This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313230303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a313230303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: eB4hIcgDHk/TnOn96CfAq/Q1H3PiaYbm2fPHIORfJmo= Subject key identifier: B3:60:EC:7C:92:32:FE:BF:4A:F1:4A:76:E8:00:A4:40:E6:BB:3C:50 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 7E664ED31389526056973C736CAFFCEA60F6CC05 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313230303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:08 +0000 ROA not before: Tue 06 Jan 2026 20:44:08 +0000 ROA not after: Tue 05 Jan 2027 20:49:08 +0000 asID: 273072 IP address blocks: 2803:cf90:1200::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:66:4e:d3:13:89:52:60:56:97:3c:73:6c:af:fc:ea:60:f6:cc:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:08 2026 GMT Not After : Jan 5 20:49:08 2027 GMT Subject: CN=B360EC7C9232FEBF4AF14A76E800A440E6BB3C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:13:ca:df:00:e0:4a:43:f4:9a:99:95:b3: 03:33:a2:09:eb:5e:75:76:67:a6:8f:83:03:46:17: 3f:f6:fd:62:26:65:ad:82:1d:c0:76:c0:f4:e0:3d: 09:05:c2:ed:71:df:c8:af:d1:ff:94:28:dd:11:1f: 7b:25:79:16:51:b8:50:c8:21:96:50:ad:82:5b:3f: e3:c2:2e:4a:f7:e1:12:06:f1:45:37:88:89:d7:9b: 85:fe:69:1a:db:f3:58:d2:41:8a:b5:63:28:95:29: 9c:cc:7b:1c:8a:8e:c5:64:31:82:18:b1:a8:b9:4d: 34:ac:fa:47:2d:18:23:46:6c:1f:58:1f:ca:c3:55: a5:6f:36:f9:25:b6:9e:2c:db:8a:11:fe:5d:80:fa: ac:2f:0b:68:7a:cd:bb:21:d9:9d:5a:58:64:6b:1f: 8f:f9:2d:af:50:d9:64:92:e4:b4:ba:12:ec:e5:e5: f4:60:d4:58:96:62:e7:f8:bb:0e:87:63:93:14:29: 72:3f:c7:2c:e2:7c:58:37:61:18:23:45:81:c9:a7: e4:3f:68:ab:54:41:f9:6c:19:56:0d:0f:71:ac:36: 41:a4:22:43:75:fb:e1:c5:bb:23:30:6c:ee:1a:40: 1a:0f:31:d0:af:8e:24:44:e3:c6:7c:9c:3d:fd:88: b4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:60:EC:7C:92:32:FE:BF:4A:F1:4A:76:E8:00:A4:40:E6:BB:3C:50 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313230303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1200::/40 Signature Algorithm: sha256WithRSAEncryption 9d:54:c0:cd:30:1a:e0:f8:79:6c:fd:46:9a:f5:af:e9:72:5a: 4c:ba:69:e0:81:f8:99:86:68:e1:20:52:82:73:0d:6f:41:be: 60:f7:90:39:26:1e:5f:a9:87:79:d9:d7:7c:8c:fb:62:c7:c4: 69:fe:5d:d9:ec:73:d6:8d:7f:f2:73:10:5f:db:c3:eb:6f:54: 2d:78:f5:57:48:97:39:e4:55:d3:a4:fe:3d:06:93:2e:19:5a: 07:58:92:8a:44:f6:ae:fa:45:94:54:a0:e3:11:4f:f6:e8:8e: 77:cf:2d:e4:f8:8e:ca:cc:86:ee:bf:5d:e6:30:c4:35:c7:66: a0:42:e8:ae:ba:42:ff:54:60:2e:da:95:13:d3:0d:50:73:b2: 00:7d:7e:39:62:ea:75:85:a6:8a:ba:e4:3a:c2:24:6d:b6:7d: e8:47:9c:44:5b:04:34:32:7e:95:fb:d3:7c:ae:f2:f3:54:f2: 8f:87:3c:c9:53:1b:49:06:80:2d:b5:20:17:0e:a7:dd:48:d5: 2d:18:3a:44:17:f2:da:1d:2e:80:e3:3d:38:12:8d:f2:97:51: 8c:cc:a6:7a:fd:2b:83:da:b6:01:22:49:12:c3:a0:c1:14:64: f1:5c:4d:06:6d:bb:ae:59:4f:99:80:72:70:f0:51:38:25:9e: 85:8a:53:f2 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUfmZO0xOJUmBWlzxzbK/86mD2zAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDhaFw0yNzAxMDUyMDQ5MDhaMDMxMTAvBgNV BAMTKEIzNjBFQzdDOTIzMkZFQkY0QUYxNEE3NkU4MDBBNDQwRTZCQjNDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcsBPK3wDgSkP0mpmVswMzognr XnV2Z6aPgwNGFz/2/WImZa2CHcB2wPTgPQkFwu1x38iv0f+UKN0RH3sleRZRuFDI IZZQrYJbP+PCLkr34RIG8UU3iInXm4X+aRrb81jSQYq1YyiVKZzMexyKjsVkMYIY sai5TTSs+kctGCNGbB9YH8rDVaVvNvkltp4s24oR/l2A+qwvC2h6zbsh2Z1aWGRr H4/5La9Q2WSS5LS6Euzl5fRg1FiWYuf4uw6HY5MUKXI/xyzifFg3YRgjRYHJp+Q/ aKtUQflsGVYND3GsNkGkIkN1++HFuyMwbO4aQBoPMdCvjiRE48Z8nD39iLTVAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUs2DsfJIy/r9K8Up26ACkQOa7PFAwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QEjANBgkqhkiG9w0BAQsFAAOCAQEAnVTAzTAa4Ph5bP1GmvWv6XJa TLpp4IH4mYZo4SBSgnMNb0G+YPeQOSYeX6mHednXfIz7YsfEaf5d2exz1o1/8nMQ X9vD629ULXj1V0iXOeRV06T+PQaTLhlaB1iSikT2rvpFlFSg4xFP9uiOd88t5PiO ysyG7r9d5jDENcdmoELorrpC/1RgLtqVE9MNUHOyAH1+OWLqdYWmirrkOsIkbbZ9 6EecRFsENDJ+lfvTfK7y81Tyj4c8yVMbSQaALbUgFw6n3UjVLRg6RBfy2h0ugOM9 OBKN8pdRjMymev0rg9q2ASJJEsOgwRRk8VxNBm27rllPmYBycPBROCWehYpT8g== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:05 2026 by rpki-client