This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a323030303a3a2f33362d3336203d3e20323636383332.roa File: 323830333a386361303a323030303a3a2f33362d3336203d3e20323636383332.roa (raw, json) Hash identifier: a0FzhMfOf2Xv9NZqijRxj6ItJAHmt7suwrM/dhlreE0= Subject key identifier: 97:76:E3:97:82:3B:76:94:DA:74:D0:9C:4C:65:A1:BD:CC:9B:BF:AC Certificate issuer: /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Certificate serial: 61121B3C3026E5C59D68830F8BE58D685AD9C0C8 Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a323030303a3a2f33362d3336203d3e20323636383332.roa Signing time: Fri 26 Dec 2025 17:56:10 +0000 ROA not before: Fri 26 Dec 2025 17:51:10 +0000 ROA not after: Fri 25 Dec 2026 17:56:10 +0000 asID: 266832 IP address blocks: 2803:8ca0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 19:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:12:1b:3c:30:26:e5:c5:9d:68:83:0f:8b:e5:8d:68:5a:d9:c0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Validity Not Before: Dec 26 17:51:10 2025 GMT Not After : Dec 25 17:56:10 2026 GMT Subject: CN=9776E397823B7694DA74D09C4C65A1BDCC9BBFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:e1:51:14:b9:e6:a0:54:00:52:6e:1f:6f: 4d:7b:07:db:bf:e0:8f:cb:86:ac:62:17:77:e6:6e: f8:1b:c5:9d:a7:f6:90:fa:0b:d1:30:4b:15:a8:e6: 2c:56:e2:fb:09:a2:78:57:3e:0d:e2:78:c5:b8:64: 3d:ce:b7:cc:5a:97:b0:a5:02:dc:0d:ec:70:de:9d: 60:f0:eb:62:3f:f2:52:c7:98:9b:9c:15:b1:66:af: 3f:94:01:14:76:32:72:89:c8:95:6f:e3:a1:69:ba: 59:1a:5c:3c:6e:da:71:a0:3b:eb:d1:eb:f1:1c:36: ab:36:0b:34:70:6d:2a:10:17:19:8b:e3:8b:90:d7: f9:df:5b:6e:a3:02:3f:b4:5b:4e:93:e1:27:b4:50: 8e:4d:93:5b:d6:da:45:e0:44:77:28:88:1c:37:1d: a8:e1:a0:ba:67:11:62:2a:00:a7:85:31:8a:ee:43: c7:1f:70:95:fd:4d:30:68:4e:89:68:ac:e0:06:b0: ae:3c:43:a3:ab:d7:f6:f2:a1:4a:c5:56:3f:8a:e9: 13:34:c0:8e:1d:ed:66:c3:9f:aa:2c:7c:6e:7e:aa: 7c:c3:84:41:47:7e:66:9b:91:07:95:5f:e9:ee:56: b5:7a:47:e2:7e:52:22:27:ea:93:58:82:8d:aa:fa: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:76:E3:97:82:3B:76:94:DA:74:D0:9C:4C:65:A1:BD:CC:9B:BF:AC X509v3 Authority Key Identifier: keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a323030303a3a2f33362d3336203d3e20323636383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8ca0:2000::/36 Signature Algorithm: sha256WithRSAEncryption 45:da:67:23:4c:5c:e9:74:15:81:d6:a2:01:eb:7a:05:9d:ed: 80:1d:9d:91:54:66:70:59:93:77:65:00:86:52:ae:34:0d:40: 64:4e:4d:a8:39:a0:7e:5d:75:55:48:8b:87:b8:0e:cb:2e:50: 53:2b:c5:56:e7:e8:d0:3f:34:79:ab:89:3b:da:ed:de:e0:ed: c3:cd:2d:ef:73:5a:e8:2d:cf:5a:0c:fd:98:99:86:a9:13:a7: 79:df:9b:8b:19:ab:8a:b6:00:47:7a:ab:07:34:21:23:fe:00: c8:c1:cc:70:85:cf:ab:56:6d:08:f2:01:eb:dc:b1:34:53:91: e4:e6:86:97:cd:ff:47:fc:aa:4a:2e:10:6b:c2:46:a2:b3:88: 92:52:a9:7e:78:a6:6d:9d:32:d5:70:bf:5f:89:b0:63:ae:28: 88:77:83:26:bc:cb:90:8b:19:b7:e9:d7:7e:74:6d:95:de:1c: 6e:11:5b:ca:19:bc:34:30:3b:80:31:44:84:fb:5c:b5:ff:41: cd:11:b6:39:3a:f7:21:2a:b5:ba:1b:4a:46:c0:04:d0:75:d5: 73:1f:fe:54:83:94:64:a1:a8:d5:c8:8a:38:e0:1f:2d:42:4c: 11:90:3a:18:94:ac:ab:cb:6f:23:c6:30:28:b8:0f:7a:f4:54: 90:86:60:b6 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUYRIbPDAm5cWdaIMPi+WNaFrZwMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1MUNGMjVBRTY4RjBDODU4RkVCNTFGRjcyRDk2NEJF NTY4QUE1NDAeFw0yNTEyMjYxNzUxMTBaFw0yNjEyMjUxNzU2MTBaMDMxMTAvBgNV BAMTKDk3NzZFMzk3ODIzQjc2OTREQTc0RDA5QzRDNjVBMUJEQ0M5QkJGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8+FRFLnmoFQAUm4fb017B9u/ 4I/LhqxiF3fmbvgbxZ2n9pD6C9EwSxWo5ixW4vsJonhXPg3ieMW4ZD3Ot8xal7Cl AtwN7HDenWDw62I/8lLHmJucFbFmrz+UARR2MnKJyJVv46FpulkaXDxu2nGgO+vR 6/EcNqs2CzRwbSoQFxmL44uQ1/nfW26jAj+0W06T4Se0UI5Nk1vW2kXgRHcoiBw3 HajhoLpnEWIqAKeFMYruQ8cfcJX9TTBoTolorOAGsK48Q6Or1/byoUrFVj+K6RM0 wI4d7WbDn6osfG5+qnzDhEFHfmabkQeVX+nuVrV6R+J+UiIn6pNYgo2q+rYtAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUl3bjl4I7dpTadNCcTGWhvcybv6wwHwYDVR0j BBgwFoAUy1HPJa5o8MhY/rUf9y2WS+VoqlQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMENDOEU5MjhDRUZEMDM0MTEwMjNDMEVERTY4OUQxQjdC Nzk2MzY0MjAxQzJBQzlCOTlFNTE1QjgzQTdGNzRELzAvQ0I1MUNGMjVBRTY4RjBD ODU4RkVCNTFGRjcyRDk2NEJFNTY4QUE1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjUxQ0YyNUFFNjhGMEM4NThG RUI1MUZGNzJEOTY0QkU1NjhBQTU0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzBDQzhFOTI4Q0VGRDAzNDExMDIzQzBFREU2ODlEMUI3Qjc5NjM2NDIw MUMyQUM5Qjk5RTUxNUI4M0E3Rjc0RC8wLzMyMzgzMDMzM2EzODYzNjEzMDNhMzIz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4ygIDANBgkqhkiG9w0BAQsFAAOCAQEARdpnI0xc6XQVgdaiAet6BZ3t gB2dkVRmcFmTd2UAhlKuNA1AZE5NqDmgfl11VUiLh7gOyy5QUyvFVufo0D80eauJ O9rt3uDtw80t73Na6C3PWgz9mJmGqROned+bixmrirYAR3qrBzQhI/4AyMHMcIXP q1ZtCPIB69yxNFOR5OaGl83/R/yqSi4Qa8JGorOIklKpfnimbZ0y1XC/X4mwY64o iHeDJrzLkIsZt+nXfnRtld4cbhFbyhm8NDA7gDFEhPtctf9BzRG2OTr3ISq1uhtK RsAE0HXVcx/+VIOUZKGo1ciKOOAfLUJMEZA6GJSsq8tvI8YwKLgPevRUkIZgtg== -----END CERTIFICATE-----Generated at Tue Jan 13 04:03:04 2026 by rpki-client