This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313330303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a313330303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: ACsGe8XBEwoNtVlyZws0Te/dYBktSGOR3g7BPVf4M/4= Subject key identifier: A1:94:82:19:F3:6B:F8:AC:AE:34:F4:E5:08:A2:32:2B:53:C5:39:BE Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 3EF34E4F089C32F1FAE2C232FEA3BF6CE423FECA Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313330303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:05 +0000 ROA not before: Tue 06 Jan 2026 20:44:05 +0000 ROA not after: Tue 05 Jan 2027 20:49:05 +0000 asID: 273072 IP address blocks: 2803:cf90:1300::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f3:4e:4f:08:9c:32:f1:fa:e2:c2:32:fe:a3:bf:6c:e4:23:fe:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:05 2026 GMT Not After : Jan 5 20:49:05 2027 GMT Subject: CN=A1948219F36BF8ACAE34F4E508A2322B53C539BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:a7:c6:76:7c:4e:0d:2d:f0:03:78:27:94: ca:a4:4d:c2:6d:f0:9e:12:15:04:4e:a2:a4:1b:f4: f3:6d:05:76:3c:c9:fe:ee:51:bd:8d:5e:ce:59:c7: b0:46:bd:5b:60:cf:f8:ea:96:a1:83:6f:2a:48:d4: fb:d0:e0:b4:cb:8e:ce:5b:59:c5:ce:cc:fb:fd:81: b6:15:ed:af:38:65:51:3a:69:87:ff:61:8f:d9:d2: 8a:30:74:a4:c0:45:64:29:7d:84:c1:5d:4c:6b:2d: a1:43:33:66:c6:ea:47:04:bc:eb:02:96:91:87:6f: 12:25:bd:e5:8a:52:4d:28:21:64:ae:f7:fe:09:b8: ad:36:e9:16:ba:98:dc:37:65:74:d6:12:7b:2c:8c: 61:e2:a9:9b:6c:38:80:f1:44:ea:0d:6d:2a:1c:85: 39:56:74:2f:b5:0c:01:37:f2:74:be:d9:fc:bc:c0: 9f:13:4b:62:c6:9c:50:df:27:cf:d8:14:94:75:d0: 15:ee:ae:72:2f:df:e1:dc:ba:5d:9e:93:ca:e7:4d: fa:31:94:c6:ec:58:99:5b:00:f9:6d:11:31:c5:3f: 07:16:3b:cb:8b:d1:2b:de:c5:2a:f3:c9:de:5f:bc: da:82:a2:b2:10:8c:aa:de:f1:73:66:27:ed:ad:d7: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:94:82:19:F3:6B:F8:AC:AE:34:F4:E5:08:A2:32:2B:53:C5:39:BE X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313330303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1300::/40 Signature Algorithm: sha256WithRSAEncryption 98:99:ca:f2:1e:73:d3:ba:02:15:a6:63:ed:e7:16:de:9d:3a: 1b:c1:2b:67:ec:a5:67:81:a9:cb:42:3a:c0:10:4d:fc:85:1e: c8:24:28:3e:f3:51:23:76:f0:11:93:1d:ca:cd:0d:82:98:09: b7:bf:23:7f:3e:b3:4e:37:2a:f6:19:7d:2c:b6:d5:c7:4c:9f: c3:37:ec:74:b8:e7:ad:6e:85:65:9c:8b:46:f9:c7:54:12:56: 78:bc:ca:de:e5:d7:d1:3f:fd:1b:1d:34:bd:32:8f:1b:77:21: d3:06:71:c2:a3:53:b8:91:61:80:67:7a:d7:fe:f8:83:1d:5b: f6:18:06:87:da:45:3b:e5:ef:9f:7d:20:56:65:da:e9:bd:63: 73:14:76:64:0b:56:64:d4:93:c2:cf:1e:4b:1e:67:e5:28:8b: 46:ef:ca:02:66:cd:65:e2:1d:61:10:c1:f7:86:93:e0:1c:d4: cd:9b:6f:5f:2f:d0:0c:0d:7a:9e:50:7d:6c:fe:df:fa:ba:9a: 86:41:d9:21:dd:95:11:21:2a:a1:ed:85:a7:85:ce:38:9b:42: d4:69:ac:86:38:72:45:4e:6e:6a:47:cf:58:9b:da:3a:9c:f4: 81:03:53:70:7f:e4:b8:43:6d:f9:7b:cf:ef:4f:27:e7:07:09: 33:30:6e:50 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUPvNOTwicMvH64sIy/qO/bOQj/sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDVaFw0yNzAxMDUyMDQ5MDVaMDMxMTAvBgNV BAMTKEExOTQ4MjE5RjM2QkY4QUNBRTM0RjRFNTA4QTIzMjJCNTNDNTM5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNqfGdnxODS3wA3gnlMqkTcJt 8J4SFQROoqQb9PNtBXY8yf7uUb2NXs5Zx7BGvVtgz/jqlqGDbypI1PvQ4LTLjs5b WcXOzPv9gbYV7a84ZVE6aYf/YY/Z0oowdKTARWQpfYTBXUxrLaFDM2bG6kcEvOsC lpGHbxIlveWKUk0oIWSu9/4JuK026Ra6mNw3ZXTWEnssjGHiqZtsOIDxROoNbSoc hTlWdC+1DAE38nS+2fy8wJ8TS2LGnFDfJ8/YFJR10BXurnIv3+Hcul2ek8rnTfox lMbsWJlbAPltETHFPwcWO8uL0SvexSrzyd5fvNqCorIQjKre8XNmJ+2t12JdAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUoZSCGfNr+KyuNPTlCKIyK1PFOb4wHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QEzANBgkqhkiG9w0BAQsFAAOCAQEAmJnK8h5z07oCFaZj7ecW3p06 G8ErZ+ylZ4Gpy0I6wBBN/IUeyCQoPvNRI3bwEZMdys0NgpgJt78jfz6zTjcq9hl9 LLbVx0yfwzfsdLjnrW6FZZyLRvnHVBJWeLzK3uXX0T/9Gx00vTKPG3ch0wZxwqNT uJFhgGd61/74gx1b9hgGh9pFO+Xvn30gVmXa6b1jcxR2ZAtWZNSTws8eSx5n5SiL Ru/KAmbNZeIdYRDB94aT4BzUzZtvXy/QDA16nlB9bP7f+rqahkHZId2VESEqoe2F p4XOOJtC1GmshjhyRU5uakfPWJvaOpz0gQNTcH/kuENt+XvP708n5wcJMzBuUA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:09 2026 by rpki-client