This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e2033353439.roa File: 323830313a303a3434303a3a2f34382d3438203d3e2033353439.roa (raw, json) Hash identifier: rkkNTXeiYjphKe7gXMBQvAVNyUmRJD/r1af+XNdA3wI= Subject key identifier: D8:AB:2A:EF:4D:88:5C:DD:CD:51:51:25:AD:D6:9B:34:91:1D:82:E5 Certificate issuer: /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F Certificate serial: 08BF29B1C18899714E7004A092C5A8B3EC329A15 Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e2033353439.roa Signing time: Tue 06 Jan 2026 19:31:18 +0000 ROA not before: Tue 06 Jan 2026 19:26:18 +0000 ROA not after: Tue 05 Jan 2027 19:31:18 +0000 asID: 3549 IP address blocks: 2801:0:440::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Jan 2026 11:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bf:29:b1:c1:88:99:71:4e:70:04:a0:92:c5:a8:b3:ec:32:9a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F Validity Not Before: Jan 6 19:26:18 2026 GMT Not After : Jan 5 19:31:18 2027 GMT Subject: CN=D8AB2AEF4D885CDDCD515125ADD69B34911D82E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d9:c8:ae:45:32:f4:c2:90:c6:56:93:f6:5c: 2a:3d:a4:7a:dd:b9:d4:e0:30:1a:67:5c:ad:14:da: ab:fa:f4:6c:28:d2:36:ca:a0:aa:dc:ff:4e:2f:29: dd:a2:e3:a5:b5:49:c9:47:94:69:e6:99:75:38:38: ae:63:6b:bb:3f:e8:60:29:a0:12:eb:b1:56:ee:08: 7e:e5:fe:4d:80:f0:2d:31:63:3c:2d:25:42:3e:d1: 59:1d:e4:10:8d:db:be:a8:ea:22:61:fa:54:25:da: 8a:a6:87:37:b4:32:7b:da:e3:da:8e:58:c3:3e:56: 7a:8f:69:8c:22:4e:6a:32:29:f4:6b:37:9c:98:cd: bb:93:4d:a8:fe:15:0a:b0:76:ba:ed:55:63:92:b2: 52:45:f4:c7:b7:0a:bc:49:f4:a9:57:18:fa:29:37: 02:8d:fd:42:d1:e8:99:26:26:d8:78:29:54:27:b9: 14:ee:53:cd:dd:0e:86:6a:99:3c:13:ce:13:bb:c0: cf:05:28:ac:81:e5:81:cd:a0:58:c8:4c:a4:6b:b9: d4:8f:71:64:44:c4:fa:ac:17:9d:4e:2f:85:59:31: 6f:2a:05:15:26:ce:0a:ef:06:fa:0b:1d:d4:7d:66: aa:ac:15:29:e1:c9:7b:cc:1c:79:1a:a3:f5:ce:fb: 26:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AB:2A:EF:4D:88:5C:DD:CD:51:51:25:AD:D6:9B:34:91:1D:82:E5 X509v3 Authority Key Identifier: keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e2033353439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:0:440::/48 Signature Algorithm: sha256WithRSAEncryption ba:50:88:ce:37:48:83:41:bb:cd:69:b5:da:a1:c6:85:c8:70: c1:4d:bf:b6:5b:63:27:d0:35:25:88:9d:66:fc:56:26:80:18: 50:5f:d6:6c:45:11:64:85:78:65:f7:2c:54:32:c2:9b:b7:de: ba:e7:f5:a8:02:dc:20:84:0d:a0:6c:ac:2f:41:7b:59:09:6e: 91:bf:40:7c:1e:a9:e1:5d:7c:a3:5f:3c:92:d5:b7:ed:b1:59: 5d:70:ab:17:41:0f:9a:36:16:f2:fd:01:31:d9:96:96:67:37: a5:7c:fe:39:4c:e0:2c:4c:3d:41:fa:2f:f2:bf:6d:ba:a0:87: 8a:5d:29:5e:f8:8d:27:fc:39:93:b7:a7:f1:36:46:a6:d7:f3: 9e:79:1f:e0:94:be:0a:f7:ed:8a:85:01:32:85:e3:a9:5e:e8: 39:20:54:96:be:ad:c4:6a:0c:19:09:9b:41:d7:f7:ce:44:b4: 34:cc:7d:f9:f4:9a:4c:36:1b:c4:2a:27:e1:ed:59:f0:fe:c1: bd:10:4a:cf:d4:df:81:46:20:ef:fd:42:a7:3a:60:f5:be:fa: ad:11:d3:06:64:e8:bb:8f:50:45:1f:31:68:f9:ef:24:2a:78: c2:22:e9:06:bb:44:06:cc:e7:4e:81:03:59:94:23:55:a5:c0: 56:ad:91:40 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUCL8pscGImXFOcASgksWos+wymhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG QzdBNTc3RjAeFw0yNjAxMDYxOTI2MThaFw0yNzAxMDUxOTMxMThaMDMxMTAvBgNV BAMTKEQ4QUIyQUVGNEQ4ODVDRERDRDUxNTEyNUFERDY5QjM0OTExRDgyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz2ciuRTL0wpDGVpP2XCo9pHrd udTgMBpnXK0U2qv69Gwo0jbKoKrc/04vKd2i46W1SclHlGnmmXU4OK5ja7s/6GAp oBLrsVbuCH7l/k2A8C0xYzwtJUI+0Vkd5BCN276o6iJh+lQl2oqmhze0Mnva49qO WMM+VnqPaYwiTmoyKfRrN5yYzbuTTaj+FQqwdrrtVWOSslJF9Me3CrxJ9KlXGPop NwKN/ULR6JkmJth4KVQnuRTuU83dDoZqmTwTzhO7wM8FKKyB5YHNoFjITKRrudSP cWRExPqsF51OL4VZMW8qBRUmzgrvBvoLHdR9ZqqsFSnhyXvMHHkao/XO+yYbAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQU2Ksq702IXN3NUVElrdabNJEdguUwHwYDVR0j BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5 QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2 MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0 N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMyMzgzMDMxM2EzMDNhMzQzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzNTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQAABEAw DQYJKoZIhvcNAQELBQADggEBALpQiM43SINBu81ptdqhxoXIcMFNv7ZbYyfQNSWI nWb8ViaAGFBf1mxFEWSFeGX3LFQywpu33rrn9agC3CCEDaBsrC9Be1kJbpG/QHwe qeFdfKNfPJLVt+2xWV1wqxdBD5o2FvL9ATHZlpZnN6V8/jlM4CxMPUH6L/K/bbqg h4pdKV74jSf8OZO3p/E2RqbX8555H+CUvgr37YqFATKF46le6DkgVJa+rcRqDBkJ m0HX985EtDTMffn0mkw2G8QqJ+HtWfD+wb0QSs/U34FGIO/9Qqc6YPW++q0R0wZk 6LuPUEUfMWj57yQqeMIi6Qa7RAbM506BA1mUI1WlwFatkUA= -----END CERTIFICATE-----Generated at Sun Jan 11 06:52:06 2026 by rpki-client