This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a353030303a3a2f33362d3336203d3e20323636383332.roa File: 323830333a386361303a353030303a3a2f33362d3336203d3e20323636383332.roa (raw, json) Hash identifier: JOzzg7gOIS+UuWVw/FKWSdFnOJEg6B628xsqV0vjAH4= Subject key identifier: 57:9C:07:10:83:5A:FC:5A:D6:EB:94:B4:A7:38:8C:93:53:FC:D0:12 Certificate issuer: /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Certificate serial: 669A41C040FF41CDE8FDA7D74FBBBE9AF17EFC1B Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a353030303a3a2f33362d3336203d3e20323636383332.roa Signing time: Fri 26 Dec 2025 17:56:10 +0000 ROA not before: Fri 26 Dec 2025 17:51:10 +0000 ROA not after: Fri 25 Dec 2026 17:56:10 +0000 asID: 266832 IP address blocks: 2803:8ca0:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 19:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9a:41:c0:40:ff:41:cd:e8:fd:a7:d7:4f:bb:be:9a:f1:7e:fc:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Validity Not Before: Dec 26 17:51:10 2025 GMT Not After : Dec 25 17:56:10 2026 GMT Subject: CN=579C0710835AFC5AD6EB94B4A7388C9353FCD012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:e9:ba:8e:13:70:8c:5d:fb:11:5a:f0:cb: 58:ed:59:ef:1b:d1:17:fc:53:1d:9f:2b:a4:49:32: b0:de:4d:26:d2:5d:b1:45:a8:a6:ab:03:9c:31:21: f1:47:29:58:b5:6f:50:c1:04:2e:40:13:2a:51:f9: 9a:43:e0:c4:de:ee:64:11:10:ea:f9:cb:b5:97:5e: 4e:3a:ff:08:d4:6c:d9:56:70:ab:4a:dd:bd:91:f5: 1e:c7:48:8f:bf:28:3e:63:75:f6:20:29:05:73:36: 93:9e:1c:2a:17:9f:b5:a7:47:fb:58:41:fe:05:88: b5:88:c8:66:b6:57:80:e8:c0:65:7f:05:eb:c6:9d: 77:53:ee:00:6a:db:61:fb:6b:94:1b:dc:f1:ef:b5: f4:09:45:ec:95:b8:1d:ef:5f:65:48:28:ad:65:4c: c9:a8:f5:5b:d1:01:72:41:5b:4d:6c:f7:79:7a:f6: d7:e7:d9:5e:08:cb:6c:30:95:2f:72:f1:1c:5c:21: 6e:36:a7:00:42:fd:f5:39:ab:7f:c4:41:80:39:a4: 2c:94:65:4b:78:ff:ef:bb:d3:81:e8:4a:99:9e:39: c4:31:f1:0e:4c:87:85:f9:fe:17:d7:e2:e5:15:1a: 7f:f0:09:f2:7b:34:0c:78:e2:51:2f:86:23:b7:a7: ae:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9C:07:10:83:5A:FC:5A:D6:EB:94:B4:A7:38:8C:93:53:FC:D0:12 X509v3 Authority Key Identifier: keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a353030303a3a2f33362d3336203d3e20323636383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8ca0:5000::/36 Signature Algorithm: sha256WithRSAEncryption 5d:7b:af:dd:7b:fd:7d:ed:cc:02:64:84:03:f0:df:2b:1b:36: 7c:ac:ca:a2:0c:8b:27:cf:86:82:c2:91:fc:94:f6:00:d0:c8: 78:9b:3a:77:99:db:85:89:ab:ef:10:97:8e:71:e9:65:b1:f7: 59:ce:a2:a9:9e:26:7d:81:fa:79:73:08:22:84:62:74:ea:b5: 5f:5f:3b:94:8c:b6:6a:4d:15:f9:cb:83:4b:fa:3f:31:52:af: bb:8a:77:60:c5:7d:24:8c:7c:2f:1c:e0:b0:a5:74:c0:5a:8e: 5c:1a:4a:0c:1d:19:2a:92:58:53:b7:42:0f:40:b9:e7:b8:93: de:56:12:86:7d:84:90:6d:5e:87:9c:d0:10:be:06:a2:cd:7a: 53:fa:1f:12:78:35:52:4e:3a:60:58:09:46:43:8a:f3:1a:9e: 74:7d:62:db:5b:ce:e7:ae:be:07:c7:03:f7:9d:61:45:e6:d5: d6:47:d7:4c:da:f4:46:a0:fd:bf:f8:70:14:e9:53:48:09:89: 32:fb:1c:56:d0:d2:aa:a1:5b:f6:51:66:24:a3:cf:17:cf:1a: 39:57:89:72:ff:94:82:29:de:f9:9c:14:61:11:be:63:dc:8c: 96:08:99:19:0d:4e:7a:25:f8:6e:41:3a:3d:3e:c1:7e:8f:68: ec:f3:9b:9a -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUZppBwED/Qc3o/afXT7u+mvF+/BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1MUNGMjVBRTY4RjBDODU4RkVCNTFGRjcyRDk2NEJF NTY4QUE1NDAeFw0yNTEyMjYxNzUxMTBaFw0yNjEyMjUxNzU2MTBaMDMxMTAvBgNV BAMTKDU3OUMwNzEwODM1QUZDNUFENkVCOTRCNEE3Mzg4QzkzNTNGQ0QwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oOm6jhNwjF37EVrwy1jtWe8b 0Rf8Ux2fK6RJMrDeTSbSXbFFqKarA5wxIfFHKVi1b1DBBC5AEypR+ZpD4MTe7mQR EOr5y7WXXk46/wjUbNlWcKtK3b2R9R7HSI+/KD5jdfYgKQVzNpOeHCoXn7WnR/tY Qf4FiLWIyGa2V4DowGV/BevGnXdT7gBq22H7a5Qb3PHvtfQJReyVuB3vX2VIKK1l TMmo9VvRAXJBW01s93l69tfn2V4Iy2wwlS9y8RxcIW42pwBC/fU5q3/EQYA5pCyU ZUt4/++704HoSpmeOcQx8Q5Mh4X5/hfX4uUVGn/wCfJ7NAx44lEvhiO3p66dAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUV5wHEINa/FrW65S0pziMk1P80BIwHwYDVR0j BBgwFoAUy1HPJa5o8MhY/rUf9y2WS+VoqlQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMENDOEU5MjhDRUZEMDM0MTEwMjNDMEVERTY4OUQxQjdC Nzk2MzY0MjAxQzJBQzlCOTlFNTE1QjgzQTdGNzRELzAvQ0I1MUNGMjVBRTY4RjBD ODU4RkVCNTFGRjcyRDk2NEJFNTY4QUE1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjUxQ0YyNUFFNjhGMEM4NThG RUI1MUZGNzJEOTY0QkU1NjhBQTU0LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzBDQzhFOTI4Q0VGRDAzNDExMDIzQzBFREU2ODlEMUI3Qjc5NjM2NDIw MUMyQUM5Qjk5RTUxNUI4M0E3Rjc0RC8wLzMyMzgzMDMzM2EzODYzNjEzMDNhMzUz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzODMzMzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoA4ygUDANBgkqhkiG9w0BAQsFAAOCAQEAXXuv3Xv9fe3MAmSEA/DfKxs2 fKzKogyLJ8+GgsKR/JT2ANDIeJs6d5nbhYmr7xCXjnHpZbH3Wc6iqZ4mfYH6eXMI IoRidOq1X187lIy2ak0V+cuDS/o/MVKvu4p3YMV9JIx8LxzgsKV0wFqOXBpKDB0Z KpJYU7dCD0C557iT3lYShn2EkG1eh5zQEL4Gos16U/ofEng1Uk46YFgJRkOK8xqe dH1i21vO566+B8cD951hRebV1kfXTNr0RqD9v/hwFOlTSAmJMvscVtDSqqFb9lFm JKPPF88aOVeJcv+Ugine+ZwUYRG+Y9yMlgiZGQ1OeiX4bkE6PT7Bfo9o7PObmg== -----END CERTIFICATE-----Generated at Tue Jan 13 05:10:41 2026 by rpki-client