This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32303a3a2f36342d3634203d3e203532343538.roa File: 323830333a3438303a32303a3a2f36342d3634203d3e203532343538.roa (raw, json) Hash identifier: g1/mDKmqLhNkffkf13PJpGf30VKuAg4bP9Y9yKHXKjM= Subject key identifier: AF:D7:BC:49:E9:C3:15:B5:36:B3:76:2E:5F:4B:D8:04:4D:79:78:F4 Certificate issuer: /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028 Certificate serial: 422228F721D89FEEA864A7EB1819B4D88816733E Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32303a3a2f36342d3634203d3e203532343538.roa Signing time: Tue 06 Jan 2026 19:19:48 +0000 ROA not before: Tue 06 Jan 2026 19:14:48 +0000 ROA not after: Tue 05 Jan 2027 19:19:48 +0000 asID: 52458 IP address blocks: 2803:480:20::/64 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Jan 2026 01:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:22:28:f7:21:d8:9f:ee:a8:64:a7:eb:18:19:b4:d8:88:16:73:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028 Validity Not Before: Jan 6 19:14:48 2026 GMT Not After : Jan 5 19:19:48 2027 GMT Subject: CN=AFD7BC49E9C315B536B3762E5F4BD8044D7978F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:70:d5:27:dd:81:80:4d:5a:b1:43:31:d4:5c: b5:63:63:d0:a4:d1:3e:9e:47:56:a4:03:7a:88:27: cd:7c:c2:9c:6a:72:66:6d:ab:99:16:a2:bd:bd:b3: 74:49:f2:af:4a:11:4d:87:54:88:59:60:40:07:ad: bd:ca:40:9e:84:61:64:84:2f:ef:81:34:a3:f9:58: 02:f5:a4:94:91:e8:c7:73:82:aa:ee:02:63:21:83: bc:48:fb:f5:99:a2:c3:4f:c2:47:12:ad:92:d7:e6: ef:f7:fd:9f:ce:1b:47:45:7b:cf:65:b0:b4:53:9a: 7a:df:ad:ca:a9:88:9c:a2:1d:5a:9b:cc:96:49:1a: b1:f2:f1:e6:d9:75:91:41:e6:25:e9:e9:f3:b9:c4: c1:6f:f9:86:40:ae:24:96:2e:21:2a:08:99:7d:f2: f7:18:58:3b:07:0a:14:b9:59:42:ee:40:b3:74:7b: ec:12:a7:a9:94:3d:66:90:17:41:f6:58:99:3c:87: 59:69:56:5e:1d:07:19:17:c7:3b:7b:62:b3:6e:e4: c0:b3:39:41:7a:86:0c:6b:c1:52:01:c7:c6:cd:ff: b2:f4:d7:b8:be:8a:82:f4:92:be:39:80:b4:09:75: 5b:fd:0a:1b:ce:d2:21:e1:81:f0:b7:9c:c8:70:aa: 83:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D7:BC:49:E9:C3:15:B5:36:B3:76:2E:5F:4B:D8:04:4D:79:78:F4 X509v3 Authority Key Identifier: keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32303a3a2f36342d3634203d3e203532343538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:480:20::/64 Signature Algorithm: sha256WithRSAEncryption 5a:04:0a:ba:1c:1b:c5:a3:6f:33:02:27:21:47:66:d5:ee:7e: 15:af:f5:31:9b:9e:ba:5c:b3:fa:ff:d1:40:7d:66:e0:76:69: c8:96:1a:17:aa:28:0f:68:d5:81:c1:9e:b6:e5:fa:da:29:17: 58:e8:56:5a:8d:c9:c5:a7:0f:27:de:76:74:49:61:81:f8:97: 4e:7f:c2:1f:28:4d:ff:e5:bf:f5:e1:7b:2f:9d:ae:1b:49:7b: 0e:47:0c:79:82:d5:ac:d0:9e:7e:4f:0e:a6:a2:6b:32:72:8a: 15:08:5e:6c:00:68:36:e7:71:e7:08:ec:43:16:b0:b7:60:e8: fa:59:2d:24:1a:2d:49:82:3e:5d:d9:aa:d8:9c:73:3a:45:f9: fd:57:4c:72:88:80:36:b6:b8:40:18:1a:89:60:65:78:24:0d: 70:e6:24:40:15:bd:65:0f:4d:f9:bb:f8:34:2a:f6:a7:19:d1: 9b:eb:89:93:31:6b:74:3d:9f:58:f1:e6:af:ce:49:ce:b9:a1: 58:40:60:d8:0e:9f:80:bd:c3:50:23:30:04:c1:dd:e0:95:69: 2d:d0:da:c3:43:2d:a6:e9:c3:d2:8a:8f:a3:fb:aa:cc:bf:48: aa:7e:b2:7f:65:b2:61:8d:a8:fb:78:5e:51:cd:b3:d9:cd:c1: 69:be:c6:e2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQiIo9yHYn+6oZKfrGBm02IgWcz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFGNjg1MThCMTE2MkE0RkJGMjlCNTdDMUE4MEY4N0ZG RjQ3NzAyODAeFw0yNjAxMDYxOTE0NDhaFw0yNzAxMDUxOTE5NDhaMDMxMTAvBgNV BAMTKEFGRDdCQzQ5RTlDMzE1QjUzNkIzNzYyRTVGNEJEODA0NEQ3OTc4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcNUn3YGATVqxQzHUXLVjY9Ck 0T6eR1akA3qIJ818wpxqcmZtq5kWor29s3RJ8q9KEU2HVIhZYEAHrb3KQJ6EYWSE L++BNKP5WAL1pJSR6MdzgqruAmMhg7xI+/WZosNPwkcSrZLX5u/3/Z/OG0dFe89l sLRTmnrfrcqpiJyiHVqbzJZJGrHy8ebZdZFB5iXp6fO5xMFv+YZAriSWLiEqCJl9 8vcYWDsHChS5WULuQLN0e+wSp6mUPWaQF0H2WJk8h1lpVl4dBxkXxzt7YrNu5MCz OUF6hgxrwVIBx8bN/7L017i+ioL0kr45gLQJdVv9ChvO0iHhgfC3nMhwqoPHAgMB AAGjggLPMIICyzAdBgNVHQ4EFgQUr9e8SenDFbU2s3YuX0vYBE15ePQwHwYDVR0j BBgwFoAUEfaFGLEWKk+/KbV8GoD4f/9HcCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDM1QzlBNzk4MDUyM0FCN0VCMDQ3RTE2NUMyQUJFQjM4 OUEwNzk0MjNBRkU1MjgwOEQzMTlEQUI5MjFDNTAzLzAvMTFGNjg1MThCMTE2MkE0 RkJGMjlCNTdDMUE4MEY4N0ZGRjQ3NzAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUY2ODUxOEIxMTYyQTRGQkYy OUI1N0MxQTgwRjg3RkZGNDc3MDI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQzNUM5QTc5ODA1MjNBQjdFQjA0N0UxNjVDMkFCRUIzODlBMDc5NDIz QUZFNTI4MDhEMzE5REFCOTIxQzUwMy8wLzMyMzgzMDMzM2EzNDM4MzAzYTMyMzAz YTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzNTMyMzQzNTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKAME gAAgAAAwDQYJKoZIhvcNAQELBQADggEBAFoECrocG8WjbzMCJyFHZtXufhWv9TGb nrpcs/r/0UB9ZuB2aciWGheqKA9o1YHBnrbl+topF1joVlqNycWnDyfednRJYYH4 l05/wh8oTf/lv/Xhey+drhtJew5HDHmC1azQnn5PDqaiazJyihUIXmwAaDbncecI 7EMWsLdg6PpZLSQaLUmCPl3ZqticczpF+f1XTHKIgDa2uEAYGolgZXgkDXDmJEAV vWUPTfm7+DQq9qcZ0ZvriZMxa3Q9n1jx5q/OSc65oVhAYNgOn4C9w1AjMATB3eCV aS3Q2sNDLabpw9KKj6P7qsy/SKp+sn9lsmGNqPt4XlHNs9nNwWm+xuI= -----END CERTIFICATE-----Generated at Sat Jan 10 18:11:21 2026 by rpki-client