This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a313030303a3a2f34302d3438203d3e2036343239.roa File: 323830303a3362303a313030303a3a2f34302d3438203d3e2036343239.roa (raw, json) Hash identifier: hnPy5NCnpvebE2aYPQ/yPf+q80DKREvVUPgKNJ3RBPw= Subject key identifier: C0:07:8E:3C:29:2F:72:07:E4:A8:04:27:51:CC:01:89:76:DC:C5:C3 Certificate issuer: /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B Certificate serial: 04025AA9C45B41FE9954028795F9B7BBC207CECC Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a313030303a3a2f34302d3438203d3e2036343239.roa Signing time: Tue 06 Jan 2026 20:54:12 +0000 ROA not before: Tue 06 Jan 2026 20:49:12 +0000 ROA not after: Tue 05 Jan 2027 20:54:12 +0000 asID: 6429 IP address blocks: 2800:3b0:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 06:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:02:5a:a9:c4:5b:41:fe:99:54:02:87:95:f9:b7:bb:c2:07:ce:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B Validity Not Before: Jan 6 20:49:12 2026 GMT Not After : Jan 5 20:54:12 2027 GMT Subject: CN=C0078E3C292F7207E4A8042751CC018976DCC5C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9f:a8:56:4b:f2:b5:93:25:6b:4a:37:3b:2d: da:27:30:83:fd:f2:b0:e6:bc:4d:d7:b5:9e:a4:7f: 6d:c9:cf:ff:86:a0:38:b5:44:e2:4d:0c:1b:ff:3c: 6d:3e:6b:d8:42:95:66:52:f2:a8:4c:8c:aa:ba:d6: b9:b7:f8:65:9e:d5:5c:8f:29:43:c9:6a:c3:e2:f2: 4c:ef:21:10:25:25:f8:51:6f:1f:26:d7:81:47:5e: 5c:e6:3c:18:75:e2:d7:ab:dc:3e:c1:6e:d6:56:04: 63:bf:ad:31:08:86:34:36:fe:c5:d9:b2:2e:eb:e0: 07:3f:a2:10:22:76:45:48:c2:d1:7c:bd:6f:9d:8a: 62:bd:98:98:4c:cc:d2:99:6a:3f:e4:81:b2:7f:64: 5f:bc:d7:21:28:a2:39:d4:31:cd:13:00:be:a3:0e: 34:e0:35:09:b1:20:64:8a:23:9a:1c:ec:d6:ff:66: f6:57:1c:d5:49:a5:35:3f:6e:85:51:65:cf:ff:48: 1d:22:94:7a:4c:df:a1:eb:aa:91:28:67:01:ae:75: 91:72:97:11:dd:f5:1e:7a:52:d9:ae:60:8b:c7:db: a6:fa:15:35:9c:22:b7:ee:b0:00:75:0d:27:d6:5e: ba:ff:02:13:cd:06:33:ab:19:67:fe:a6:36:00:39: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:07:8E:3C:29:2F:72:07:E4:A8:04:27:51:CC:01:89:76:DC:C5:C3 X509v3 Authority Key Identifier: keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a313030303a3a2f34302d3438203d3e2036343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:3b0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 42:ce:3a:c2:90:28:8d:3a:c3:98:e9:34:06:f5:76:7d:68:95: aa:a2:9d:4f:54:7a:04:8f:6f:cf:f9:15:6c:17:fb:f4:b4:3e: 20:c3:f8:9f:e6:e4:60:62:17:c8:dd:c5:05:2f:cf:13:5f:f8: 3f:84:30:61:70:c1:ea:ea:d4:81:9c:93:ea:a2:3a:09:18:8d: e5:60:2b:c2:09:2f:ba:0f:39:c4:cd:59:16:7a:94:c0:ff:e5: eb:ac:3a:a2:f7:46:31:11:e1:d7:88:d6:c7:a4:9a:44:96:90: 72:94:89:d1:c5:27:9c:7e:c3:23:f6:b8:7c:4c:42:54:85:2f: 55:0a:39:39:10:33:02:ad:5f:a2:1f:f2:4a:ee:79:98:67:79: 9e:1e:c6:a6:04:7b:e5:02:16:d0:ba:44:50:24:97:7d:39:2c: 48:0c:d9:0c:fc:54:76:7b:29:08:09:74:3a:aa:4e:64:2b:1c: 5f:07:06:62:62:84:78:ae:7f:38:bb:7e:55:37:cf:ce:41:1f: a9:a7:46:7a:31:6f:aa:e8:68:12:6d:96:63:66:50:ce:e3:70: 08:b7:5e:8d:70:72:9d:85:0f:92:15:16:04:46:5e:b9:e9:53: 72:5c:35:b4:0a:82:9f:21:60:33:be:47:a9:ef:10:0c:4b:2c: e2:e1:4a:9e -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUBAJaqcRbQf6ZVAKHlfm3u8IHzswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC NUI0M0U4QjAeFw0yNjAxMDYyMDQ5MTJaFw0yNzAxMDUyMDU0MTJaMDMxMTAvBgNV BAMTKEMwMDc4RTNDMjkyRjcyMDdFNEE4MDQyNzUxQ0MwMTg5NzZEQ0M1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDon6hWS/K1kyVrSjc7LdonMIP9 8rDmvE3XtZ6kf23Jz/+GoDi1ROJNDBv/PG0+a9hClWZS8qhMjKq61rm3+GWe1VyP KUPJasPi8kzvIRAlJfhRbx8m14FHXlzmPBh14ter3D7BbtZWBGO/rTEIhjQ2/sXZ si7r4Ac/ohAidkVIwtF8vW+dimK9mJhMzNKZaj/kgbJ/ZF+81yEoojnUMc0TAL6j DjTgNQmxIGSKI5oc7Nb/ZvZXHNVJpTU/boVRZc//SB0ilHpM36HrqpEoZwGudZFy lxHd9R56UtmuYIvH26b6FTWcIrfusAB1DSfWXrr/AhPNBjOrGWf+pjYAOccrAgMB AAGjggLOMIICyjAdBgNVHQ4EFgQUwAeOPCkvcgfkqAQnUcwBiXbcxcMwHwYDVR0j BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMyMzgzMDMwM2EzMzYyMzAzYTMxMzAz MDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzYzNDMyMzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAo AAOwEDANBgkqhkiG9w0BAQsFAAOCAQEAQs46wpAojTrDmOk0BvV2fWiVqqKdT1R6 BI9vz/kVbBf79LQ+IMP4n+bkYGIXyN3FBS/PE1/4P4QwYXDB6urUgZyT6qI6CRiN 5WArwgkvug85xM1ZFnqUwP/l66w6ovdGMRHh14jWx6SaRJaQcpSJ0cUnnH7DI/a4 fExCVIUvVQo5ORAzAq1foh/ySu55mGd5nh7GpgR75QIW0LpEUCSXfTksSAzZDPxU dnspCAl0OqpOZCscXwcGYmKEeK5/OLt+VTfPzkEfqadGejFvquhoEm2WY2ZQzuNw CLdejXBynYUPkhUWBEZeuelTclw1tAqCnyFgM75Hqe8QDEss4uFKng== -----END CERTIFICATE-----Generated at Mon Jan 12 02:37:27 2026 by rpki-client