This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: 3IZVc2ipwtENRiJZVBDZeKPaZlDhrkHxcUj1a1d6MYs= Subject key identifier: C5:25:2B:57:5C:C4:18:68:BF:AC:F1:42:B5:E5:04:A8:3B:88:CA:30 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 26612083F9D8C05682F08A5FA8A6F54AD1C698BE Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:16 +0000 ROA not before: Tue 06 Jan 2026 20:44:16 +0000 ROA not after: Tue 05 Jan 2027 20:49:16 +0000 asID: 273072 IP address blocks: 2803:cf90:1500::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:61:20:83:f9:d8:c0:56:82:f0:8a:5f:a8:a6:f5:4a:d1:c6:98:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:16 2026 GMT Not After : Jan 5 20:49:16 2027 GMT Subject: CN=C5252B575CC41868BFACF142B5E504A83B88CA30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8c:c8:e0:52:f2:64:30:bd:d9:e6:0b:5a:8b: 4b:5e:97:14:17:9b:e4:ed:58:7a:68:44:4c:8b:23: a4:3f:48:c6:61:9b:77:ce:e9:0d:08:b4:e5:98:db: 6d:75:5d:26:fd:22:fa:9a:b4:46:28:f9:88:0b:af: 22:10:c5:fc:7d:f4:1f:05:16:c7:a8:67:66:43:09: aa:c0:e3:9b:f4:3f:2a:c0:29:c2:83:c5:e2:ac:26: 43:31:ff:e2:25:f5:85:ab:00:a8:3f:d7:df:85:ea: c8:a8:2a:33:cf:23:3f:22:8d:e3:8e:b8:08:05:1b: 8c:fe:30:90:5a:ca:72:5c:89:7f:22:c0:cc:47:f9: 06:cb:53:8e:c7:ba:53:7b:cd:ae:e4:d1:26:de:c1: 0f:ba:a8:cf:ed:45:30:6a:59:f5:35:f6:f7:73:af: 4d:69:25:5b:c9:a8:7f:6a:73:ac:9d:99:2a:b0:2d: 47:14:e6:78:77:51:02:6e:b9:4b:bc:c9:46:7a:c9: 63:87:1a:7d:2d:40:0a:be:c4:f7:42:f1:44:e3:bb: 79:48:d3:47:9e:3f:30:ea:2a:49:17:89:67:2c:21: fd:99:77:7f:b7:4b:c2:f7:b8:ff:7e:82:c0:82:be: 75:dd:79:0c:83:f3:14:ec:f8:ca:c2:d0:9f:f5:6f: 0b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:25:2B:57:5C:C4:18:68:BF:AC:F1:42:B5:E5:04:A8:3B:88:CA:30 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:1500::/40 Signature Algorithm: sha256WithRSAEncryption 2d:f3:5f:4e:3c:06:3b:29:9f:de:ec:09:ad:dd:f7:16:df:ea: 55:26:2d:a8:df:29:63:66:3b:a9:f9:37:b8:97:6c:e8:5d:9e: 82:79:1f:b9:d5:a5:2c:2a:9a:a1:5a:e4:a3:a1:45:75:f0:d1: 09:b5:cb:e0:f1:3b:bb:21:45:d1:a4:14:a3:a9:a6:af:5e:da: d7:db:e9:64:40:a3:eb:21:02:6d:da:29:d9:f8:dc:b0:77:88: 0e:f6:6d:47:dc:ee:9f:b2:80:4b:4c:d3:3e:bb:96:4b:04:34: f3:8c:6f:02:92:9f:03:a3:f6:2d:f1:ac:b4:59:4c:85:0b:59: f9:ea:a5:29:6a:17:bb:b3:94:2f:c2:5e:c3:ed:57:89:b9:dc: 64:19:39:8c:58:4f:8b:85:3c:aa:e1:ca:59:a8:79:0d:78:ee: d2:7a:e3:84:ba:7f:ae:17:0f:00:ed:e3:30:c8:6c:36:e6:40: 59:1e:38:ef:0c:5c:f8:49:93:1c:95:65:0f:74:14:13:50:a7: 30:35:60:6d:bc:2b:70:c2:26:a6:7a:cb:8a:06:5d:28:6b:e2: bb:77:6f:f9:68:ba:38:67:77:ad:3f:e9:ab:5e:65:60:da:cc: 24:75:8f:ad:47:f8:fe:05:97:4c:1e:30:12:17:bf:0e:e6:ba: 71:e1:a5:2c -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUJmEgg/nYwFaC8IpfqKb1StHGmL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTZaFw0yNzAxMDUyMDQ5MTZaMDMxMTAvBgNV BAMTKEM1MjUyQjU3NUNDNDE4NjhCRkFDRjE0MkI1RTUwNEE4M0I4OENBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmjMjgUvJkML3Z5gtai0telxQX m+TtWHpoREyLI6Q/SMZhm3fO6Q0ItOWY2211XSb9IvqatEYo+YgLryIQxfx99B8F FseoZ2ZDCarA45v0PyrAKcKDxeKsJkMx/+Il9YWrAKg/19+F6sioKjPPIz8ijeOO uAgFG4z+MJBaynJciX8iwMxH+QbLU47HulN7za7k0SbewQ+6qM/tRTBqWfU19vdz r01pJVvJqH9qc6ydmSqwLUcU5nh3UQJuuUu8yUZ6yWOHGn0tQAq+xPdC8UTju3lI 00eePzDqKkkXiWcsIf2Zd3+3S8L3uP9+gsCCvnXdeQyD8xTs+MrC0J/1bws9AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUxSUrV1zEGGi/rPFCteUEqDuIyjAwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz NTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QFTANBgkqhkiG9w0BAQsFAAOCAQEALfNfTjwGOymf3uwJrd33Ft/q VSYtqN8pY2Y7qfk3uJds6F2egnkfudWlLCqaoVrko6FFdfDRCbXL4PE7uyFF0aQU o6mmr17a19vpZECj6yECbdop2fjcsHeIDvZtR9zun7KAS0zTPruWSwQ084xvApKf A6P2LfGstFlMhQtZ+eqlKWoXu7OUL8Jew+1XibncZBk5jFhPi4U8quHKWah5DXju 0nrjhLp/rhcPAO3jMMhsNuZAWR447wxc+EmTHJVlD3QUE1CnMDVgbbwrcMImpnrL igZdKGviu3dv+Wi6OGd3rT/pq15lYNrMJHWPrUf4/gWXTB4wEhe/Dua6ceGlLA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:21:33 2026 by rpki-client