This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa File: 323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa (raw, json) Hash identifier: Q3RuQyDE/qXdLjD+MeNQH83iebkcngoJy6wQdEOc+HY= Subject key identifier: 43:16:51:BC:F8:37:8F:A3:72:9F:E6:D8:85:E6:0F:96:50:83:57:E1 Certificate issuer: /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028 Certificate serial: 75341E25B952FACFA28FE5A83D5892F8750507B9 Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa Signing time: Tue 06 Jan 2026 19:19:52 +0000 ROA not before: Tue 06 Jan 2026 19:14:52 +0000 ROA not after: Tue 05 Jan 2027 19:19:52 +0000 asID: 52458 IP address blocks: 2803:480:22::/47 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Jan 2026 01:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:34:1e:25:b9:52:fa:cf:a2:8f:e5:a8:3d:58:92:f8:75:05:07:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028 Validity Not Before: Jan 6 19:14:52 2026 GMT Not After : Jan 5 19:19:52 2027 GMT Subject: CN=431651BCF8378FA3729FE6D885E60F96508357E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:c6:32:23:1b:c5:17:5c:26:6c:d8:b3:28: f3:4c:2f:cc:95:81:d2:db:e0:bc:37:71:12:93:b5: a7:24:6f:21:03:5d:fa:63:ff:1f:cb:b9:0c:6a:bb: e0:76:89:3c:ab:11:83:2c:07:9a:50:7d:ea:80:db: 48:e0:df:fb:8d:dc:38:14:14:2d:9d:11:a5:3c:76: 55:dc:f8:bc:18:97:d3:aa:20:59:fa:2b:31:85:45: 1b:a9:03:10:b0:44:a6:40:86:cf:9f:7f:98:ff:54: 39:1e:58:9a:d5:08:bc:6c:7b:db:f5:18:ab:e0:e5: 43:87:33:bc:ef:a5:dd:db:50:de:9c:64:86:13:d8: e1:4b:5f:77:34:f1:6b:ca:9b:b8:89:6d:9f:54:2e: 62:9c:ae:c4:b7:f2:5f:99:d1:3a:02:aa:28:c7:54: ed:11:c8:da:3e:2e:55:7c:6b:75:9d:8f:0d:f1:4e: 4e:bb:76:2f:08:7d:17:05:43:38:1f:94:4c:cb:ba: f8:5d:92:89:41:94:ea:4b:db:32:88:53:5a:31:ea: a1:dc:c8:47:a1:4d:14:68:0c:1e:4f:d3:55:36:3c: 38:aa:40:5d:3e:3c:de:30:5f:4b:bd:f3:d9:2b:0c: 8f:11:6a:00:e7:51:f1:b3:8a:e6:d3:e0:a0:ad:f9: af:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:51:BC:F8:37:8F:A3:72:9F:E6:D8:85:E6:0F:96:50:83:57:E1 X509v3 Authority Key Identifier: keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:480:22::/47 Signature Algorithm: sha256WithRSAEncryption 9d:9c:13:4a:23:ed:99:7d:1d:d9:75:94:4c:b7:ee:70:81:21: 3e:4f:a2:f3:21:b7:ed:c9:aa:88:bd:15:08:0d:22:d4:03:44: b6:b3:4a:a2:3d:f5:32:dc:bc:e3:95:1e:e1:63:fe:ac:48:80: a3:57:55:3d:c0:24:34:0a:7e:cc:b6:20:63:3a:17:7c:ab:01: 87:ad:38:03:7b:c4:e4:c8:05:07:a0:9f:82:bb:0f:18:9d:94: 16:05:15:63:63:aa:3d:46:56:11:80:58:20:82:25:3e:be:cd: 8f:bc:37:21:c3:3a:b7:c5:c5:50:cd:82:42:bd:81:97:06:19: 6b:68:b6:1b:af:74:ec:40:6d:77:62:e6:34:2c:5e:90:d5:25: 87:19:c4:a4:a1:8d:6c:f3:31:8a:43:47:38:54:3f:23:0e:d3: 3d:94:6f:64:c6:ac:07:e4:68:5d:8a:df:08:d4:07:0c:41:8d: d5:4d:d1:0d:b3:48:9e:dc:3a:3c:3e:a5:2c:28:a1:a5:06:75: 57:7f:0a:58:48:07:16:28:75:b2:62:28:14:ff:2c:87:65:3d: 51:d4:6a:54:5a:0d:d2:e5:ba:c2:35:5e:6b:94:2d:55:3a:e1: 83:9b:4d:2f:ce:ee:85:f9:23:94:89:73:2f:f0:f1:e2:ef:2a: d0:36:e3:67 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUdTQeJblS+s+ij+WoPViS+HUFB7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFGNjg1MThCMTE2MkE0RkJGMjlCNTdDMUE4MEY4N0ZG RjQ3NzAyODAeFw0yNjAxMDYxOTE0NTJaFw0yNzAxMDUxOTE5NTJaMDMxMTAvBgNV BAMTKDQzMTY1MUJDRjgzNzhGQTM3MjlGRTZEODg1RTYwRjk2NTA4MzU3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuosYyIxvFF1wmbNizKPNML8yV gdLb4Lw3cRKTtackbyEDXfpj/x/LuQxqu+B2iTyrEYMsB5pQfeqA20jg3/uN3DgU FC2dEaU8dlXc+LwYl9OqIFn6KzGFRRupAxCwRKZAhs+ff5j/VDkeWJrVCLxse9v1 GKvg5UOHM7zvpd3bUN6cZIYT2OFLX3c08WvKm7iJbZ9ULmKcrsS38l+Z0ToCqijH VO0RyNo+LlV8a3Wdjw3xTk67di8IfRcFQzgflEzLuvhdkolBlOpL2zKIU1ox6qHc yEehTRRoDB5P01U2PDiqQF0+PN4wX0u989krDI8RagDnUfGziubT4KCt+a+FAgMB AAGjggLNMIICyTAdBgNVHQ4EFgQUQxZRvPg3j6Nyn+bYheYPllCDV+EwHwYDVR0j BBgwFoAUEfaFGLEWKk+/KbV8GoD4f/9HcCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDM1QzlBNzk4MDUyM0FCN0VCMDQ3RTE2NUMyQUJFQjM4 OUEwNzk0MjNBRkU1MjgwOEQzMTlEQUI5MjFDNTAzLzAvMTFGNjg1MThCMTE2MkE0 RkJGMjlCNTdDMUE4MEY4N0ZGRjQ3NzAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMUY2ODUxOEIxMTYyQTRGQkYy OUI1N0MxQTgwRjg3RkZGNDc3MDI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQzNUM5QTc5ODA1MjNBQjdFQjA0N0UxNjVDMkFCRUIzODlBMDc5NDIz QUZFNTI4MDhEMzE5REFCOTIxQzUwMy8wLzMyMzgzMDMzM2EzNDM4MzAzYTMyMzIz YTNhMmYzNDM3MmQzNjM0MjAzZDNlMjAzNTMyMzQzNTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKAME gAAiMA0GCSqGSIb3DQEBCwUAA4IBAQCdnBNKI+2ZfR3ZdZRMt+5wgSE+T6LzIbft yaqIvRUIDSLUA0S2s0qiPfUy3LzjlR7hY/6sSICjV1U9wCQ0Cn7MtiBjOhd8qwGH rTgDe8TkyAUHoJ+Cuw8YnZQWBRVjY6o9RlYRgFgggiU+vs2PvDchwzq3xcVQzYJC vYGXBhlraLYbr3TsQG13YuY0LF6Q1SWHGcSkoY1s8zGKQ0c4VD8jDtM9lG9kxqwH 5Ghdit8I1AcMQY3VTdENs0ie3Do8PqUsKKGlBnVXfwpYSAcWKHWyYigU/yyHZT1R 1GpUWg3S5brCNV5rlC1VOuGDm00vzu6F+SOUiXMv8PHi7yrQNuNn -----END CERTIFICATE-----Generated at Sat Jan 10 18:11:10 2026 by rpki-client