This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313430303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a313430303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: oaGENJ+NeKYbU33rfUXHkeKDixijQO5CyTS4vU22IZo= Subject key identifier: 99:39:0E:96:E1:28:7F:CB:BC:80:32:2B:37:93:C0:D5:62:58:7A:73 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 3734A4183D4A0617F0C97E2A1BB4DB01B35241CF Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313430303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:03 +0000 ROA not before: Tue 06 Jan 2026 20:44:03 +0000 ROA not after: Tue 05 Jan 2027 20:49:03 +0000 asID: 273072 IP address blocks: 2803:cf90:1400::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:34:a4:18:3d:4a:06:17:f0:c9:7e:2a:1b:b4:db:01:b3:52:41:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:03 2026 GMT Not After : Jan 5 20:49:03 2027 GMT Subject: CN=99390E96E1287FCBBC80322B3793C0D562587A73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:d4:71:88:81:79:36:1c:2c:41:61:96:ba: 8b:3e:33:a9:a0:ff:21:2e:53:cf:ac:09:94:59:cb: e3:90:d4:cb:ab:6c:db:db:55:9b:73:a3:5c:1b:c6: b3:1c:e8:62:b1:e6:c8:21:73:b8:22:5f:d9:dd:72: 93:84:ea:1e:c7:51:38:f3:c2:d8:40:4f:ae:af:3f: 33:c9:99:bf:07:f9:1b:ba:0b:92:25:86:d8:7a:89: b3:58:1f:4f:16:2b:d8:48:7d:20:29:6b:70:56:2e: 70:81:18:d4:61:dd:59:18:d4:89:7f:20:28:3a:00: db:6a:0f:b9:d7:33:a7:ae:c6:d9:55:25:28:84:e0: f1:be:a2:7d:5a:97:35:55:8d:56:9a:b1:bb:c7:8a: 6e:b1:ad:d9:70:c9:6a:9b:5e:61:52:3f:fc:14:b6: 25:04:64:1f:60:72:9f:3f:92:26:82:43:6d:de:2b: 4b:68:bf:50:00:0b:51:0b:e2:6e:b6:fa:04:2b:f5: d9:bb:71:d2:20:71:4b:42:6e:af:80:df:86:ce:ed: 0b:a9:88:db:c0:03:a2:1b:3b:2d:c7:66:49:45:12: 71:df:54:5b:29:83:3a:c5:92:b7:ea:8c:2d:f9:36: e5:88:14:fd:85:74:7c:26:ea:a2:bf:22:42:47:f7: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:39:0E:96:E1:28:7F:CB:BC:80:32:2B:37:93:C0:D5:62:58:7A:73 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313430303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1400::/40 Signature Algorithm: sha256WithRSAEncryption 8d:11:38:7f:f1:1b:c0:8c:59:aa:cd:af:3f:09:50:5f:71:f7: df:3d:6d:9f:28:44:c7:57:6b:5c:30:98:a4:75:20:47:30:94: 24:77:c8:92:2b:9e:fe:f1:fa:3e:05:71:7e:5c:c3:32:27:ae: 88:5a:01:76:95:88:d6:76:ca:06:fb:bc:6e:51:f8:4e:38:8c: e1:ee:9e:ef:8d:b4:2c:25:2a:cf:e3:db:b3:c7:9c:9d:d5:66: b4:68:74:8c:e2:93:c5:a7:69:6a:ca:3f:21:e5:2b:f4:09:85: 8f:93:5f:e1:c2:aa:e6:7a:f7:21:5e:74:3b:08:1c:1d:1c:3e: b6:60:c1:4a:87:ff:4f:88:fe:31:49:c7:7a:f6:d7:b1:d5:62: 9e:00:da:35:d7:10:01:8b:81:95:07:44:3b:61:ac:58:d1:df: a9:f2:eb:99:68:d4:5c:c7:10:39:be:7d:f5:4f:a7:51:cb:1c: 86:2c:68:94:9c:f3:f9:ee:ac:cb:61:67:91:53:d2:9d:74:a8: 78:e3:5a:73:c9:9a:c1:10:84:8d:f2:e1:91:51:dc:20:8c:11: bf:45:bc:1c:4e:4e:d8:0a:e4:44:f6:3a:c3:cb:3e:d0:c6:4f: ec:2a:16:76:1d:55:a7:e1:85:56:0a:bc:25:4e:6d:fe:11:66: fc:15:d6:c7 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUNzSkGD1KBhfwyX4qG7TbAbNSQc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MDNaFw0yNzAxMDUyMDQ5MDNaMDMxMTAvBgNV BAMTKDk5MzkwRTk2RTEyODdGQ0JCQzgwMzIyQjM3OTNDMEQ1NjI1ODdBNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRptRxiIF5NhwsQWGWuos+M6mg /yEuU8+sCZRZy+OQ1MurbNvbVZtzo1wbxrMc6GKx5sghc7giX9ndcpOE6h7HUTjz wthAT66vPzPJmb8H+Ru6C5Ilhth6ibNYH08WK9hIfSApa3BWLnCBGNRh3VkY1Il/ ICg6ANtqD7nXM6euxtlVJSiE4PG+on1alzVVjVaasbvHim6xrdlwyWqbXmFSP/wU tiUEZB9gcp8/kiaCQ23eK0tov1AAC1EL4m62+gQr9dm7cdIgcUtCbq+A34bO7Qup iNvAA6IbOy3HZklFEnHfVFspgzrFkrfqjC35NuWIFP2FdHwm6qK/IkJH9yPXAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUmTkOluEof8u8gDIrN5PA1WJYenMwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz NDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QFDANBgkqhkiG9w0BAQsFAAOCAQEAjRE4f/EbwIxZqs2vPwlQX3H3 3z1tnyhEx1drXDCYpHUgRzCUJHfIkiue/vH6PgVxflzDMieuiFoBdpWI1nbKBvu8 blH4TjiM4e6e7420LCUqz+Pbs8ecndVmtGh0jOKTxadpaso/IeUr9AmFj5Nf4cKq 5nr3IV50OwgcHRw+tmDBSof/T4j+MUnHevbXsdVingDaNdcQAYuBlQdEO2GsWNHf qfLrmWjUXMcQOb599U+nUcschixolJzz+e6sy2FnkVPSnXSoeONac8mawRCEjfLh kVHcIIwRv0W8HE5O2ArkRPY6w8s+0MZP7CoWdh1Vp+GFVgq8JU5t/hFm/BXWxw== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:08 2026 by rpki-client