w3pfaUm7iMTdyAXlDjNI6 QsELrIeGmWuVfOukHBHdZ5u0DSgfAFZh/Ca7u+Bcd7V9Oj2a4nk+TnU8VWoHRkg2 ijc8ugq3Z6u/ivOx1kKHRVANyxbId7RNJAZ7NdudGkD/v2squZMQD9Dsp08BAgMB AAGjggLNMIICyTAdBgNVHQ4EFgQUaMEgu1wgtRRMY6YJ7uQ72WjPVMIwHwYDVR0j BBgwFoAUEfaFGLEWKk+/KbV8GoD4f/9HcCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDM1QzlBNzk4MDUyM0FCN0VCMDQ3RTE2NUMyQUJFQjM4 OUEwNzk0MjNBRkU1MjgwOEQzMTlEQUI5MjFDNTAzLzAvMTFGNjg1MThCMTE2MkE0 RkJGMjlCNTdDMUE4MEY4N0ZGRjQ3NzAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUY2ODUxOEIxMTYyQTRGQkYy OUI1N0MxQTgwRjg3RkZGNDc3MDI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQzNUM5QTc5ODA1MjNBQjdFQjA0N0UxNjVDMkFCRUIzODlBMDc5NDIz QUZFNTI4MDhEMzE5REFCOTIxQzUwMy8wLzMyMzgzMDMzM2EzNDM4MzAzYTMxMzYz YTNhMmYzNDM3MmQzNjM0MjAzZDNlMjAzNTMyMzQzNTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKAME gAAWMA0GCSqGSIb3DQEBCwUAA4IBAQBgAoug1W3MqrnR8D1O7SA0uNgxifBIZUq0 U9T+ckGNZa9Yw4LewxUQdgXczbA9v5RInLLnRFRFqqhDR59CLfHudLSBDoPmq47q 48Yq/tzyCbEMiBcZTikIO+4UetTV4gZzXelBbbSgDPr2t3jxJUzAJljObk1eAztj TiDejuRCBUe4wTmptJoRGeWQIpRhUTiYN1HeUK33ElaX6WmCQZ4aBeJJHuvQgKc9 sm0xZRSCCh9DZosnG7p10uDu+SUXsCQMq04nCuV/+EIl5nFn0Vnwmb3saEEFqr9D UtmZLQIp/0IWRBjOTV1LXA28s+B6p7vHHbpsogArTr0usAVXeNy1 -----END CERTIFICATE-----Generated at Sat Jan 10 18:10:37 2026 by rpki-client