This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36972E8FA49347B52B6E12471FBFC7C507F21FC3BA20B30CECFAC0FC7E8EADE0/0/323830333a3561303a3a2f33322d3438203d3e20323637373232.roa File: 323830333a3561303a3a2f33322d3438203d3e20323637373232.roa (raw, json) Hash identifier: Mk7eMqH4rZW9JLySdq/PQF4stCDOBBUxanmNjBpQYYc= Subject key identifier: 71:02:EC:21:DD:EC:0B:35:D2:B8:22:36:02:6B:35:67:84:68:59:76 Certificate issuer: /CN=9FA4BDF47C8A66882DA0EE96F26855FAB8DAA78E Certificate serial: 748D022721CAECF4A6E62C741C3F21D8622D6FC1 Authority key identifier: 9F:A4:BD:F4:7C:8A:66:88:2D:A0:EE:96:F2:68:55:FA:B8:DA:A7:8E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FA4BDF47C8A66882DA0EE96F26855FAB8DAA78E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36972E8FA49347B52B6E12471FBFC7C507F21FC3BA20B30CECFAC0FC7E8EADE0/0/323830333a3561303a3a2f33322d3438203d3e20323637373232.roa Signing time: Tue 06 Jan 2026 19:21:33 +0000 ROA not before: Tue 06 Jan 2026 19:16:33 +0000 ROA not after: Tue 05 Jan 2027 19:21:33 +0000 asID: 267722 IP address blocks: 2803:5a0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36972E8FA49347B52B6E12471FBFC7C507F21FC3BA20B30CECFAC0FC7E8EADE0/0/9FA4BDF47C8A66882DA0EE96F26855FAB8DAA78E.crl rsync://repository.lacnic.net/rpki/lacnic/36972E8FA49347B52B6E12471FBFC7C507F21FC3BA20B30CECFAC0FC7E8EADE0/0/9FA4BDF47C8A66882DA0EE96F26855FAB8DAA78E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FA4BDF47C8A66882DA0EE96F26855FAB8DAA78E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Jan 2026 01:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8d:02:27:21:ca:ec:f4:a6:e6:2c:74:1c:3f:21:d8:62:2d:6f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FA4BDF47C8A66882DA0EE96F26855FAB8DAA78E Validity Not Before: Jan 6 19:16:33 2026 GMT Not After : Jan 5 19:21:33 2027 GMT Subject: CN=7102EC21DDEC0B35D2B82236026B356784685976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:45:24:78:6d:09:d5:08:84:a3:c4:5f:26:a8: 8f:d6:d7:1c:8f:ec:f8:eb:cd:a0:5f:88:a4:84:f1: 73:c2:ee:c3:b0:41:aa:c8:68:0a:12:87:df:99:4d: 89:e2:60:41:37:ab:e5:c1:47:75:f5:ef:e8:39:f8: 4a:0b:9d:12:ca:65:8a:36:55:72:21:90:c0:53:ef: 58:34:e1:a6:c7:c6:c1:81:31:41:ef:1d:8e:14:39: 36:5d:d0:c2:76:4e:11:f2:2f:f9:77:49:8a:b3:a1: 2a:f8:48:9e:95:e9:01:cd:0b:1b:ee:94:1d:4b:23: bf:c7:3a:2c:22:7b:a0:89:6b:84:ec:f3:7b:29:2a: 01:8b:75:84:3c:93:dc:77:1d:24:25:13:54:ba:45: 24:be:fe:67:22:e6:4e:0e:f5:75:63:0a:49:e9:62: 3f:a9:b4:c8:45:bf:d7:74:0c:67:72:63:71:fb:64: 6b:04:3c:ee:00:c8:87:39:a8:50:8a:7f:39:91:9a: 49:d9:bb:c6:3f:8f:83:a9:dc:65:c3:0c:49:c5:4d: 4c:83:32:16:23:3f:61:78:45:60:20:f0:1d:ad:68: 28:cd:0e:ea:6c:93:0d:14:8b:82:dc:1e:2b:31:80: 73:07:08:0c:8d:4f:bf:8b:4b:f6:e6:5c:15:ed:73: c7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:02:EC:21:DD:EC:0B:35:D2:B8:22:36:02:6B:35:67:84:68:59:76 X509v3 Authority Key Identifier: keyid:9F:A4:BD:F4:7C:8A:66:88:2D:A0:EE:96:F2:68:55:FA:B8:DA:A7:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36972E8FA49347B52B6E12471FBFC7C507F21FC3BA20B30CECFAC0FC7E8EADE0/0/9FA4BDF47C8A66882DA0EE96F26855FAB8DAA78E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FA4BDF47C8A66882DA0EE96F26855FAB8DAA78E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36972E8FA49347B52B6E12471FBFC7C507F21FC3BA20B30CECFAC0FC7E8EADE0/0/323830333a3561303a3a2f33322d3438203d3e20323637373232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5a0::/32 Signature Algorithm: sha256WithRSAEncryption 67:a4:b2:5f:98:3b:74:0c:62:22:dc:6a:f8:28:11:e4:9b:0e: 9b:1f:3e:d6:1b:11:69:18:99:84:bc:1b:61:e8:18:29:da:af: e2:29:09:ec:bb:ee:a2:7c:2b:6d:1c:00:ee:67:c8:59:a7:d5: 29:b2:e6:ec:73:fd:3e:8e:fe:56:73:01:a5:be:ea:dc:ac:40: 99:34:a4:58:dc:9e:24:c8:2e:73:b8:47:dc:e1:02:e6:f8:66: 73:ed:6a:5a:a2:f9:8f:9e:4b:44:99:52:16:37:06:ac:b1:ec: e8:62:67:72:6e:1f:83:b3:0a:e6:a6:7c:e6:74:10:7c:ee:02: a9:c4:1f:74:71:69:db:1c:37:41:d9:17:20:22:c0:e5:a4:e0: 9e:17:8e:95:bd:b3:48:d7:06:a2:68:18:5f:07:95:9b:f5:76: d9:df:31:f2:ca:31:98:da:35:db:08:5e:ff:0c:cd:16:c0:c9: 72:f8:76:d3:0d:52:17:14:b9:3f:ca:79:d1:6a:f4:2f:10:bd: 5f:8c:65:c3:17:db:d9:5d:2e:88:47:70:3a:c2:13:22:21:61: b0:13:9f:44:45:c3:bb:9f:c9:cd:2a:be:1f:7e:fd:51:e7:41: 6b:7c:89:d6:16:ec:c9:7d:48:bb:5a:4f:ef:aa:e0:45:ed:b5: 28:be:7a:85 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUdI0CJyHK7PSm5ix0HD8h2GItb8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBNEJERjQ3QzhBNjY4ODJEQTBFRTk2RjI2ODU1RkFC OERBQTc4RTAeFw0yNjAxMDYxOTE2MzNaFw0yNzAxMDUxOTIxMzNaMDMxMTAvBgNV BAMTKDcxMDJFQzIxRERFQzBCMzVEMkI4MjIzNjAyNkIzNTY3ODQ2ODU5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSRSR4bQnVCISjxF8mqI/W1xyP 7PjrzaBfiKSE8XPC7sOwQarIaAoSh9+ZTYniYEE3q+XBR3X17+g5+EoLnRLKZYo2 VXIhkMBT71g04abHxsGBMUHvHY4UOTZd0MJ2ThHyL/l3SYqzoSr4SJ6V6QHNCxvu lB1LI7/HOiwie6CJa4Ts83spKgGLdYQ8k9x3HSQlE1S6RSS+/mci5k4O9XVjCknp Yj+ptMhFv9d0DGdyY3H7ZGsEPO4AyIc5qFCKfzmRmknZu8Y/j4Op3GXDDEnFTUyD MhYjP2F4RWAg8B2taCjNDupskw0Ui4LcHisxgHMHCAyNT7+LS/bmXBXtc8cVAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUcQLsId3sCzXSuCI2Ams1Z4RoWXYwHwYDVR0j BBgwFoAUn6S99HyKZogtoO6W8mhV+rjap44wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjk3MkU4RkE0OTM0N0I1MkI2RTEyNDcxRkJGQzdDNTA3 RjIxRkMzQkEyMEIzMENFQ0ZBQzBGQzdFOEVBREUwLzAvOUZBNEJERjQ3QzhBNjY4 ODJEQTBFRTk2RjI2ODU1RkFCOERBQTc4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RkE0QkRGNDdDOEE2Njg4MkRB MEVFOTZGMjY4NTVGQUI4REFBNzhFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzY5NzJFOEZBNDkzNDdCNTJCNkUxMjQ3MUZCRkM3QzUwN0YyMUZDM0JB MjBCMzBDRUNGQUMwRkM3RThFQURFMC8wLzMyMzgzMDMzM2EzNTYxMzAzYTNhMmYz MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzczNzMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwWgMA0G CSqGSIb3DQEBCwUAA4IBAQBnpLJfmDt0DGIi3Gr4KBHkmw6bHz7WGxFpGJmEvBth 6Bgp2q/iKQnsu+6ifCttHADuZ8hZp9Upsubsc/0+jv5WcwGlvurcrECZNKRY3J4k yC5zuEfc4QLm+GZz7WpaovmPnktEmVIWNwassezoYmdybh+DswrmpnzmdBB87gKp xB90cWnbHDdB2RcgIsDlpOCeF46VvbNI1waiaBhfB5Wb9XbZ3zHyyjGY2jXbCF7/ DM0WwMly+HbTDVIXFLk/ynnRavQvEL1fjGXDF9vZXS6IR3A6whMiIWGwE59ERcO7 n8nNKr4ffv1R50FrfInWFuzJfUi7Wk/vquBF7bUovnqF -----END CERTIFICATE-----Generated at Thu Jan 8 07:27:20 2026 by rpki-client