This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a383030303a3a2f34362d3438203d3e20323634363436.roa File: 323830333a313738303a383030303a3a2f34362d3438203d3e20323634363436.roa (raw, json) Hash identifier: oib7vKihQndbr9AMOrJY2n3fGnOHeqAwbO2t2gDl/so= Subject key identifier: CC:1D:78:7F:FB:3C:0F:7D:C8:F4:7F:66:B7:38:BB:F2:C7:F7:3C:9D Certificate issuer: /CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539 Certificate serial: 61C29909E58C9202575F45E57EE5711A353DD778 Authority key identifier: 33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a383030303a3a2f34362d3438203d3e20323634363436.roa Signing time: Tue 06 Jan 2026 19:06:42 +0000 ROA not before: Tue 06 Jan 2026 19:01:42 +0000 ROA not after: Tue 05 Jan 2027 19:06:42 +0000 asID: 264646 IP address blocks: 2803:1780:8000::/46 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.crl rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 06:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c2:99:09:e5:8c:92:02:57:5f:45:e5:7e:e5:71:1a:35:3d:d7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539 Validity Not Before: Jan 6 19:01:42 2026 GMT Not After : Jan 5 19:06:42 2027 GMT Subject: CN=CC1D787FFB3C0F7DC8F47F66B738BBF2C7F73C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:3d:f6:b8:9e:07:bd:bf:0e:1f:fd:9e:77: 82:23:1d:46:39:07:9d:5c:02:97:0c:36:d1:33:32: 49:fd:2b:d2:8a:9e:6e:dd:60:e5:12:b1:9d:e5:1e: c9:83:80:c5:0a:24:f5:e8:9c:f4:05:9c:86:c9:5a: 5d:15:89:6f:87:3f:a8:33:88:26:77:29:de:07:b1: 1b:a8:90:ed:fd:bb:0c:31:e4:17:47:b1:ce:04:2c: 99:f5:af:a2:40:99:d1:6a:b3:37:a7:b9:5d:d6:58: 54:53:7f:a9:12:8c:1e:b3:30:74:ae:03:ba:ab:64: 0a:9d:aa:b5:6a:f7:45:86:51:30:f9:db:98:1b:2c: 13:8a:9a:a8:bb:0b:53:e2:79:52:7d:b2:ee:8e:e4: 27:19:1c:00:ed:7a:4f:95:b3:aa:49:89:96:6f:ef: 22:88:1b:44:ff:49:b5:0d:98:57:ac:e4:74:49:88: 5f:de:10:09:ac:e2:ff:9a:0f:25:94:87:15:4f:bb: 3c:d8:34:0f:92:e8:53:cb:2e:4a:37:20:3a:d8:1b: cb:6c:fa:b2:ed:e5:73:75:40:33:f6:85:02:8d:6d: d1:93:6e:a4:cf:55:51:f3:66:36:88:2c:78:6b:0a: da:e4:38:36:fa:53:53:c5:0a:ae:d1:2a:87:89:c7: c3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:78:7F:FB:3C:0F:7D:C8:F4:7F:66:B7:38:BB:F2:C7:F7:3C:9D X509v3 Authority Key Identifier: keyid:33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a383030303a3a2f34362d3438203d3e20323634363436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1780:8000::/46 Signature Algorithm: sha256WithRSAEncryption 02:4c:eb:4e:84:a3:46:57:96:a1:25:e0:29:70:bd:82:d4:39: 30:b9:b7:67:0d:c7:d5:99:38:87:e4:b7:c7:e7:b0:90:48:65: c0:07:ae:1a:5e:b8:be:e1:e0:19:74:3d:32:52:c4:b8:46:2c: 3f:16:f9:9e:62:c3:8c:a9:89:2b:ae:83:78:a6:69:9b:36:b9: 85:bc:64:b6:a2:d6:19:2c:9f:66:5b:0f:b6:03:b1:49:67:06: b7:96:87:07:f0:d1:98:3b:aa:fd:75:f1:78:ad:94:59:2d:12: 0a:d0:0f:54:e1:12:88:f6:3c:cc:74:a4:8b:24:71:5c:72:bf: 1f:54:64:1e:bb:0b:ac:78:98:05:1f:05:b6:92:ab:c1:33:2d: 47:0b:a8:1b:ce:7c:71:6f:1e:ab:f2:c5:f6:dd:31:2a:cb:df: a0:bb:e1:31:f3:a5:45:aa:c5:6a:9c:eb:ff:f7:34:78:46:f8: 19:bc:17:8e:86:98:f5:95:5c:fd:a7:97:a2:2e:ca:ab:fa:6c: 88:b6:15:36:ab:a9:1c:b5:90:1c:8d:40:5c:7c:4b:87:75:07: 21:d6:5a:33:5d:8b:95:d8:9a:43:5e:31:0b:b1:a7:b5:b7:03: 0f:ec:5e:ad:f3:a6:9d:8d:10:75:3a:b8:fc:11:b9:53:ff:fe: 84:ca:e3:1a -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUYcKZCeWMkgJXX0XlfuVxGjU913gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxQzM5RjhEQTJEMzcxNzg1OUJGMkFCRjFFMjE4NzE0 M0JBQjUzOTAeFw0yNjAxMDYxOTAxNDJaFw0yNzAxMDUxOTA2NDJaMDMxMTAvBgNV BAMTKENDMUQ3ODdGRkIzQzBGN0RDOEY0N0Y2NkI3MzhCQkYyQzdGNzNDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsj32uJ4Hvb8OH/2ed4IjHUY5 B51cApcMNtEzMkn9K9KKnm7dYOUSsZ3lHsmDgMUKJPXonPQFnIbJWl0ViW+HP6gz iCZ3Kd4HsRuokO39uwwx5BdHsc4ELJn1r6JAmdFqszenuV3WWFRTf6kSjB6zMHSu A7qrZAqdqrVq90WGUTD525gbLBOKmqi7C1PieVJ9su6O5CcZHADtek+Vs6pJiZZv 7yKIG0T/SbUNmFes5HRJiF/eEAms4v+aDyWUhxVPuzzYNA+S6FPLLko3IDrYG8ts +rLt5XN1QDP2hQKNbdGTbqTPVVHzZjaILHhrCtrkODb6U1PFCq7RKoeJx8O1AgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUzB14f/s8D33I9H9mtzi78sf3PJ0wHwYDVR0j BBgwFoAUMxw5+NotNxeFm/Kr8eIYcUO6tTkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQzk4RDc1QTkwRkQ4MkREMEI1MzA1RUMyRDUwMzdDRkUz MjkyRkJCMDYyQjEwNkFGMUMzMTMzQzY2MDhGRUE0LzAvMzMxQzM5RjhEQTJEMzcx Nzg1OUJGMkFCRjFFMjE4NzE0M0JBQjUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzFDMzlGOERBMkQzNzE3ODU5 QkYyQUJGMUUyMTg3MTQzQkFCNTM5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkM5OEQ3NUE5MEZEODJERDBCNTMwNUVDMkQ1MDM3Q0ZFMzI5MkZCQjA2 MkIxMDZBRjFDMzEzM0M2NjA4RkVBNC8wLzMyMzgzMDMzM2EzMTM3MzgzMDNhMzgz MDMwMzAzYTNhMmYzNDM2MmQzNDM4MjAzZDNlMjAzMjM2MzQzNjM0MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwIoAxeAgAAwDQYJKoZIhvcNAQELBQADggEBAAJM606Eo0ZXlqEl4ClwvYLU OTC5t2cNx9WZOIfkt8fnsJBIZcAHrhpeuL7h4Bl0PTJSxLhGLD8W+Z5iw4ypiSuu g3imaZs2uYW8ZLai1hksn2ZbD7YDsUlnBreWhwfw0Zg7qv118XitlFktEgrQD1Th Eoj2PMx0pIskcVxyvx9UZB67C6x4mAUfBbaSq8EzLUcLqBvOfHFvHqvyxfbdMSrL 36C74THzpUWqxWqc6//3NHhG+Bm8F46GmPWVXP2nl6Iuyqv6bIi2FTarqRy1kByN QFx8S4d1ByHWWjNdi5XYmkNeMQuxp7W3Aw/sXq3zpp2NEHU6uPwRuVP//oTK4xo= -----END CERTIFICATE-----Generated at Tue Jan 13 05:34:55 2026 by rpki-client