This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313030303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a313030303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: ZVWzQM1v0H7nFcdjEK8uSJT4JHLHV4WoHy7NQRwhzu4= Subject key identifier: 7C:CF:47:5D:4B:44:2A:02:D5:00:F9:FA:9F:65:FE:FD:D6:38:BC:65 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 21448BD56075F62A102F5CC620DF60B04660ED90 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313030303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:12 +0000 ROA not before: Tue 06 Jan 2026 20:44:12 +0000 ROA not after: Tue 05 Jan 2027 20:49:12 +0000 asID: 273072 IP address blocks: 2803:cf90:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:44:8b:d5:60:75:f6:2a:10:2f:5c:c6:20:df:60:b0:46:60:ed:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:12 2026 GMT Not After : Jan 5 20:49:12 2027 GMT Subject: CN=7CCF475D4B442A02D500F9FA9F65FEFDD638BC65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:40:ac:b3:a3:4a:9c:0e:66:38:3b:15:35: c3:90:44:b8:13:1b:d7:e1:ce:df:7f:cc:eb:19:ee: 80:a8:71:95:2c:a3:db:aa:f2:d4:2e:92:7e:0a:82: 48:1f:ae:eb:65:ae:cd:b3:73:57:0d:ab:65:f0:85: 57:4d:a4:9d:bc:e2:59:4b:2a:78:18:e8:65:c4:41: 80:bd:5e:75:a3:47:4f:59:a8:f7:fe:e8:54:1e:42: 15:0e:04:80:be:2d:2e:ea:a8:80:ed:5c:72:46:26: 32:b3:cf:f0:ba:f8:7d:d2:cc:8d:0d:29:d3:f8:44: 90:48:b2:e4:23:9e:80:8d:b9:20:85:33:fd:49:0f: 72:12:59:48:9f:c6:d3:20:76:37:78:1e:67:1c:66: 8e:e1:78:f5:e8:de:02:fc:3c:64:aa:03:a2:6e:04: 57:62:84:2c:f3:15:67:be:f0:9e:9f:29:4a:38:89: 44:f1:16:53:0b:8d:bf:a6:1e:ae:bc:c7:e9:2c:82: 98:8c:24:50:9f:aa:03:da:71:64:22:6f:3a:88:46: b3:97:b6:6b:ee:f8:3f:a9:fd:58:27:4b:96:51:40: 8d:c5:57:e5:2b:13:70:07:af:c8:c0:6c:62:2a:ea: 07:7d:a3:32:a5:8b:07:09:9b:24:16:7a:35:9d:b3: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CF:47:5D:4B:44:2A:02:D5:00:F9:FA:9F:65:FE:FD:D6:38:BC:65 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313030303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1000::/40 Signature Algorithm: sha256WithRSAEncryption 71:c6:dd:fa:04:f4:a0:63:9f:5e:9f:8c:6f:cd:50:ee:04:97: 8d:5f:78:37:ee:54:b6:f6:47:76:23:2f:75:d2:2e:3d:84:e7: ac:7b:9a:c7:75:ff:e2:3a:25:24:33:08:3a:1a:37:57:3f:e0: 92:dc:fc:d6:65:c4:a7:be:33:ba:e3:31:e4:e4:79:fa:1e:16: f0:f7:83:06:ca:16:0a:25:bd:f0:08:31:8a:6c:e7:03:dd:5e: c5:68:bb:7a:b2:c9:4b:8c:43:a7:dd:44:fd:57:91:15:38:58: 1d:88:ea:07:24:4b:25:67:fb:54:f7:78:87:f4:74:54:6d:37: ff:8f:16:35:7e:b7:ce:ef:da:bf:4a:87:45:8d:dd:e3:7b:7a: e6:bd:c0:82:b9:98:df:fc:85:23:8b:68:5e:c9:e1:08:fd:8d: 70:72:14:7d:c8:41:00:09:f7:ee:3e:08:01:d0:7f:5d:d0:03: 12:04:8f:26:03:d3:70:66:15:b9:be:23:33:f2:de:66:08:dc: 59:fc:60:8f:c1:44:e3:84:7f:f6:cd:37:b3:c0:cd:33:74:a6: fe:8f:de:0f:2b:16:e8:e7:3e:ea:d8:d3:8a:38:97:35:cf:d6: 22:97:59:71:f4:51:95:0d:e1:b3:55:48:9e:c5:b6:a2:ec:12: f1:21:f1:63 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUIUSL1WB19ioQL1zGIN9gsEZg7ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTJaFw0yNzAxMDUyMDQ5MTJaMDMxMTAvBgNV BAMTKDdDQ0Y0NzVENEI0NDJBMDJENTAwRjlGQTlGNjVGRUZERDYzOEJDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiH0Css6NKnA5mODsVNcOQRLgT G9fhzt9/zOsZ7oCocZUso9uq8tQukn4Kgkgfrutlrs2zc1cNq2XwhVdNpJ284llL KngY6GXEQYC9XnWjR09ZqPf+6FQeQhUOBIC+LS7qqIDtXHJGJjKzz/C6+H3SzI0N KdP4RJBIsuQjnoCNuSCFM/1JD3ISWUifxtMgdjd4HmccZo7hePXo3gL8PGSqA6Ju BFdihCzzFWe+8J6fKUo4iUTxFlMLjb+mHq68x+ksgpiMJFCfqgPacWQibzqIRrOX tmvu+D+p/VgnS5ZRQI3FV+UrE3AHr8jAbGIq6gd9ozKliwcJmyQWejWds18dAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUfM9HXUtEKgLVAPn6n2X+/dY4vGUwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz MDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QEDANBgkqhkiG9w0BAQsFAAOCAQEAccbd+gT0oGOfXp+Mb81Q7gSX jV94N+5UtvZHdiMvddIuPYTnrHuax3X/4jolJDMIOho3Vz/gktz81mXEp74zuuMx 5OR5+h4W8PeDBsoWCiW98AgximznA91exWi7erLJS4xDp91E/VeRFThYHYjqByRL JWf7VPd4h/R0VG03/48WNX63zu/av0qHRY3d43t65r3AgrmY3/yFI4toXsnhCP2N cHIUfchBAAn37j4IAdB/XdADEgSPJgPTcGYVub4jM/LeZgjcWfxgj8FE44R/9s03 s8DNM3Sm/o/eDysW6Oc+6tjTijiXNc/WIpdZcfRRlQ3hs1VInsW2ouwS8SHxYw== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:06 2026 by rpki-client