This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/323830313a31653a633830303a3a2f36342d3634203d3e203139343239.roa File: 323830313a31653a633830303a3a2f36342d3634203d3e203139343239.roa (raw, json) Hash identifier: W6sXhQ06q6G7vzNRkjYwICsFfDrmQHEZORL7sgVcnwg= Subject key identifier: A5:65:CD:83:98:9C:0F:F1:99:8A:05:EC:EF:D3:78:79:4E:91:1F:66 Certificate issuer: /CN=D17A3829AD924E36C68D46B4C17B189D22C8B741 Certificate serial: 64CF8074D4E2CB0C67EC30B26FFC7678088E763C Authority key identifier: D1:7A:38:29:AD:92:4E:36:C6:8D:46:B4:C1:7B:18:9D:22:C8:B7:41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/323830313a31653a633830303a3a2f36342d3634203d3e203139343239.roa Signing time: Tue 06 Jan 2026 20:52:41 +0000 ROA not before: Tue 06 Jan 2026 20:47:41 +0000 ROA not after: Tue 05 Jan 2027 20:52:41 +0000 asID: 19429 IP address blocks: 2801:1e:c800::/64 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.crl rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 06:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:cf:80:74:d4:e2:cb:0c:67:ec:30:b2:6f:fc:76:78:08:8e:76:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D17A3829AD924E36C68D46B4C17B189D22C8B741 Validity Not Before: Jan 6 20:47:41 2026 GMT Not After : Jan 5 20:52:41 2027 GMT Subject: CN=A565CD83989C0FF1998A05ECEFD378794E911F66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ed:f3:ef:09:ff:01:db:be:5a:1a:45:6a:41: a9:f6:6d:cd:40:f5:d9:fa:fb:1a:a0:d4:c4:92:1e: 83:78:90:fa:81:a0:33:48:6e:25:8e:04:12:b0:c5: bc:28:b3:af:f0:b4:84:21:80:61:88:94:0a:1d:d1: fc:0c:2c:94:54:da:7b:d3:b6:db:da:ea:60:1e:fc: d6:40:0b:85:5a:59:1b:51:2a:ea:bd:47:c4:b0:f4: 6e:70:e0:3c:bf:38:38:0f:37:fc:ad:36:07:1a:e5: aa:68:d6:50:78:7d:3c:15:2d:d3:d8:29:c0:55:56: 47:c3:d7:26:3d:d2:50:c7:55:de:61:c5:3b:44:2c: f5:19:95:03:52:d5:a3:e2:47:26:4b:f7:bb:f8:03: e5:a4:d2:d9:82:46:aa:86:8f:02:36:95:10:b5:4b: 6c:28:61:d0:b6:8e:06:a7:e4:77:7d:48:67:40:56: a1:1c:ae:14:ad:53:45:a2:27:20:ae:cc:f3:3a:f5: 2c:de:88:ea:1d:ba:a1:3c:59:17:e9:a2:99:aa:17: cb:14:45:cb:50:31:9e:d1:de:69:eb:f5:f2:09:cd: 79:6a:0b:b9:53:85:96:fb:7d:d3:56:cf:b3:c9:63: af:30:0b:b8:e1:19:82:69:ff:2d:9b:ed:b1:d5:48: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:65:CD:83:98:9C:0F:F1:99:8A:05:EC:EF:D3:78:79:4E:91:1F:66 X509v3 Authority Key Identifier: keyid:D1:7A:38:29:AD:92:4E:36:C6:8D:46:B4:C1:7B:18:9D:22:C8:B7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D17A3829AD924E36C68D46B4C17B189D22C8B741.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4D4DFD1832BAAA0C1FDF3BB278AF5760E8DC8AFF4A5CFA5A0764D423B55981/0/323830313a31653a633830303a3a2f36342d3634203d3e203139343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1e:c800::/64 Signature Algorithm: sha256WithRSAEncryption 7d:87:13:e8:ca:3b:24:30:9f:73:9e:59:16:75:6b:cd:c2:ed: 3a:09:de:8f:b6:82:f9:23:98:8b:40:6b:2d:48:ab:c6:32:90: 11:b4:e5:1f:b1:d5:c6:4e:b6:f3:0c:28:40:f8:9f:af:c2:7b: 2e:0b:8e:f7:cb:46:c5:2d:5c:68:3f:80:30:a2:d5:2d:e5:bd: b2:40:d2:1a:6f:4f:d3:f7:71:fb:3b:53:b8:f6:4a:54:56:0b: 1c:6d:c3:ed:89:90:81:3e:00:03:ff:97:c1:e1:e7:90:79:33: d4:35:4e:50:2f:03:47:41:1a:88:2a:37:cd:af:d0:74:fb:59: bd:82:0b:8c:d4:8c:7c:79:07:e3:55:d8:d3:1d:e1:ce:14:49: c7:da:40:b4:24:da:dd:2e:c7:4f:48:4c:48:1d:05:3a:d4:b0: 79:59:5a:c4:f4:18:37:76:51:7d:f3:54:fa:5a:3a:60:c0:5f: f4:ad:98:23:2e:98:cf:e2:0b:fb:c3:a3:66:33:74:5a:d1:3c: 6a:b7:ec:11:9d:a1:78:9f:01:14:39:e0:73:19:d4:a8:be:c2: 65:6d:5f:11:a7:3a:15:d1:6b:92:ee:2a:ca:5c:0c:8c:e6:c8: f0:08:e1:4d:5f:1b:51:e6:1f:8e:f9:3b:35:72:c1:cd:ad:c7: dc:35:b8:e4 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIUZM+AdNTiywxn7DCyb/x2eAiOdjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3QTM4MjlBRDkyNEUzNkM2OEQ0NkI0QzE3QjE4OUQy MkM4Qjc0MTAeFw0yNjAxMDYyMDQ3NDFaFw0yNzAxMDUyMDUyNDFaMDMxMTAvBgNV BAMTKEE1NjVDRDgzOTg5QzBGRjE5OThBMDVFQ0VGRDM3ODc5NEU5MTFGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7fPvCf8B275aGkVqQan2bc1A 9dn6+xqg1MSSHoN4kPqBoDNIbiWOBBKwxbwos6/wtIQhgGGIlAod0fwMLJRU2nvT ttva6mAe/NZAC4VaWRtRKuq9R8Sw9G5w4Dy/ODgPN/ytNgca5apo1lB4fTwVLdPY KcBVVkfD1yY90lDHVd5hxTtELPUZlQNS1aPiRyZL97v4A+Wk0tmCRqqGjwI2lRC1 S2woYdC2jgan5Hd9SGdAVqEcrhStU0WiJyCuzPM69SzeiOoduqE8WRfpopmqF8sU RctQMZ7R3mnr9fIJzXlqC7lThZb7fdNWz7PJY68wC7jhGYJp/y2b7bHVSNtBAgMB AAGjggLRMIICzTAdBgNVHQ4EFgQUpWXNg5icD/GZigXs79N4eU6RH2YwHwYDVR0j BBgwFoAU0Xo4Ka2STjbGjUa0wXsYnSLIt0EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDRENERGRDE4MzJCQUFBMEMxRkRGM0JCMjc4QUY1NzYw RThEQzhBRkY0QTVDRkE1QTA3NjRENDIzQjU1OTgxLzAvRDE3QTM4MjlBRDkyNEUz NkM2OEQ0NkI0QzE3QjE4OUQyMkM4Qjc0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMTdBMzgyOUFEOTI0RTM2QzY4 RDQ2QjRDMTdCMTg5RDIyQzhCNzQxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQ0RDRERkQxODMyQkFBQTBDMUZERjNCQjI3OEFGNTc2MEU4REM4QUZG NEE1Q0ZBNUEwNzY0RDQyM0I1NTk4MS8wLzMyMzgzMDMxM2EzMTY1M2E2MzM4MzAz MDNhM2EyZjM2MzQyZDM2MzQyMDNkM2UyMDMxMzkzNDMyMzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgACMAsDCQAo AQAeyAAAADANBgkqhkiG9w0BAQsFAAOCAQEAfYcT6Mo7JDCfc55ZFnVrzcLtOgne j7aC+SOYi0BrLUirxjKQEbTlH7HVxk628wwoQPifr8J7LguO98tGxS1caD+AMKLV LeW9skDSGm9P0/dx+ztTuPZKVFYLHG3D7YmQgT4AA/+XweHnkHkz1DVOUC8DR0Ea iCo3za/QdPtZvYILjNSMfHkH41XY0x3hzhRJx9pAtCTa3S7HT0hMSB0FOtSweVla xPQYN3ZRffNU+lo6YMBf9K2YIy6Yz+IL+8OjZjN0WtE8arfsEZ2heJ8BFDngcxnU qL7CZW1fEac6FdFrku4qylwMjObI8AjhTV8bUeYfjvk7NXLBza3H3DW45A== -----END CERTIFICATE-----Generated at Tue Jan 13 06:13:09 2026 by rpki-client