This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a343030303a3a2f33362d3336203d3e20323636383332.roa File: 323830333a386361303a343030303a3a2f33362d3336203d3e20323636383332.roa (raw, json) Hash identifier: Njz1pfJr+swowaxgrczTyEyOpY1l+RmDOSwsVu+khcA= Subject key identifier: DF:D8:73:A5:DA:B2:E3:91:B6:4C:8C:07:86:E8:5A:DA:32:4F:0A:22 Certificate issuer: /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Certificate serial: 35D681F1422C49F3E58583613447873993BCD1AD Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a343030303a3a2f33362d3336203d3e20323636383332.roa Signing time: Fri 26 Dec 2025 17:56:10 +0000 ROA not before: Fri 26 Dec 2025 17:51:10 +0000 ROA not after: Fri 25 Dec 2026 17:56:10 +0000 asID: 266832 IP address blocks: 2803:8ca0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 19:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d6:81:f1:42:2c:49:f3:e5:85:83:61:34:47:87:39:93:bc:d1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Validity Not Before: Dec 26 17:51:10 2025 GMT Not After : Dec 25 17:56:10 2026 GMT Subject: CN=DFD873A5DAB2E391B64C8C0786E85ADA324F0A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:5c:c2:09:f5:ac:e5:28:3e:a6:4a:f8:0e: ce:db:31:4d:01:0d:a6:96:48:11:71:75:4e:b8:b6: c4:fe:4a:17:40:7b:93:45:42:ec:31:c3:28:93:b1: 1b:77:fd:e1:c9:15:32:f4:7b:8f:91:8c:d4:ee:5b: 34:71:df:27:60:7a:c3:ae:4a:63:25:ad:23:dd:6a: b0:7d:e3:90:19:08:94:17:9a:dd:8c:f0:f5:77:11: 32:b1:9c:42:a2:cf:72:92:4e:d1:73:11:c2:f7:95: 1f:ee:0e:14:44:32:76:59:72:a9:db:2f:57:98:62: 5a:44:92:82:59:8f:76:6c:95:71:38:ab:95:90:11: 17:e2:cf:a4:22:97:ef:5b:20:6c:3c:9a:81:8f:f5: 3a:f2:a2:8d:21:08:38:df:e2:f1:eb:7f:12:3a:41: 62:f1:9a:c8:f1:83:7b:39:50:d3:3f:40:8d:aa:f3: c2:ba:21:2b:ce:09:62:36:5f:fd:1e:b0:df:bd:da: 58:e3:f2:18:ab:fe:cc:05:6d:dd:a2:ab:ca:c8:b8: e8:00:18:f6:b0:26:cc:57:6c:c7:2e:b3:a0:a8:cf: 6b:f1:fd:d1:56:29:94:e9:b4:12:c5:f6:90:22:75: b1:df:79:4a:bf:66:f6:3d:56:a8:89:5b:22:4b:13: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D8:73:A5:DA:B2:E3:91:B6:4C:8C:07:86:E8:5A:DA:32:4F:0A:22 X509v3 Authority Key Identifier: keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a343030303a3a2f33362d3336203d3e20323636383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8ca0:4000::/36 Signature Algorithm: sha256WithRSAEncryption 8d:2f:17:a9:dd:ab:72:cc:52:12:72:7f:1a:e1:05:31:16:30: 1a:fc:33:0d:39:99:e6:b5:74:65:23:d2:f2:ce:8c:58:19:6b: d0:68:32:f5:76:92:ec:79:54:54:23:11:c8:e7:75:ae:94:7c: 8a:f5:0a:5a:bc:bd:25:04:cc:5b:be:50:85:99:d1:55:8e:1d: b6:c2:8a:f3:a1:26:3e:bf:bd:54:f0:21:7b:1a:18:75:cf:16: d4:92:bc:eb:b4:50:db:67:1b:ee:99:dd:37:e4:c5:15:8c:90: 57:c2:b2:ff:08:38:78:f0:ed:4e:64:e9:27:01:0a:8e:13:58: e6:a7:55:0a:b4:6b:80:91:62:8a:ee:0a:b0:cf:a6:7c:2f:3d: 45:49:db:9c:ee:9a:d1:fd:46:bd:77:38:f6:69:1d:58:75:b8: f3:81:e4:9c:56:66:d6:34:f4:a2:d0:8b:f6:2b:1a:bf:34:13: 35:3d:7c:db:ba:65:ed:35:c8:35:48:fc:a8:83:34:5d:99:8c: 90:9d:20:60:5f:04:54:1a:2a:b6:dc:b1:f4:48:ec:40:1c:88: 6c:52:c0:98:8c:83:39:ae:bf:22:3f:4d:ae:0e:68:4c:22:b5: 77:d5:b5:5d:70:1d:0c:0b:c0:09:7a:13:c9:40:8c:c6:0a:e2: 01:7d:20:db -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUNdaB8UIsSfPlhYNhNEeHOZO80a0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1MUNGMjVBRTY4RjBDODU4RkVCNTFGRjcyRDk2NEJF NTY4QUE1NDAeFw0yNTEyMjYxNzUxMTBaFw0yNjEyMjUxNzU2MTBaMDMxMTAvBgNV BAMTKERGRDg3M0E1REFCMkUzOTFCNjRDOEMwNzg2RTg1QURBMzI0RjBBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9VzCCfWs5Sg+pkr4Ds7bMU0B DaaWSBFxdU64tsT+ShdAe5NFQuwxwyiTsRt3/eHJFTL0e4+RjNTuWzRx3ydgesOu SmMlrSPdarB945AZCJQXmt2M8PV3ETKxnEKiz3KSTtFzEcL3lR/uDhREMnZZcqnb L1eYYlpEkoJZj3ZslXE4q5WQERfiz6Qil+9bIGw8moGP9Tryoo0hCDjf4vHrfxI6 QWLxmsjxg3s5UNM/QI2q88K6ISvOCWI2X/0esN+92ljj8hir/swFbd2iq8rIuOgA GPawJsxXbMcus6Coz2vx/dFWKZTptBLF9pAidbHfeUq/ZvY9VqiJWyJLE3ETAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQU39hzpdqy45G2TIwHhuha2jJPCiIwHwYDVR0j BBgwFoAUy1HPJa5o8MhY/rUf9y2WS+VoqlQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMENDOEU5MjhDRUZEMDM0MTEwMjNDMEVERTY4OUQxQjdC Nzk2MzY0MjAxQzJBQzlCOTlFNTE1QjgzQTdGNzRELzAvQ0I1MUNGMjVBRTY4RjBD ODU4RkVCNTFGRjcyRDk2NEJFNTY4QUE1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjUxQ0YyNUFFNjhGMEM4NThG RUI1MUZGNzJEOTY0QkU1NjhBQTU0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzBDQzhFOTI4Q0VGRDAzNDExMDIzQzBFREU2ODlEMUI3Qjc5NjM2NDIw MUMyQUM5Qjk5RTUxNUI4M0E3Rjc0RC8wLzMyMzgzMDMzM2EzODYzNjEzMDNhMzQz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4ygQDANBgkqhkiG9w0BAQsFAAOCAQEAjS8Xqd2rcsxSEnJ/GuEFMRYw GvwzDTmZ5rV0ZSPS8s6MWBlr0Ggy9XaS7HlUVCMRyOd1rpR8ivUKWry9JQTMW75Q hZnRVY4dtsKK86EmPr+9VPAhexoYdc8W1JK867RQ22cb7pndN+TFFYyQV8Ky/wg4 ePDtTmTpJwEKjhNY5qdVCrRrgJFiiu4KsM+mfC89RUnbnO6a0f1GvXc49mkdWHW4 84HknFZm1jT0otCL9isavzQTNT1827pl7TXINUj8qIM0XZmMkJ0gYF8EVBoqttyx 9EjsQByIbFLAmIyDOa6/Ij9Nrg5oTCK1d9W1XXAdDAvACXoTyUCMxgriAX0g2w== -----END CERTIFICATE-----Generated at Tue Jan 13 04:41:29 2026 by rpki-client