This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313130303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a313130303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: 5QGxlPxbZm1J1XMX5eEscnXEOGbyNT3gh7580ywPPYI= Subject key identifier: 7D:98:FD:66:82:D5:FB:A4:5D:63:37:BB:B2:C8:7D:3E:1F:1C:78:88 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 0838C412E238E4AAA3DF8BF644F9B6C98FAD5C8D Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313130303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:05 +0000 ROA not before: Tue 06 Jan 2026 20:44:05 +0000 ROA not after: Tue 05 Jan 2027 20:49:05 +0000 asID: 273072 IP address blocks: 2803:cf90:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:38:c4:12:e2:38:e4:aa:a3:df:8b:f6:44:f9:b6:c9:8f:ad:5c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:05 2026 GMT Not After : Jan 5 20:49:05 2027 GMT Subject: CN=7D98FD6682D5FBA45D6337BBB2C87D3E1F1C7888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:84:94:65:88:08:e1:13:7a:6d:63:1d:ec:50: 75:3c:f6:f1:07:28:c3:bf:40:50:52:b5:47:c5:54: f0:5a:ec:f4:9a:d0:f3:74:f8:6e:2c:7c:14:43:ae: e8:c4:16:f3:7a:7a:89:e0:e6:fd:20:a4:b7:64:83: 69:83:7a:38:ce:70:45:c8:18:48:88:56:08:7a:01: db:6c:3f:8d:ca:c5:15:4d:ea:33:af:83:33:2c:cf: 39:e3:21:db:bc:6e:66:29:3b:2e:44:f0:23:fa:aa: 52:13:30:46:73:64:37:2f:99:ed:d6:1d:0d:35:f3: 64:b5:a7:3b:c9:74:4a:a7:70:e5:f5:b5:b7:47:55: e4:22:6c:50:72:24:f2:5a:b8:47:f7:26:ff:b9:cd: 3d:39:40:bb:cf:61:b0:61:f2:b7:45:d2:c6:a2:f9: 30:c6:dd:ca:cd:b7:a5:d6:0e:1a:12:66:1e:76:f2: 88:e1:f7:2c:e8:e9:38:22:8c:f5:fb:ff:9d:5e:c5: 0d:e0:76:67:c8:1b:3e:88:9d:b1:0f:36:e9:c4:36: 2a:c6:37:0b:37:c0:e4:58:06:b6:d0:ee:3d:04:7c: f9:ed:d0:84:40:41:9f:33:83:c5:64:f3:29:3e:ed: 1d:17:28:32:4d:28:08:aa:a7:ae:e6:73:7d:d7:d0: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:98:FD:66:82:D5:FB:A4:5D:63:37:BB:B2:C8:7D:3E:1F:1C:78:88 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313130303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1100::/40 Signature Algorithm: sha256WithRSAEncryption 3c:b6:62:3c:37:b0:20:a1:2f:75:85:cb:c4:f3:d4:45:2c:ad: 66:ab:3d:58:c6:0b:dd:5b:b5:41:28:34:d6:6e:c3:ab:25:b4: 54:45:e7:94:d7:c6:75:cc:3b:ba:77:01:88:49:48:f7:fb:02: 59:10:cc:85:a2:4d:5e:f7:46:1f:d6:d4:4b:df:e0:27:a7:b7: f9:ad:94:ab:cb:f7:45:77:91:5e:8a:79:d5:f9:02:b4:64:db: eb:a8:4a:91:e4:c8:29:e3:86:9f:99:ea:f2:82:6d:ab:1c:d8: 67:a2:a4:13:6e:c0:7c:bf:a1:47:da:0b:36:4c:77:53:3c:6c: 38:73:c6:90:95:a6:15:cf:3a:4b:c0:3e:18:66:ec:01:76:b4: e3:32:10:e0:99:37:2d:ee:d9:51:47:a6:02:a1:02:31:59:6a: 92:3c:05:ca:ba:72:14:af:ab:21:aa:3c:fe:d5:1c:a7:ce:7d: e4:1a:41:e0:3b:50:54:86:f2:90:3c:70:b1:1d:aa:15:9c:22: e3:d3:cf:2a:df:40:97:9f:f9:e2:83:c8:00:d5:35:a7:56:eb: 01:46:34:08:24:41:57:83:2f:77:6f:cf:35:46:f3:8f:58:a3: 41:52:a2:97:ec:ce:d5:a7:cf:2b:01:e0:4e:a7:2a:c0:5c:a4: 71:65:f9:04 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUCDjEEuI45Kqj34v2RPm2yY+tXI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDVaFw0yNzAxMDUyMDQ5MDVaMDMxMTAvBgNV BAMTKDdEOThGRDY2ODJENUZCQTQ1RDYzMzdCQkIyQzg3RDNFMUYxQzc4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBhJRliAjhE3ptYx3sUHU89vEH KMO/QFBStUfFVPBa7PSa0PN0+G4sfBRDrujEFvN6eong5v0gpLdkg2mDejjOcEXI GEiIVgh6AdtsP43KxRVN6jOvgzMszznjIdu8bmYpOy5E8CP6qlITMEZzZDcvme3W HQ0182S1pzvJdEqncOX1tbdHVeQibFByJPJauEf3Jv+5zT05QLvPYbBh8rdF0sai +TDG3crNt6XWDhoSZh528ojh9yzo6TgijPX7/51exQ3gdmfIGz6InbEPNunENirG Nws3wORYBrbQ7j0EfPnt0IRAQZ8zg8Vk8yk+7R0XKDJNKAiqp67mc33X0LtvAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUfZj9ZoLV+6RdYze7ssh9Ph8ceIgwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QETANBgkqhkiG9w0BAQsFAAOCAQEAPLZiPDewIKEvdYXLxPPURSyt Zqs9WMYL3Vu1QSg01m7DqyW0VEXnlNfGdcw7uncBiElI9/sCWRDMhaJNXvdGH9bU S9/gJ6e3+a2Uq8v3RXeRXop51fkCtGTb66hKkeTIKeOGn5nq8oJtqxzYZ6KkE27A fL+hR9oLNkx3UzxsOHPGkJWmFc86S8A+GGbsAXa04zIQ4Jk3Le7ZUUemAqECMVlq kjwFyrpyFK+rIao8/tUcp8595BpB4DtQVIbykDxwsR2qFZwi49PPKt9Al5/54oPI ANU1p1brAUY0CCRBV4Mvd2/PNUbzj1ijQVKil+zO1afPKwHgTqcqwFykcWX5BA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:05 2026 by rpki-client