This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3816577243AA72C5487729A69C85807DF313F50A25F48F861A626F1307DDB51C/0/323830333a383039303a3a2f33322d3332203d3e20323732313332.roa File: 323830333a383039303a3a2f33322d3332203d3e20323732313332.roa (raw, json) Hash identifier: XETBUg14pW3opYajjLMrANlH/UCmKGZgRy6tvCnE2TI= Subject key identifier: A8:44:7B:9E:E1:67:25:FD:E5:DE:D3:23:D9:65:31:E4:EA:57:C7:A6 Certificate issuer: /CN=A85D1774E80F4CB0427BCEB9864ACD860B83AA04 Certificate serial: 5EF89ED69CD2D4B186C8C69DDB1C078912171554 Authority key identifier: A8:5D:17:74:E8:0F:4C:B0:42:7B:CE:B9:86:4A:CD:86:0B:83:AA:04 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85D1774E80F4CB0427BCEB9864ACD860B83AA04.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3816577243AA72C5487729A69C85807DF313F50A25F48F861A626F1307DDB51C/0/323830333a383039303a3a2f33322d3332203d3e20323732313332.roa Signing time: Tue 06 Jan 2026 19:07:27 +0000 ROA not before: Tue 06 Jan 2026 19:02:27 +0000 ROA not after: Tue 05 Jan 2027 19:07:27 +0000 asID: 272132 IP address blocks: 2803:8090::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3816577243AA72C5487729A69C85807DF313F50A25F48F861A626F1307DDB51C/0/A85D1774E80F4CB0427BCEB9864ACD860B83AA04.crl rsync://repository.lacnic.net/rpki/lacnic/3816577243AA72C5487729A69C85807DF313F50A25F48F861A626F1307DDB51C/0/A85D1774E80F4CB0427BCEB9864ACD860B83AA04.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85D1774E80F4CB0427BCEB9864ACD860B83AA04.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Jan 2026 16:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f8:9e:d6:9c:d2:d4:b1:86:c8:c6:9d:db:1c:07:89:12:17:15:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85D1774E80F4CB0427BCEB9864ACD860B83AA04 Validity Not Before: Jan 6 19:02:27 2026 GMT Not After : Jan 5 19:07:27 2027 GMT Subject: CN=A8447B9EE16725FDE5DED323D96531E4EA57C7A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:80:1c:b9:db:22:c3:f1:19:de:4c:cd:18: b3:08:f3:c6:30:2a:88:e0:ae:4d:1c:68:97:6c:fe: 05:a9:39:dc:4b:99:7c:23:e6:da:09:41:63:07:08: a8:99:19:e5:ff:94:ec:61:28:36:bd:6e:5c:44:ef: a0:94:3d:bb:00:35:b9:ff:4b:bf:3c:45:fc:61:9f: 2a:48:78:ee:0a:ae:75:e9:fa:15:02:e3:48:64:d6: 9b:e5:9b:c7:80:76:18:13:56:a0:51:37:13:d0:30: d6:ab:5a:51:cd:bc:f9:5c:4b:60:10:3a:1d:27:bc: bc:75:5c:9b:2e:eb:24:11:5c:f3:f8:d6:b0:1e:bb: bd:5a:07:d2:e1:5b:5f:da:bb:89:8a:8f:31:52:7c: 52:64:69:a5:5d:b1:81:ac:43:0b:04:04:07:cf:a7: 04:14:93:c0:78:5c:c9:c4:3c:9c:8a:29:f8:52:8b: b0:9b:04:93:bc:3d:19:30:b5:ad:73:b0:5e:d9:25: 48:20:9f:9d:6e:be:a5:58:4f:7c:f3:15:fe:fd:47: 2b:94:e4:f9:ab:14:a0:e5:62:6e:32:f3:ff:0a:bf: 1f:50:06:2e:fc:bd:11:71:a6:71:b9:43:fe:25:7c: 94:21:40:23:4b:b0:db:2c:1a:fa:20:51:e1:32:64: 15:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:44:7B:9E:E1:67:25:FD:E5:DE:D3:23:D9:65:31:E4:EA:57:C7:A6 X509v3 Authority Key Identifier: keyid:A8:5D:17:74:E8:0F:4C:B0:42:7B:CE:B9:86:4A:CD:86:0B:83:AA:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3816577243AA72C5487729A69C85807DF313F50A25F48F861A626F1307DDB51C/0/A85D1774E80F4CB0427BCEB9864ACD860B83AA04.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85D1774E80F4CB0427BCEB9864ACD860B83AA04.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3816577243AA72C5487729A69C85807DF313F50A25F48F861A626F1307DDB51C/0/323830333a383039303a3a2f33322d3332203d3e20323732313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8090::/32 Signature Algorithm: sha256WithRSAEncryption 51:4b:e9:bc:b4:69:db:6b:d3:e7:be:98:c1:f3:09:5e:2d:57: 72:91:d6:0f:b0:72:24:69:46:60:33:c9:70:03:8a:da:e1:e0: 70:a7:0a:fd:9b:0f:af:80:ca:55:e6:3f:32:20:5b:63:58:99: 86:4a:a2:41:50:85:fc:62:29:95:14:28:8e:a0:4b:90:19:b2: b6:7b:35:d1:87:5a:49:aa:94:5b:87:19:42:3b:67:ba:2b:3d: 3a:0f:94:d8:e3:b6:39:ea:66:82:e9:ec:50:b6:71:81:f3:f4: d2:03:32:8d:5c:99:66:0e:6f:01:be:db:3d:7a:f5:4e:47:cf: b5:49:a7:e9:76:55:94:6b:35:16:28:91:f1:a5:d7:91:f1:99: ea:81:aa:e3:88:f9:8b:56:d9:b0:de:ce:3e:3f:d1:3e:43:32: 55:9f:85:bf:80:ed:73:57:82:41:98:67:3c:01:3c:f9:9c:ce: 02:9d:d4:51:35:e1:25:34:db:23:20:5d:50:af:6c:b5:64:4e: e6:99:b1:78:c2:31:79:9a:a0:c3:e3:01:c9:4c:39:af:18:a0: 1c:21:c1:8b:8e:a1:30:53:06:70:fb:bb:17:c0:1e:84:f5:ba: fe:56:e6:a7:1e:d4:82:eb:0e:9a:ad:4d:1a:c5:ca:93:f9:86: f4:bc:de:d3 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUXvie1pzS1LGGyMad2xwHiRIXFVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1RDE3NzRFODBGNENCMDQyN0JDRUI5ODY0QUNEODYw QjgzQUEwNDAeFw0yNjAxMDYxOTAyMjdaFw0yNzAxMDUxOTA3MjdaMDMxMTAvBgNV BAMTKEE4NDQ3QjlFRTE2NzI1RkRFNURFRDMyM0Q5NjUzMUU0RUE1N0M3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0b4Acudsiw/EZ3kzNGLMI88Yw Kojgrk0caJds/gWpOdxLmXwj5toJQWMHCKiZGeX/lOxhKDa9blxE76CUPbsANbn/ S788RfxhnypIeO4KrnXp+hUC40hk1pvlm8eAdhgTVqBRNxPQMNarWlHNvPlcS2AQ Oh0nvLx1XJsu6yQRXPP41rAeu71aB9LhW1/au4mKjzFSfFJkaaVdsYGsQwsEBAfP pwQUk8B4XMnEPJyKKfhSi7CbBJO8PRkwta1zsF7ZJUggn51uvqVYT3zzFf79RyuU 5PmrFKDlYm4y8/8Kvx9QBi78vRFxpnG5Q/4lfJQhQCNLsNssGvogUeEyZBVxAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUqER7nuFnJf3l3tMj2WUx5OpXx6YwHwYDVR0j BBgwFoAUqF0XdOgPTLBCe865hkrNhguDqgQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zODE2NTc3MjQzQUE3MkM1NDg3NzI5QTY5Qzg1ODA3REYz MTNGNTBBMjVGNDhGODYxQTYyNkYxMzA3RERCNTFDLzAvQTg1RDE3NzRFODBGNENC MDQyN0JDRUI5ODY0QUNEODYwQjgzQUEwNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODVEMTc3NEU4MEY0Q0IwNDI3 QkNFQjk4NjRBQ0Q4NjBCODNBQTA0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzgxNjU3NzI0M0FBNzJDNTQ4NzcyOUE2OUM4NTgwN0RGMzEzRjUwQTI1 RjQ4Rjg2MUE2MjZGMTMwN0REQjUxQy8wLzMyMzgzMDMzM2EzODMwMzkzMDNhM2Ey ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMjMxMzMzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDgJAw DQYJKoZIhvcNAQELBQADggEBAFFL6by0adtr0+e+mMHzCV4tV3KR1g+wciRpRmAz yXADitrh4HCnCv2bD6+AylXmPzIgW2NYmYZKokFQhfxiKZUUKI6gS5AZsrZ7NdGH WkmqlFuHGUI7Z7orPToPlNjjtjnqZoLp7FC2cYHz9NIDMo1cmWYObwG+2z169U5H z7VJp+l2VZRrNRYokfGl15HxmeqBquOI+YtW2bDezj4/0T5DMlWfhb+A7XNXgkGY ZzwBPPmczgKd1FE14SU02yMgXVCvbLVkTuaZsXjCMXmaoMPjAclMOa8YoBwhwYuO oTBTBnD7uxfAHoT1uv5W5qce1ILrDpqtTRrFypP5hvS83tM= -----END CERTIFICATE-----Generated at Wed Jan 7 04:12:50 2026 by rpki-client